.env.example

# NOTE: systemd EnvironmentFile does NOT support inline comments.
# Do NOT write:  KEY=value   # comment  ← the comment becomes part of the value
# Use comment lines above the value instead (as shown throughout this file).
#
# ── Vault (all secrets stored here) ──────────────────────────────────────────
# Set these two to unlock router creds, NetBox token, and Anthropic API key
# from Vault. See setup.txt for how to populate the Vault paths.
VAULT_ADDR=https://vault.example.com:8200
VAULT_TOKEN=hvs.xxx

# ── NetBox URL (token is stored in Vault at dblcheck/netbox) ─────────────────
NETBOX_URL=http://netbox.example.com:8000

# ── SSH flags ────────────────────────────────────────────────────────────────
# Defaults are lab-safe (no host key verification). MUST enable for production
# to prevent man-in-the-middle interception of router credentials.
#
# PRODUCTION — uncomment and set to true:
# SSH_STRICT_HOST_KEY=true

# ── Daemon tuning ────────────────────────────────────────────────────────────
# INTERVAL=300
# DASHBOARD_PORT=5556
# Default bind address is 127.0.0.1 (localhost only). Change to 0.0.0.0 to expose externally.
# DASHBOARD_HOST=127.0.0.1

# ── Dashboard auth (optional — required when DASHBOARD_HOST != 127.0.0.1) ─────
# Token stored in Vault at dblcheck/dashboard key "token"
# Fallback: DASHBOARD_TOKEN=xxx
# Access: http://host:5556/?token=<value>

# ── Jira (optional — opens a ticket on new failures, comments when resolved) ──
# JIRA_BASE_URL=https://yourorg.atlassian.net
# JIRA_EMAIL=automation@yourorg.com
# JIRA_PROJECT_KEY=NET
# JIRA_ISSUE_TYPE=[System] Incident
# API token is stored in Vault at dblcheck/jira key "token"
# Fallback (without Vault): JIRA_API_TOKEN=xxx

# ── Fallbacks (only if NOT using Vault) ──────────────────────────────────────
# Remove these comments and fill in values if you are running without Vault.
# ROUTER_USERNAME=admin
# ROUTER_PASSWORD=changeme
# NETBOX_TOKEN=xxx