example.env

# Sample .env file
# Use scripts/setup_dev.py to scaffold your .env with auto-generated values for the missing secrets.

AIRFLOW__API_AUTH__JWT_SECRET=
# @see https://airflow.apache.org/docs/apache-airflow/stable/security/secrets/fernet.html#generating-fernet-key
AIRFLOW__CORE__FERNET_KEY=
AIRFLOW_UID=49003

# Set KeyCloak's logging level. "DEBUG" can be useful when
# digging into an auth/config error, but it's *extremely* verbose.
KC_LOG_LEVEL=INFO

MOKELUMNE_TIND_DOWNLOAD_DIR="/opt/airflow/download"

OIDC_ADMIN_GROUP="cn=edu:berkeley:org:libr:mokelumne:admins,ou=campus groups,dc=berkeley,dc=edu"
OIDC_CLIENT_ID=mokelumne
OIDC_CLIENT_SECRET=
OIDC_NAME="keycloak"
OIDC_USER_GROUP="cn=edu:berkeley:org:libr:mokelumne:users,ou=campus groups,dc=berkeley,dc=edu"
OIDC_WELL_KNOWN="http://keycloak:8180/realms/berkeley-local/.well-known/openid-configuration"

# TBD
TIND_API_KEY=
TIND_API_URL=

LANGFUSE_HOST=https://us.cloud.langfuse.com
LANGFUSE_SECRET_KEY=sk-lf-blah-blah-blah
LANGFUSE_PUBLIC_KEY=pk-lf-blah-blah-blah

AWS_ENDPOINT_URL=https://bedrock-runtime.us-west-1.amazonaws.com
AWS_DEFAULT_REGION=us-west-1
AWS_BEARER_TOKEN_BEDROCK=bedrock-api-key-blah-blah-blah
AWS_MODEL_ID=us.anthropic.claude-haiku-4-5-20251001-v1:0
AWS_MODEL_LABEL=Claude Haiku 4.5
AWS_MODEL_PROVIDER=anthropic

# --- E2E browser test configuration (test/e2e/) ---
# To run pytest from your host workstation (not `docker compose exec`),
# uncomment and override the WS endpoint to reach the sidecar via its
# published port:
#PYTEST_PLAYWRIGHT_WS_ENDPOINT=
# Set these to run against non-localhost airflow or keycloak instances.
#PYTEST_AIRFLOW_BASE_URL=
#PYTEST_KEYCLOAK_BASE_URL=