# ObservMe extension environment example.
#
# Option A: export these variables in your shell before starting Pi.
# Option B: copy this file to .env in the project root and fill values there.
# System environment variables override values from .env. Never commit .env.

# Core extension settings
OBSERVME_ENABLED=true
OBSERVME_ENVIRONMENT=development
OBSERVME_TENANT=local-dev

# Local OpenTelemetry Collector endpoint used by the bundled observability-stack.
OBSERVME_OTLP_ENDPOINT=http://localhost:4318
OBSERVME_OTLP_PROTOCOL=http/protobuf
OBSERVME_OTLP_TIMEOUT_MS=3000

# Active-agent lease duration. Must be 10000-300000 ms and at least
# twice the metric export interval plus 5000 ms of clock-skew margin.
OBSERVME_ACTIVE_AGENT_LEASE_DURATION_MS=60000

# Optional OTLP bearer token for remote/secured collectors. Leave blank for local dev.
OBSERVME_OTLP_TOKEN=

# Grafana query settings for /obs health, /obs cost, /obs tools, /obs logs, /obs agents, and /obs trace.
# The bundled stack exposes authenticated Grafana through Nginx at http://localhost.
OBSERVME_GRAFANA_URL=http://localhost

# Choose one Grafana auth mode.
# Preferred: create a Grafana service-account token with Viewer access and set it here.
# OBSERVME_GRAFANA_TOKEN=glsa_your_service_account_token

# Local fallback: use Basic auth. For the bundled stack, copy the password from
# observability-stack/secrets/grafana_admin_password.
OBSERVME_GRAFANA_USERNAME=admin
OBSERVME_GRAFANA_PASSWORD=

# Bundled stack datasource UIDs. Change only if your Grafana datasource UIDs differ.
OBSERVME_GRAFANA_TEMPO_DATASOURCE_UID=tempo
OBSERVME_GRAFANA_LOKI_DATASOURCE_UID=loki
OBSERVME_GRAFANA_PROMETHEUS_DATASOURCE_UID=prometheus

# The bundled endpoint is plain local HTTP, so TLS bypass is unnecessary.
# Keep false for production HTTPS and trust the deployment CA.
OBSERVME_GRAFANA_TLS_INSECURE_SKIP_VERIFY=false

# localhost does not require forced IPv4 in the bundled profile.
OBSERVME_GRAFANA_PREFER_IPV4=false

# Optional capture/debug toggles. Keep disabled unless you intentionally need local debugging.
OBSERVME_CAPTURE_PROMPTS=false
OBSERVME_CAPTURE_RESPONSES=false
OBSERVME_CAPTURE_THINKING=false
OBSERVME_CAPTURE_TOOL_ARGUMENTS=false
OBSERVME_CAPTURE_TOOL_RESULTS=false
OBSERVME_CAPTURE_BASH_COMMANDS=false
OBSERVME_CAPTURE_BASH_OUTPUT=false
OBSERVME_CAPTURE_FILE_PATHS=false
OBSERVME_REDACTION_ENABLED=true
# Required when redaction is enabled and any capture flag above is true.
# Generate a project-local value with: openssl rand -hex 32
OBSERVME_HASH_SALT=
OBSERVME_ALLOW_UNSAFE_CAPTURE=false
OBSERVME_ALLOW_INSECURE_TRANSPORT=true