feat: Layer 1 — Proxy & Observability via native Albus integration

.env.example

@@ -0,0 +1,26 @@
+# -----------------------------------------------
+# Guard API (Albus Control Plane)
+# -----------------------------------------------
+# Base URL of the Guard API — all Albus calls go here
+ALBUS_BASEPATH=http://guard-api:8000
+
+# Service token used by the gateway to authenticate telemetry pushes to Guard API
+# Logs endpoint uses:     Authorization: Bearer $PORTKEY_CLIENT_AUTH
+# Analytics endpoint uses: Authorization: $PORTKEY_CLIENT_AUTH  (no Bearer prefix)
+PORTKEY_CLIENT_AUTH=your-service-token-here
+
+# Required: disables Portkey managed cloud calls so all control-plane calls go to Guard API
+PRIVATE_DEPLOYMENT=ON
+
+# Optional: override the log ingestion path (default shown)
+GUARD_LOGS_PATH=/v1/logs/enterprise/logs
+
+# Optional: override the analytics ingestion path (default shown)
+GUARD_ANALYTICS_PATH=/v1/analytics/enterprise/analytics
+
+# -----------------------------------------------
+# Server
+# -----------------------------------------------
+# Port overrides default of 8788
+PORT=8789
+FETCH_SETTINGS_FROM_FILE=false