collabSupport/dect-relay-agent/.env.example
jmcqueen f7953b8eb5 Add MPP desk phone diagnostics follow-up to /phonestatus via relay.
Wire CP-78xx probe discovery, relay phone-probe commands, and a chat follow-up message so store desk phones get registration, switch, and provisioning detail alongside DECT and WAN diagnostics.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-28 18:01:01 -04:00

60 lines
3 KiB
Text

# =============================================================================
# DECT Relay Agent — data-center-resident bridge to Cisco DBS-210 bases
# =============================================================================
#
# This agent runs INSIDE the corporate network (has route to 10.x/8)
# and dials outbound over WSS to the CollabSupport bot. The bot
# process itself runs in the public cloud and can't reach 10.x
# directly; this agent is the only thing that can talk to a DBS-210.
#
# See README.md in this folder for run instructions.
# ─── Where to dial the bot ───────────────────────────────────────────
#
# Full WSS URL to the bot's DECT relay endpoint. Must be wss:// (never
# ws:// — the bearer token would be visible in cleartext). The path
# defaults to /dect-relay/ws to match the bot's DECT_RELAY_PATH env
# on the other side; only change here if you've changed it there too.
DECT_RELAY_BOT_URL=wss://your-bot-host.example.com/dect-relay/ws
# Shared bearer token — MUST match the bot's DECT_RELAY_AGENT_TOKEN
# exactly. Rotate both sides at once to avoid a lockout window.
# Suggested generation: `openssl rand -hex 32`
DECT_RELAY_AGENT_TOKEN=replace-with-shared-secret
# Optional friendly identifier reported to the bot on hello.
# Shows up in the bot's logs and eventually /dectstatus admin views.
# Defaults to os.hostname() if unset.
# DECT_RELAY_AGENT_HOSTNAME=dc-dect-relay-01
# ─── DBS-210 admin credentials ───────────────────────────────────────
#
# Cisco tenants share ONE serviceability password across all bases
# in the fleet (configured in Control Hub → Calling → Features →
# DECT Networks → Manage → Manage DECT serviceability password), so
# a single credential works for every 10.x base this agent can reach.
DECT_ADMIN_USER=admin
DECT_ADMIN_PASSWORD=replace-with-dect-serviceability-password
# Per-request HTTPS timeout when talking to a DBS-210. Bases going
# through a corporate proxy can be slow — 30s is comfortable, 15s
# is aggressive.
DECT_ADMIN_TIMEOUT_MS=30000
# ─── MPP desk phone admin credentials (CP-78xx, Webex Calling) ───────
#
# Used for phone-probe / phone-probe-raw relay commands. Phones use
# HTTPS on 443 with a self-signed cert (agent accepts untrusted TLS).
# Enable Web Server on the phone (Settings → Security → Web Access).
# PHONE_ADMIN_PASSWORD is OPTIONAL — Webex MPP serves /Status.json
# without credentials when the user web UI is enabled. Set only if
# your site requires auth for admin/legacy paths.
# PHONE_ADMIN_USER=admin
# PHONE_ADMIN_PASSWORD=
PHONE_ADMIN_TIMEOUT_MS=15000
# ─── Optional tuning ─────────────────────────────────────────────────
#
# How long to wait between reconnect attempts when the bot socket
# drops. Uses exponential backoff up to this cap.
# DECT_RELAY_RECONNECT_MAX_MS=30000