# Example environment file for fjmcp-broker.
#
# Copy this to ~/.config/fjmcp-broker.env (chmod 0600) and fill in the
# real values. The Quadlet unit reads this via EnvironmentFile=.

# Public-facing URL — what clients (Claude.ai) will see. MUST match
# what Caddy serves; the broker uses this verbatim in OAuth metadata.
FJMCP_BROKER_PUBLIC_URL=https://mcp.example.com

# Upstream Forgejo instance. The broker delegates user authentication
# here via OAuth2.
FORGEJO_URL=https://forgejo.example.com

# OAuth2 application credentials. Create the application at
# Forgejo → Settings → Applications → OAuth2 Applications,
# with the redirect URI set to ${FJMCP_BROKER_PUBLIC_URL}/oauth/callback.
FORGEJO_OAUTH_CLIENT_ID=replace-with-your-forgejo-app-id
FORGEJO_OAUTH_CLIENT_SECRET=replace-with-your-forgejo-app-secret

# Scopes requested from Forgejo. The default covers the full forgejo-mcp
# tool surface. Trim if your users don't need write access.
FORGEJO_OAUTH_SCOPES=read:user write:repository write:issue write:notification read:organization

# Optional: verbose logging.
# FJMCP_BROKER_DEBUG=true