Configuration

export TLS_CERT_FILE=/etc/mllp/server.crt
export TLS_KEY_FILE=/etc/mllp/server.key
export TLS_CLIENT_CA=/etc/mllp/client-ca.crt
export TLS_MIN_VERSION=1.2

export SHUTDOWN_TIMEOUT=30s
export PRE_SHUTDOWN_DELAY=5s

env:
  - name: POD_NAME
    valueFrom:
      fieldRef:
        fieldPath: metadata.name
  - name: POD_NAMESPACE
    valueFrom:
      fieldRef:
        fieldPath: metadata.namespace

connectors:
  - name: ehr-api
    type: http
    url: ${EHR_API_URL}
    headers:
      Authorization: "Bearer ${EHR_API_TOKEN}"

connectors:
  - name: <string> # Required. Unique connector name.
    type: <http|mllp|postgres|kafka> # Required. Connector type.
    disabled: false # Optional. Set true to exclude from routing.
    filter:
      "" # Optional. CEL expression; connector receives the
      # message only when the expression evaluates to true.
      # Empty string matches all messages.

    # HTTP connector fields
    url: "" # HTTP/HTTPS endpoint URL.
    timeout: 0s # Per-request timeout (0 = no timeout).
    headers: {} # Key-value map of request headers.
    max_idle_conns: 0 # Maximum idle connections in the pool.
    max_idle_conns_per_host: 0 # Maximum idle connections per host.
    idle_conn_timeout: 0s # How long an idle connection is kept alive.
    dial_timeout: 0s # TCP dial timeout.
    keep_alive: 0s # TCP keep-alive interval for HTTP connections.
    tls_insecure_skip_verify: false # Disable TLS verification (not for production).

    # MLLP connector fields
    address: "" # host:port of the downstream MLLP server.

    # Database connector fields (postgres)
    dsn: "" # PostgreSQL connection string.
    table: "" # Target table name.
    column: "" # Target column name.

    # Kafka connector fields
    brokers: [] # List of broker addresses (host:port).
    topic: "" # Kafka topic name.

    retry:
      max_attempts: 5 # Maximum delivery attempts before moving to DLQ.
      initial_delay: 1s # Delay before the first retry.
      max_delay: 5m # Maximum delay between retries (exponential backoff cap).
      poll_interval: 100ms # How often the outbox worker polls for pending messages.
      dead_letter:
        disabled:
          false # Set true to discard messages that exceed max_attempts
          # instead of writing them to the dead letter queue.

rules:
  - name: require-patient-id
    expression: pid.id != ""
    message: "PID-3.1 (patient ID) is required"

  - name: require-adt-or-oru
    expression: msh.msg_type == "ADT" || msh.msg_type == "ORU"
    message: "Only ADT and ORU message types are accepted"

  - name: require-observation-value
    expression: obx_list.all(o, o.value != "")
    message: "All OBX segments must have a value (OBX-5)"

connectors:
  - name: ehr-ingest
    type: http
    url: ${EHR_API_URL}
    timeout: 10s
    headers:
      Authorization: "Bearer ${EHR_API_TOKEN}"
      Content-Type: "application/hl7-v2"
    retry:
      max_attempts: 5
      initial_delay: 1s
      max_delay: 5m
      dead_letter:
        disabled: false

  - name: adt-audit
    type: http
    url: https://audit.internal/hl7
    filter: msh.msg_type == "ADT"
    retry:
      max_attempts: 3
      initial_delay: 2s
      max_delay: 1m

  - name: lab-results
    type: kafka
    filter: msh.msg_type == "ORU"
    brokers:
      - kafka-broker-1:9092
      - kafka-broker-2:9092
    topic: hl7-lab-results
    retry:
      max_attempts: 10
      initial_delay: 500ms
      max_delay: 10m

  - name: legacy-lis
    type: mllp
    address: legacy-lis.internal:2575
    filter: msh.msg_type == "ORU" && msh.sending_fac == "LAB-WEST"

  - name: archive
    type: postgres
    dsn: ${ARCHIVE_DSN}
    table: hl7_messages
    column: raw

rules:
  - name: require-control-id
    expression: msh.control_id != ""
    message: "MSH-10 (message control ID) is required"

  - name: require-patient-id
    expression: pid.id != ""
    message: "PID-3.1 (patient ID) is required"

  - name: require-hl7-version
    expression: msh.version == "2.3" || msh.version == "2.4" || msh.version == "2.5" || msh.version == "2.5.1"
    message: "HL7 version must be 2.3, 2.4, 2.5, or 2.5.1"

  - name: inpatient-requires-location
    expression: pv1.patient_class != "I" || pv1.assigned_location != ""
    message: "Inpatient encounters (PV1-2=I) must include an assigned location (PV1-3)"

# Server
export LISTEN_ADDR=":2575"
export IDLE_TIMEOUT="30s"
export WRITE_TIMEOUT="5s"
export FRAME_TIMEOUT="60s"
export MAX_CONNECTIONS="100"

# TLS
export TLS_CERT_FILE="/etc/mllp/server.crt"
export TLS_KEY_FILE="/etc/mllp/server.key"
export TLS_CLIENT_CA="/etc/mllp/client-ca.crt"

# Logging
export LOG_LEVEL="info"
export LOG_OUTPUT="stdout"

# Shutdown (Kubernetes)
export SHUTDOWN_TIMEOUT="30s"
export PRE_SHUTDOWN_DELAY="5s"

# Observability
export OTEL_EXPORTER_OTLP_ENDPOINT="otel-collector:4317"
export OTEL_SERVICE_NAME="mllp-server"

# Connectors
export CONNECTORS_CONFIG="/etc/mllp/config.yaml"
export OUTBOX_DB_PATH="/data/outbox.db"

# Application secrets (referenced in config.yaml)
export EHR_API_URL="https://ehr.example.com/hl7"
export EHR_API_TOKEN="eyJ..."
export ARCHIVE_DSN="postgres://mllp:secret@db:5432/hl7?sslmode=require"