config.env.example

# orapglink configuration — EXAMPLE. Copy to config.env and edit.
#
#   cp config.env.example config.env
#   # edit config.env, replace every change-me
#   set -a; . ./config.env; set +a
#   ./orapglink
#
# This file contains NO real credentials. Every value below is either a safe
# default or an obvious placeholder. Do not commit your filled-in config.env.
#
# Full walkthrough: QUICKSTART.md (English) / QUICKSTART_RU.md (Russian).
# Limitations you should read first: KNOWN_LIMITATIONS.md.

# ---------------------------------------------------------------------------
# Oracle Net listener — what Oracle clients and DATABASE LINKs connect to.
# ---------------------------------------------------------------------------

# Loopback by default, deliberately. This listener has NO transport encryption:
# no Oracle native encryption (ANO), no TCPS. Passwords and result rows cross
# the network in the clear. Bind it beyond 127.0.0.1 only on a trusted network,
# over a VPN, or behind a TLS-terminating tunnel — and only on purpose.
# A real Oracle database's DATABASE LINK does need to reach this from another
# host; that is a decision to make explicitly, not to inherit from a default.
ORAPGLINK_ORACLE_LISTEN=127.0.0.1:1521

# The single shared password the O5LOGON handshake accepts. ANY username is
# accepted with it — this is a single-tenant model, the username is not checked
# and is not a PostgreSQL account (KNOWN_LIMITATIONS.md §2). Treat this as a
# service credential, not as per-user authentication.
ORAPGLINK_ORACLE_PASSWORD=change-me

# ---------------------------------------------------------------------------
# PostgreSQL backend.
# ---------------------------------------------------------------------------

# The READ-ONLY runtime role created by sql/provision_roles.sql. Never point
# this at a superuser or at a role with write privileges.
#
# `sslmode` here applies to the orapglink -> PostgreSQL connection ONLY. It has
# nothing to do with the Oracle Net listener above, which stays unencrypted
# whatever you put here. Use `require` (or stricter) for a remote PostgreSQL;
# `disable` is only reasonable for a local socket/loopback database.
ORAPGLINK_POSTGRES_DSN=postgresql://orapglink_runtime:change-me@127.0.0.1:5432/appdb?sslmode=require

# ---------------------------------------------------------------------------
# Schema naming — these two MUST agree, or USER_TABLES and friends return
# zero rows.
# ---------------------------------------------------------------------------

# ORAPGLINK_PG_SCHEMAS  = the PostgreSQL schema(s) your real data lives in.
# ORAPGLINK_LOGICAL_SCHEMA = the single Oracle schema/user name this proxy
#   reports. It must be the UPPERCASE form of the PostgreSQL schema above, and
#   it must match the literal you substitute into sql/oracle_compat_views.sql
#   (that file ships with 'APP'; QUICKSTART.md shows the one-line sed).
#
# The values below are for the common case: data in the default `public`
# schema. If your data is in a schema named `app`, use APP/app instead.
# It is also the Oracle "service name" you type into DBeaver.
ORAPGLINK_LOGICAL_SCHEMA=PUBLIC
ORAPGLINK_PG_SCHEMAS=public

# Where sql/oracle_compat_views.sql installed the Oracle dictionary emulation
# (DUAL, ALL_TABLES, USER_TAB_COLUMNS, …). Change only if you edited the schema
# name in that file.
ORAPGLINK_DICT_SCHEMA=oradict

# Refuse to start unless the orafce extension is installed and provides the
# Oracle-semantic functions the translator relies on. Keep this true: without
# orafce, SUBSTR/TO_CHAR/RTRIM/RPAD silently resolve to PostgreSQL's own
# different semantics instead of erroring (KNOWN_LIMITATIONS.md §5).
ORAPGLINK_REQUIRE_ORAFCE=true

# ---------------------------------------------------------------------------
# Optional. Both are OFF unless set, and NEITHER has any authentication.
# Bind them to loopback only.
# ---------------------------------------------------------------------------

# Prometheus /metrics plus /healthz and /readyz.
#ORAPGLINK_METRICS_LISTEN=127.0.0.1:9109

# The built-in Oracle -> PostgreSQL translation playground. A dev tool.
#ORAPGLINK_PLAYGROUND_LISTEN=127.0.0.1:8099