.env.example

# App runtime config
PORT=3000
LOG_LEVEL=info
APP_VERSION=local

GITHUB_APP_ID=
GITHUB_WEBHOOK_SECRET=
GITHUB_WEBHOOK_SECRET_ARN=
GITHUB_APP_PRIVATE_KEY=
GITHUB_APP_PRIVATE_KEY_ARN=

DISPATCH_REQUESTS_QUEUE_URL=
DISPATCH_TARGETS_QUEUE_URL=
DISPATCH_FACTS_EVENT_BUS_NAME=default
DISPATCH_EVENTS_TABLE_NAME=
DISPATCH_PROJECTIONS_TABLE_NAME=

DEFAULT_DISPATCH_REF=main
CREATE_ISSUES=true
DISPATCH_MAX_RETRIES=2
DISPATCH_RETRY_BASE_DELAY_MS=200
ENFORCE_SOURCE_DEFAULT_BRANCH=true
DISPATCH_MAX_TARGETS_PER_RUN=25
SOURCE_REPO_ALLOWLIST=
TARGET_REPO_ALLOWLIST=
SOURCE_WORKFLOW_ALLOWLIST=
ALLOWED_SOURCE_CONCLUSIONS=success
ADMIN_IP_ALLOWLIST=

# Local deploy script and Terraform helper inputs
AWS_PROFILE=
AWS_REGION=eu-west-2
AWS_ACCOUNT_ID=
TF_STATE_BUCKET=
TF_STATE_REGION=
TF_VAR_github_app_id=
TF_VAR_container_image=
TF_VAR_lambda_image_uri=

# ECR repository name for the dev environment used by scripts/apply-dev-infra.sh.
# Defaults to dispatcher-v2-dev-dispatcher if unset.
ECR_REPO_DEV=

# Optional Lambda image override for scripts/apply-dev-infra.sh.
# If omitted, the script defaults TF_VAR_lambda_image_uri to TF_VAR_container_image.
LAMBDA_IMAGE_URI=

# GHCR image base for --use-github-image mode.
# The script auto-detects this from the git remote URL, so you only need to set
# this explicitly if your remote is not on GitHub or you want to override it.
# Example: GHCR_IMAGE=ghcr.io/your-org/github-workflow-dispatcher/app
GHCR_IMAGE=

# Optional GitHub token for GHCR login when using --use-github-image.
# Falls back to 'gh auth token' if unset.
GHCR_TOKEN=