IRAS/.env.example at master · krishnashakula/IRAS · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
# ── Anthropic ─────────────────────────────────────────────────────────────────
ANTHROPIC_API_KEY=sk-ant-
# ── Postgres (LangGraph checkpointing + post-mortem storage) ──────────────────
POSTGRES_URL=postgresql://iras:secret@localhost:5432/iras

# ── LangSmith (graph tracing) ─────────────────────────────────────────────────
LANGSMITH_API_KEY=lsv2_...
LANGSMITH_PROJECT=iras

# ── Logfire (Pydantic AI agent tracing) ───────────────────────────────────────
LOGFIRE_TOKEN=pylf_...

# ── Slack ─────────────────────────────────────────────────────────────────────
SLACK_BOT_TOKEN=xoxb-...
SLACK_ONCALL_CHANNEL_ID=C0XXXXXXXXX

# ── PagerDuty ─────────────────────────────────────────────────────────────────
PAGERDUTY_INTEGRATION_KEY=...

# ── Security ──────────────────────────────────────────────────────────────────
# HMAC-SHA256 secret for validating incoming webhook payloads.
# When set, POST /webhook/alert requires: X-IRAS-Signature: sha256=<hmac_hex>
# Leave blank to disable signature verification (dev only).
WEBHOOK_SECRET=
# Bearer token protecting POST /incidents/{id}/approve and /reject.
# When set, requests must carry: Authorization: Bearer <token>
# Leave blank to disable auth (dev only).
APPROVAL_API_KEY=
# Comma-separated list of allowed CORS origins.
# Use * for local development. Set explicit URLs for production, e.g.:
#   CORS_ALLOWED_ORIGINS=https://ops.example.com,https://alerts.example.com
CORS_ALLOWED_ORIGINS=*

# ── Observability backends ────────────────────────────────────────────────────
PROMETHEUS_BASE_URL=http://prometheus:9090
# Set one of the two log backends:
ELASTICSEARCH_BASE_URL=http://elasticsearch:9200
LOKI_BASE_URL=http://loki:3100

# ── Tuning ────────────────────────────────────────────────────────────────────
# Confidence threshold for RCA before requiring human review (0.0–1.0)
RCA_CONFIDENCE_THRESHOLD=0.7
# Max number of RCA retry loops before forcing manual escalation
RCA_MAX_ATTEMPTS=3
# Approval timeout in minutes for P0 incidents
APPROVAL_TIMEOUT_P0_MINUTES=15
# Approval timeout in minutes for P1/P2/P3 incidents
APPROVAL_TIMEOUT_DEFAULT_MINUTES=120

# ── Application ───────────────────────────────────────────────────────────────
APP_ENV=development
LOG_LEVEL=INFO