.env.example

# Sentinel — copy to .env and fill in. NEVER commit .env.

# Runtime mode: dev | test | prod
SENTINEL_ENV=dev

# Directory holding the per-env YAML defaults (config/{env}.yaml). Leave unset
# for local/dev/test — the in-tree config/ is found automatically. The Docker
# image sets this to /app/config because the non-editable install relocates the
# package into site-packages.
# SENTINEL_CONFIG_DIR=/app/config

# Persistence
SENTINEL_POSTGRES_DSN=postgresql+asyncpg://sentinel:sentinel@localhost:5432/sentinel
SENTINEL_REDIS_URL=redis://localhost:6379/0
# For in-container use (docker-compose app/worker services): kafka:9092
# For host-side clients (local dev, CI runners): localhost:29092
SENTINEL_KAFKA_BROKERS=localhost:9092
SENTINEL_KAFKA_TOPIC_INCIDENTS=sentinel.incidents

# LLM
SENTINEL_ANTHROPIC_API_KEY=sk-ant-...
SENTINEL_ANTHROPIC_MODEL=claude-sonnet-4-5

# Observability
SENTINEL_LOG_LEVEL=INFO
SENTINEL_OTEL_ENDPOINT=
SENTINEL_LLM_AUDIT_LOG_PATH=logs/llm-audit.log

# HTTP server
# Defaults to 127.0.0.1 (loopback-only); docker-compose overrides to 0.0.0.0
SENTINEL_HTTP_HOST=127.0.0.1
SENTINEL_HTTP_PORT=8000

# Diagnosis (Work Area G)
SENTINEL_DIAGNOSIS_CONSUMER_ENABLED=true
SENTINEL_DIAGNOSIS_PROMPT_VERSION=v1
SENTINEL_DIAGNOSIS_MAX_INPUT_TOKENS=12000
SENTINEL_DIAGNOSIS_MAX_OUTPUT_TOKENS=2048
SENTINEL_DIAGNOSIS_LLM_TIMEOUT_SECONDS=30
SENTINEL_KAFKA_CONSUMER_GROUP_DIAGNOSER=sentinel-diagnoser

# Per-source webhook HMAC secrets. Leave blank to disable that source (401 returned).
SENTINEL_SENTRY_WEBHOOK_SECRET=
SENTINEL_PAGERDUTY_WEBHOOK_SECRET=
SENTINEL_DATADOG_WEBHOOK_SECRET=
SENTINEL_GENERIC_WEBHOOK_SECRET=

# Memory & embeddings (Work Area H)
SENTINEL_EMBEDDING_MODEL_NAME=BAAI/bge-large-en-v1.5
# Host default below. The Docker image overrides this to /opt/fastembed, where
# the model is pre-downloaded during the build for an offline-fast first start.
SENTINEL_EMBEDDING_MODEL_CACHE_DIR=/var/cache/fastembed
SENTINEL_EMBEDDING_COMPUTE_TIMEOUT_SECONDS=5.0
SENTINEL_KAFKA_CONSUMER_GROUP_MEMORY=sentinel-memory
SENTINEL_MEMORY_CONSUMER_ENABLED=true