| 1 | AIP_ENVIRONMENT=AZURE |
| 2 | SPRING_PROFILES_ACTIVE=AZURE |
| 3 | AIP_POSTGRES_HOST=<azure-postgresql-host> |
| 4 | AIP_POSTGRES_PORT=5432 |
| 5 | AIP_POSTGRES_SSL_MODE=verify-full |
| 6 | DB_SSL_MODE=verify-full |
| 7 | DB_CONNECT_TIMEOUT_SECONDS=10 |
| 8 | DB_SOCKET_TIMEOUT_SECONDS=30 |
| 9 | DB_POOL_MAXIMUM_SIZE=6 |
| 10 | DB_POOL_MINIMUM_IDLE=1 |
| 11 | AIP_REDIS_HOST=<azure-redis-host> |
| 12 | AIP_REDIS_PORT=6380 |
| 13 | AIP_REDIS_TLS_ENABLED=true |
| 14 | SPRING_DATA_REDIS_SSL_ENABLED=true |
| 15 | AIP_KAFKA_BOOTSTRAP_SERVERS=<managed-or-self-hosted-kafka-bootstrap> |
| 16 | AIP_KAFKA_SECURITY_PROTOCOL=SASL_SSL |
| 17 | AIP_KAFKA_SASL_MECHANISM=<provider-supported-mechanism> |
| 18 | AIP_KAFKA_CONSUMER_GROUP_PREFIX=<environment-specific-prefix> |
| 19 | # Kafka/Redis/DB credentials are intentionally omitted. Inject them from Key Vault-backed Kubernetes Secrets. |
| 20 | OTEL_SDK_DISABLED=false |
| 21 | OTEL_EXPORTER_OTLP_ENDPOINT=https://<otel-collector-host>:4317 |
| 22 | OTEL_EXPORTER_OTLP_PROTOCOL=grpc |
| 23 | OTEL_RESOURCE_ATTRIBUTES=deployment.environment=AZURE,cloud.provider=azure,cloud.platform=azure_aks |
| 24 | GATEWAY_HTTP_CONNECT_TIMEOUT=3s |
| 25 | GATEWAY_HTTP_READ_TIMEOUT=30s |
| 26 | AIP_FEATURE_MCP_ENABLED=true |
| 27 | AIP_MCP_TRANSPORT=streamable-http |
| 28 | AIP_MCP_HOST=0.0.0.0 |
| 29 | AIP_MCP_PORT=8000 |
| 30 | AIP_MCP_HTTP_PATH=/mcp |
| 31 | AIP_MCP_ALLOWED_HOSTS=mcp-gateway,mcp-gateway:*,mcp-gateway.<namespace>.svc,mcp-gateway.<namespace>.svc:* |
| 32 | AIP_MCP_RESEARCH_BASE_URL=http://research-engine |
| 33 | AIP_MCP_SERVICE_IDENTITY=mcp-gateway |
| 34 | AIP_MCP_AUTHENTICATION_TYPE=WORKLOAD_IDENTITY |
| 35 | AIP_MCP_SCOPES=mcp:read |
| 36 | AIP_MCP_INVOCATION_TIMEOUT_SECONDS=10 |
| 37 | AIP_MCP_HTTP_CONNECT_TIMEOUT_SECONDS=3 |
| 38 | AIP_MCP_HTTP_READ_TIMEOUT_SECONDS=8 |
| 39 | AIP_MCP_EXTERNAL_PROVIDERS_ENABLED=false |
| 40 | AIP_MCP_EXTERNAL_CALLER_IDENTITIES=research-engine |
| 41 | AIP_MCP_YAHOO_ENABLED=false |
| 42 | AIP_MCP_YAHOO_TRANSPORT=streamable-http |
| 43 | AIP_MCP_YAHOO_ENDPOINT=http://yahoo-finance-mcp/mcp |
| 44 | AIP_MCP_YAHOO_AUTH_TYPE=NONE |
| 45 | AIP_MCP_YAHOO_CAPABILITIES_JSON=[] |
| 46 | AIP_MCP_YAHOO_TIMEOUT_SECONDS=8 |
| 47 | AIP_MCP_YAHOO_MAX_RETRIES=1 |
| 48 | AIP_MCP_YAHOO_RETRY_BACKOFF_SECONDS=0.2 |
| 49 | AIP_MCP_YAHOO_MAX_CONCURRENCY=4 |
| 50 | AIP_RESEARCH_MCP_FIRST_ENABLED=false |
| 51 | AIP_RESEARCH_MCP_GATEWAY_BASE_URL=http://mcp-gateway |
| 52 | AIP_RESEARCH_MCP_GATEWAY_TIMEOUT_SECONDS=10 |
| 53 | AIP_RESEARCH_MCP_SERVICE_IDENTITY=research-engine |
| 54 | # MCP uses the AKS ServiceAccount federation and existing Key Vault CSI mount; no Azure client secret is accepted. |
| 55 | AIP_YAHOO_MCP_ENVIRONMENT=AZURE |
| 56 | AIP_YAHOO_MCP_TRANSPORT=streamable-http |
| 57 | AIP_YAHOO_MCP_HOST=0.0.0.0 |
| 58 | AIP_YAHOO_MCP_PORT=8002 |
| 59 | AIP_YAHOO_MCP_HTTP_PATH=/mcp |
| 60 | AIP_YAHOO_MCP_UPSTREAM_TIMEOUT_SECONDS=8 |
| 61 | AIP_YAHOO_MCP_MAX_CONCURRENCY=4 |
| 62 | AIP_YAHOO_MCP_ALLOWED_HOSTS=yahoo-finance-mcp,yahoo-finance-mcp:*,yahoo-finance-mcp.<namespace>.svc,yahoo-finance-mcp.<namespace>.svc:* |
| 63 | AIP_LLM_PROVIDER=<configured-provider> |
| 64 | AIP_RESEARCH_LIVE_ENABLED=false |
| 65 | AIP_RESEARCH_DEMO_ENABLED=false |
| 66 | AIP_RESEARCH_SEARCH_ENABLED=false |
| 67 | AIP_RESEARCH_SEARCH_PROVIDER=disabled |
| 68 | AIP_RESEARCH_SEARCH_ENDPOINT= |
| 69 | AIP_RESEARCH_SEARCH_API_KEY= |
| 70 | AIP_RESEARCH_SEARCH_ENGINE_ID= |
| 71 | AIP_RESEARCH_SEARCH_WINDOW_MONTHS=12 |
| 72 | AIP_RESEARCH_SEARCH_MAX_QUERIES_PER_CATEGORY=6 |
| 73 | AIP_RESEARCH_SEARCH_MAX_RESULTS_PER_QUERY=5 |
| 74 | AIP_RESEARCH_SEARCH_MAX_DOCUMENTS_PER_REFRESH=6 |
| 75 | AIP_RESEARCH_SEARCH_REFRESH_COOLDOWN_SECONDS=3600 |
| 76 | AIP_STRUCTURED_PROVIDER_ENABLED=true |
| 77 | AIP_STRUCTURED_PROVIDER_TIMEOUT_SECONDS=10 |
| 78 | AIP_STRUCTURED_RESOLUTION_MIN_CONFIDENCE=0.62 |
| 79 | AIP_STRUCTURED_RESOLUTION_AMBIGUITY_MARGIN=0.08 |
| 80 | AIP_STRUCTURED_MARKET_PRICE_FRESHNESS_SECONDS=300 |
| 81 | AIP_STRUCTURED_FUNDAMENTALS_FRESHNESS_SECONDS=86400 |
| 82 | AIP_RESEARCH_SEARCH_CACHE_TTL_SECONDS=86400 |
| 83 | AIP_RESEARCH_SEARCH_ALLOWED_DOMAINS=[] |
| 84 | AIP_RESEARCH_PERSISTENCE_ENABLED=false |
| 85 | AIP_RESEARCH_DATABASE_BACKEND=postgres |
| 86 | AIP_RESEARCH_DATABASE_HOST=<postgresql-host> |
| 87 | AIP_RESEARCH_DATABASE_PORT=5432 |
| 88 | AIP_RESEARCH_DATABASE_NAME=investment |
| 89 | AIP_RESEARCH_DATABASE_USER=<postgresql-user> |
| 90 | AIP_RESEARCH_DATABASE_PASSWORD= |
| 91 | AIP_RESEARCH_DATABASE_SCHEMA=research |
| 92 | AIP_PORTFOLIO_SERVICE_BASE_URL=http://portfolio-service |
| 93 | |
| 94 | # Broker credentials and tokens must come from secure runtime configuration. |
| 95 | IBKR_ENABLED=false |
| 96 | IBKR_BASE_URL= |
| 97 | IBKR_OAUTH2_BASE_URL= |
| 98 | IBKR_GATEWAY_BASE_URL= |
| 99 | IBKR_CLIENT_ID= |
| 100 | IBKR_CLIENT_KEY_ID= |
| 101 | IBKR_CALLBACK_URL= |
| 102 | IBKR_AUTH_METHOD= |
| 103 | IBKR_OFFICIAL_DOCUMENTATION_VERIFIED=false |
| 104 | IBKR_MARKET_DATA_ENABLED=false |
| 105 | IBKR_INSECURE_TLS=false |
| 106 | IBKR_CONNECTOR_BASE_URL=http://ibkr-connector |
| 107 | IBKR_CONNECTOR_RUNTIME_MODE=LOCAL_AGENT |
| 108 | IBKR_CONNECTOR_LOGIN_URL= |
| 109 | IBKR_CONNECTOR_INTERNAL_TOKEN= |
| 110 | IBKR_CONNECTOR_IDLE_TIMEOUT_SECONDS=1800 |
| 111 | IBKR_CONNECTOR_SESSION_TIMEOUT_SECONDS=86400 |
| 112 | AIP_IBKR_GATEWAY_PACKAGE_PATH= |
| 113 | AIP_IBKR_GATEWAY_BASE_URL= |
| 114 | AIP_IBKR_GATEWAY_TLS_VERIFY=true |
| 115 | AIP_IBKR_LOGIN_PUBLIC_BASE_URL= |
| 116 | AIP_INTERNAL_TOKEN= |
| 117 | IBKR_PRIVATE_KEY_REFERENCE= |
| 118 | IBKR_SESSION_REFERENCE= |
| 119 | |
| 120 | ICICI_DIRECT_ENABLED=false |
| 121 | ICICI_DIRECT_BASE_URL= |
| 122 | ICICI_DIRECT_LOGIN_URL=https://api.icicidirect.com/apiuser/login |
| 123 | ICICI_DIRECT_APP_KEY= |
| 124 | ICICI_DIRECT_REDIRECT_URL= |
| 125 | ICICI_DIRECT_AUTH_METHOD= |
| 126 | ICICI_DIRECT_SECRET_KEY_REFERENCE= |
| 127 | ICICI_DIRECT_OFFICIAL_DOCUMENTATION_VERIFIED=false |
| 128 | |
| 129 | MARKET_DATA_DEMO_MODE=false |
| 130 | RESEARCH_ENGINE_BASE_URL=http://research-engine |
| 131 | # Store real values in Azure Key Vault / Kubernetes secrets, not in this file. |
| 132 | BROKER_ADVANCED_INDIVIDUAL_CREDENTIALS_ENABLED=false |