# ARR 2.0 owns processing, validation and database ingestion. No Agent/MCP
# endpoint, prompt, API key, callback secret or public source URL is required.

# Application-owned Finance portal login. Inject real values through the
# runtime secret manager; use a long random password and never commit it.
ARR_WEB_USERNAME=arr-operator
ARR_WEB_PASSWORD=replace_with_a_long_random_secret

# Must target the isolated PostgreSQL database named booking_test.
ARR_DATABASE_URL=postgresql://arr_app:replace_me@127.0.0.1:5432/booking_test?sslmode=require
# Optional read/report role overrides; each defaults to ARR_DATABASE_URL.
MONTHLY_REPORT_DATABASE_URL=postgresql://arr_report:replace_me@127.0.0.1:5432/booking_test?sslmode=require
DASHBOARD_DATABASE_URL=postgresql://arr_dashboard:replace_me@127.0.0.1:5432/booking_test?sslmode=require

# ARR-managed objects are written with private object ACLs. The bucket itself
# may be private or public-read, but public-read-write and versioning are rejected.
ARR_OBJECT_PREFIX=arr
ARR_OSS_REGION=cn-hangzhou
ARR_OSS_ENDPOINT=https://oss-cn-hangzhou.aliyuncs.com
ARR_OSS_BUCKET=replace-with-bucket

# Prefer RAM role / STS injection. Never commit real credentials.
OSS_ACCESS_KEY_ID=replace_me
OSS_ACCESS_KEY_SECRET=replace_me
# OSS_SESSION_TOKEN=replace_me