# 127.0.0.1 avoids macOS resolving localhost to ::1 first; loopback "localhost" brokers also default to IPv4.
KAFKA_BROKERS=127.0.0.1:9092
WORKER_NAMESPACE=your-application
TENANT_ID=11111111-1111-4111-8111-111111111111
WORKER_QUEUE={{{name}}}
RUST_LOG=info
# Stable unique identity per live replica; reuse it when restarting that replica.
KAFKA_TRANSACTIONAL_ID=jobs-replica-1
# Independent identity for administrative enqueue commands; never reuse a live worker identity.
KAFKA_PUBLISHER_ID=jobs-admin-1
KAFKA_GROUP_ID=workers
KAFKA_PARTITIONS=3
KAFKA_REPLICATION_FACTOR=1
KAFKA_OPERATION_TIMEOUT_MS=5000
KAFKA_SESSION_TIMEOUT_MS=10000
# Startup retry budget for a broker that is still starting or a first transactional init (default 60000).
# KAFKA_STARTUP_TIMEOUT_MS=60000
WORKER_MAX_PAYLOAD_BYTES=1048576
WORKER_MAX_ATTEMPTS=3
WORKER_BACKOFF_SECONDS=30
WORKER_HANDLER_TIMEOUT_MS=300000
WORKER_DRAIN_MS=30000
# KAFKA_CLIENT_PROPERTIES={"security.protocol":"SASL_SSL","sasl.mechanism":"SCRAM-SHA-256","sasl.username":"user","sasl.password":"secret"}
# WORKER_HTTP_ADDR=127.0.0.1:8081
# WORKER_CONTROL_TOKEN=<generate-a-random-secret-of-at-least-32-characters>
# WORKER_SIGNAL_REDIS_URL=redis://localhost:6379/
# WORKER_SIGNAL_NAMESPACE=your-application-production
# Optional OTLP/HTTP export. Omit endpoints for local structured logs only.
# OTEL_EXPORTER_OTLP_ENDPOINT=http://otel-collector:4318
# OTEL_EXPORTER_OTLP_PROTOCOL=http/protobuf
# OTEL_EXPORTER_OTLP_HEADERS=authorization=Bearer%20replace-me
# OTEL_SERVICE_NAME=replace-with-service-name
# OTEL_RESOURCE_ATTRIBUTES=deployment.environment.name=local
# OTEL_SDK_DISABLED=true
# Required for processing/enqueue. Use an independently generated 32-byte key.
# TENANT_ID must be a non-nil UUID from trusted deployment configuration.
ENCRYPTION_KEY_HEX=
ENCRYPTION_KEY_ID=primary
ENCRYPTION_PREVIOUS_KEYS_JSON={}
ENCRYPTION_LEGACY_KEY_HEX=disabled
# Only set true for isolated local Docker brokers without TLS.
WORKER_ALLOW_PLAINTEXT_DEVELOPMENT=false