# Optional connectors. The synthetic demo does not use this file.
CLIENT_IP_HASH_SALT=
DATALAKE_S3_ENDPOINT=
DATALAKE_S3_BUCKET=datalake
DATALAKE_S3_ACCESS_KEY_ID=
DATALAKE_S3_SECRET_ACCESS_KEY=
DATALAKE_LOCAL_ROOT=.lake
DUCKDB_PATH=warehouse/datalake.duckdb
DUCKDB_SERVING_PATH=warehouse/serving.duckdb
NPM_HOSTS=primary,secondary
NPM_LOG_DIR_PRIMARY=seed/logs/primary
NPM_LOG_DIR_SECONDARY=seed/logs/secondary
MCP_API_LOG_DIR=
CAMERA_EXPORT_URL=
CAMERA_OIDC_TOKEN_URL=
CAMERA_OIDC_CLIENT_ID=
CAMERA_OIDC_CLIENT_SECRET=
LITELLM_PG_HOST=
LITELLM_PG_PORT=5432
LITELLM_PG_DB=litellm
LITELLM_PG_USER=
LITELLM_PG_PASSWORD=
AI_PLATFORM_PG_HOST=
AI_PLATFORM_PG_PORT=5432
AI_PLATFORM_PG_DB=ai_platform
AI_PLATFORM_PG_USER=
AI_PLATFORM_PG_PASSWORD=
JELLYFIN_URL=
JELLYFIN_API_KEY=
TMDB_API_KEY=
GEOIP_CITY_DB=
GEOIP_ASN_DB=
MCP_OIDC_ISSUER=
MCP_OIDC_CLIENT_ID=datalake-mcp
MCP_PUBLIC_URL=https://data.example.test/mcp
DATALAKE_API_ALLOW_WRITES=
DATALAKE_API_ALLOW_ANONYMOUS=
DATALAKE_EXPORT_DIR=exports
DATALAKE_AUDIT_PATH=logs/queries.jsonl
PLATFORM_ALERT_URL=
PLATFORM_ALERT_TOKEN=

# --- Sources added 2026-09-15 -------------------------------------------------
# See docs/METRICS_STREAMING_PLAN.md. Everything below has a working default on primary;
# set a variable only to point somewhere else.
#
# Prometheus, streamed by the prometheus_stream sensor. The LAN address of its published
# port, which datalake-daemon can reach; http(s) only.
PROMETHEUS_URL=http://198.51.100.26:9090
# Host directories docker-compose.yml mounts read-only. Paths with spaces are fine.
HOST_LOG_MOUNT=/var/log
RADARR_CONFIG_DIR=/srv/media/Radarr/config
SONARR_CONFIG_DIR=/srv/media/Sonarr/config
JELLYSEERR_DB_DIR=/srv/media/Jellyseer/config/db
# Keycloak sign-in events. Unset, each KEYCLOAK_PG_* falls back to its LITELLM_PG_*
# counterpart: the same read-only datalake_ro role, granted SELECT on the event tables
# by infra/keycloak-datalake-grants.sql. Run scripts/setup-keycloak-events.sh once.
KEYCLOAK_PG_HOST=
KEYCLOAK_PG_USER=
KEYCLOAK_PG_PASSWORD=
KEYCLOAK_PG_DB=keycloak