.env.dr.example

# CCE disaster-recovery environment file (Sub-10c)
# Copy to C:\ProgramData\CCE\.env.dr on the DR host. DR host stays cold
# until promoted; see docs/runbooks/dr-promotion.md (Phase 05).

CCE_REGISTRY_OWNER=<github-org-or-user>
CCE_IMAGE_TAG=app-v1.0.0                    # mirrors prod's tag

INFRA_SQL=Server=host.docker.internal,1433;Database=CCE;User Id=cce_app;Password=<set-me>;TrustServerCertificate=True;Encrypt=True
INFRA_REDIS=host.docker.internal:6379

# ─── Identity (Entra ID — Sub-11) ───────────────────────────────────────────
ENTRA_TENANT_ID=<set-me>
ENTRA_PROVISIONER_CLIENT_ID=<set-me>
ENTRA_PROVISIONER_CLIENT_SECRET=<set-me>
ENTRA_CLIENT_ID=<set-me>
ENTRA_CLIENT_SECRET=<set-me>
ENTRA_AUDIENCE=api://<runtime-app-client-id>
ENTRA_GRAPH_TENANT_ID=<set-me>
ENTRA_GRAPH_TENANT_DOMAIN=cce.onmicrosoft.com

HOSTNAME_PORTAL_TEST=taqah-portal-test.example.com
HOSTNAME_PORTAL_PREPROD=taqah-portal-preprod.example.com
HOSTNAME_PORTAL_PROD=taqah-portal.example.com
HOSTNAME_PORTAL_DR=taqah-portal-dr.example.com
HOSTNAME_CMS_TEST=taqah-cms-test.example.com
HOSTNAME_CMS_PREPROD=taqah-cms-preprod.example.com
HOSTNAME_CMS_PROD=taqah-cms.example.com
HOSTNAME_CMS_DR=taqah-cms-dr.example.com

IIS_CERT_THUMBPRINT=
IIS_CERT_PFX_PATH=
IIS_CERT_PFX_PASSWORD=
IIS_HOSTNAMES=cce-ext-dr,cce-admin-panel-dr,api.cce-dr,api.cce-admin-panel-dr

ASSISTANT_PROVIDER=anthropic
ANTHROPIC_API_KEY=<set-me>

LOG_LEVEL=Information
SENTRY_DSN=
SENTRY_ENVIRONMENT=dr
SENTRY_RELEASE=app-v1.0.0

MIGRATE_ON_DEPLOY=true
MIGRATE_SEED_REFERENCE=true

AUTO_ROLLBACK=false                         # DR is operator-driven only

BACKUP_UNC_HOST=backup-server.cce.local
BACKUP_UNC_SHARE=cce-backups
BACKUP_UNC_USER=<set-me>
BACKUP_UNC_PASSWORD=<set-me>
BACKUP_RETENTION_DAYS_FULL=7
BACKUP_RETENTION_DAYS_DIFF=7
BACKUP_RETENTION_HOURS_LOG=24

CCE_GHCR_TOKEN=