.env.example

# =============================================================================
# CENTRALIZED ENVIRONMENT CONFIGURATION
# =============================================================================
# This is the single source of truth for environment variables in the monorepo.
# All apps and packages load their configuration from this file via Turborepo.
#
# USAGE:
#   1. Copy this file to .env in the root directory: cp .env.example .env
#   2. Update values according to your environment
#   3. Run: pnpm dev (Turborepo automatically loads .env)
#
# SECURITY:
#   - Never commit .env files to git
#   - Keep secrets in .env, not in code
#   - Use separate .env files for different environments
# =============================================================================

# -----------------------------------------------------------------------------
# SERVER CONFIGURATION
# -----------------------------------------------------------------------------

# Environment
NODE_ENV=development
PORT=3001

# Database (Prisma + PostgreSQL)
# PostgreSQL connection URL for Prisma
# For local development (run PostgreSQL via Docker or locally):
DATABASE_URL="postgresql://postgres:postgres@localhost:5432/local_mcp_gateway"
# For Docker Compose (uses internal service name):
# DATABASE_URL="postgresql://postgres:postgres@postgres:5432/local_mcp_gateway"

# CORS
# Optional: Comma-separated list of allowed origins
# CORS_ORIGINS=http://localhost:3000,http://localhost:5173

# Logging
# Optional: Log level (error, warn, info, debug)
# LOG_LEVEL=info

# -----------------------------------------------------------------------------
# FRONTEND CONFIGURATION
# -----------------------------------------------------------------------------

# API URL
# IMPORTANT: Must match backend PORT above
# Format: http://localhost:{PORT}
VITE_API_URL=http://localhost:3001
BETTER_AUTH_URL=http://localhost:3001
FRONTEND_URL=http://localhost:3000

# -----------------------------------------------------------------------------
# AUTHENTICATION
# -----------------------------------------------------------------------------
# Auth is always enabled with email+password as the baseline method.

# Secret for signing sessions (auto-generated if not set, but sessions won't persist across restarts)
# Generate with: openssl rand -base64 32
# BETTER_AUTH_SECRET=your-secret-here

# MCP OAuth Enforcement
# When true (default), MCP proxy endpoints require OAuth 2.1 Bearer tokens.
# Set to false for local development without authentication.
# MCP_AUTH_REQUIRED=true

# Google OAuth (OPTIONAL — enables "Sign in with Google" button)
# GOOGLE_CLIENT_ID=your-google-client-id
# GOOGLE_CLIENT_SECRET=your-google-client-secret

# -----------------------------------------------------------------------------
# MCP SERVER API KEYS (Optional)
# -----------------------------------------------------------------------------
# Configure API keys for MCP servers that require them.
# These can also be configured via the UI.

# Gemini Deep Research
# GEMINI_API_KEY=your-gemini-api-key

# -----------------------------------------------------------------------------
# DOCKER CONFIGURATION (for reference only)
# -----------------------------------------------------------------------------
# When running in Docker, use .env.docker or override in docker-compose.yml:
#
# Docker backend URL (internal network):
# VITE_API_URL=http://backend:3001
#
# Docker PostgreSQL (internal network):
# DATABASE_URL="postgresql://postgres:postgres@postgres:5432/local_mcp_gateway"