example.env

# Sample .env file
# Use scripts/setup_dev.py to scaffold your .env with auto-generated values for the missing secrets.

AIRFLOW__API_AUTH__JWT_SECRET=
# @see https://airflow.apache.org/docs/apache-airflow/stable/security/secrets/fernet.html#generating-fernet-key
AIRFLOW__CORE__FERNET_KEY=

AIRFLOW_CONN_LANGFUSE_DEFAULT='{"conn_type":"langfuse","host":"us.cloud.langfuse.com","schema":"https","login":"pk-lf-blah-blah-blah","password":"ssk-lf-blah-blah-blah"}'

# @see README.md for how to use the optional AIRFLOW_CONN override ariable.
# AIRFLOW_CONN_TIND_DEFAULT='{"conn_type": "http","password": "your-tind-key-here","host": "https://digicoll.lib.berkeley.edu/api/v1","schema": "https"}'

AIRFLOW_UID=49003
AIRFLOW__API__BASE_URL=http://localhost:8080

# Set KeyCloak's logging level. "DEBUG" can be useful when
# digging into an auth/config error, but it's *extremely* verbose.
KC_LOG_LEVEL=INFO

MOKELUMNE_TIND_DOWNLOAD_DIR="/opt/airflow/download"

OIDC_ADMIN_GROUP="cn=edu:berkeley:org:libr:mokelumne:admins,ou=campus groups,dc=berkeley,dc=edu"
OIDC_CLIENT_ID=mokelumne
OIDC_CLIENT_SECRET=
OIDC_NAME="keycloak"
OIDC_USER_GROUP="cn=edu:berkeley:org:libr:mokelumne:users,ou=campus groups,dc=berkeley,dc=edu"
OIDC_WELL_KNOWN="http://keycloak:8180/realms/berkeley-local/.well-known/openid-configuration"
OIDC_END_SESSION_ENDPOINT="http://keycloak:8180/realms/berkeley-local/protocol/openid-connect/logout"

TIND_API_KEY=your-tind-key-here
TIND_API_URL=https://digicoll.lib.berkeley.edu/api/v1
TIND_IIIF_MANIFEST_URL_PATTERN=https://digicoll.lib.berkeley.edu/record/{tind_id}/export/iiif_manifest

AIRFLOW_CONN_AWS_DEFAULT='{"conn_type":"aws","login":"AKIAblah-blah-blah","password":"blah-blah-blah","extra":{"region_name":"us-west-1","endpoint_url":"https://bedrock-runtime.us-west-1.amazonaws.com"}}'
AWS_MODEL_ID=us.anthropic.claude-haiku-4-5-20251001-v1:0
AWS_MODEL_PROVIDER=anthropic
AWS_MODEL_LABEL=Claude Haiku 4.5

# --- E2E browser test configuration (test/e2e/) ---
# To run pytest from your host workstation (not `docker compose exec`),
# uncomment and override the WS endpoint to reach the sidecar via its
# published port:
#PYTEST_PLAYWRIGHT_WS_ENDPOINT=
# Set these to run against non-localhost airflow or keycloak instances.
#PYTEST_AIRFLOW_BASE_URL=
#PYTEST_KEYCLOAK_BASE_URL=