# NODA2 Environment Template — SAFE (no secrets)
# Copy to .env and fill in your values
# Generated: 2026-02-27

# ─── Bot Tokens (required for agents) ────────────────────────────────────────
TELEGRAM_BOT_TOKEN=your_main_bot_token
SOFIIA_TELEGRAM_BOT_TOKEN=your_sofiia_bot_token
HELION_TELEGRAM_BOT_TOKEN=your_helion_bot_token
ONEOK_TELEGRAM_BOT_TOKEN=your_oneok_bot_token

# ─── LLM API Keys ─────────────────────────────────────────────────────────────
XAI_API_KEY=xai_your_key_here
GLM5_API_KEY=your_glm_key
COHERE_API_KEY=your_cohere_key
DEEPSEEK_API_KEY=your_deepseek_key

# ─── Service Keys ─────────────────────────────────────────────────────────────
NOTION_API_KEY=ntn_your_notion_key
AGENTMAIL_API_KEY=your_agentmail_key
SOFIIA_CONSOLE_API_KEY=generate_with_openssl_rand_hex_24
SUPERVISOR_API_KEY=generate_with_openssl_rand_hex_24
BROWSER_ENCRYPTION_KEY=generate_with_openssl_rand_hex_32

# ─── Database ─────────────────────────────────────────────────────────────────
POSTGRES_PASSWORD=your_postgres_password
ONEOK_ESPO_DB_ROOT_PASSWORD=your_espo_root_pw
ONEOK_ESPO_DB_PASSWORD=your_espo_pw
ONEOK_ESPO_ADMIN_PASSWORD=your_espo_admin_pw
ONEOK_ADAPTER_API_KEY=your_oneok_adapter_key

# ─── Gateway ──────────────────────────────────────────────────────────────────
GATEWAY_PORT=9300

# ─── URLs ─────────────────────────────────────────────────────────────────────
OLLAMA_URL=http://host.docker.internal:11434
OPENCODE_URL=http://host.docker.internal:9102

# ─── Node Operations (P1 Security: SSH key file, NOT password) ────────────────
# IMPORTANT: Do NOT set NODES_NODA1_SSH_PASSWORD here
# sofiia-console reads SSH key from: secrets/noda1_id_ed25519 (file mount)
# See: ops/security_hardening_node2.md for key generation guide

# ─── Optional ──────────────────────────────────────────────────────────────────
ENV=prod
CORS_ORIGINS=
LLAMA_SERVER_API_KEY=
ALERT_DATABASE_URL=