# ---------------------------------------------------------------------------
# BookStack connection
# ---------------------------------------------------------------------------
# Root URL of your BookStack instance, no trailing slash and no /api suffix.
BOOKSTACK_URL=https://wiki.example.com

# From BookStack: profile menu > Edit Profile > API Tokens > Create Token.
# The token user's roles decide exactly what this MCP server can see and do.
# Create a dedicated user with only the access you want to expose.
BOOKSTACK_TOKEN_ID=
BOOKSTACK_TOKEN_SECRET=

# Set to false only if BookStack uses a self-signed certificate.
BOOKSTACK_VERIFY_TLS=true
BOOKSTACK_TIMEOUT=30

# ---------------------------------------------------------------------------
# Behaviour
# ---------------------------------------------------------------------------
# true  = search/read tools only (recommended to start)
# false = also expose create_page, update_page, create_book, create_chapter
BOOKSTACK_READ_ONLY=true

# Only relevant when BOOKSTACK_READ_ONLY=false. Adds delete_page (recycle bin).
BOOKSTACK_ALLOW_DELETE=false

# Page bodies longer than this are truncated before being sent to Claude.
MCP_MAX_CONTENT_CHARS=40000

# ---------------------------------------------------------------------------
# Transport
# ---------------------------------------------------------------------------
MCP_HOST=0.0.0.0
MCP_PORT=8080
MCP_PATH=/mcp

# Optional DNS-rebinding protection. Set to your public hostname(s).
# MCP_ALLOWED_HOSTS=mcp.example.com

# ---------------------------------------------------------------------------
# Auth: how Claude authenticates TO this server
#   none          no auth (local testing only)
#   token         static bearer tokens (Claude Code / CLI only)
#   github        GitHub OAuth (works with claude.ai AND Claude Code)
#   github+token  both at once  <-- recommended
# ---------------------------------------------------------------------------
MCP_AUTH_MODE=github+token

# Public HTTPS URL of THIS server. Required for GitHub OAuth.
MCP_PUBLIC_URL=https://mcp.example.com

# Comma-separated. Generate with: openssl rand -hex 32
MCP_STATIC_TOKENS=

# GitHub OAuth App (https://github.com/settings/developers)
# Authorization callback URL must be exactly:
#   https://mcp.example.com/auth/callback
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=

# Only these GitHub usernames may use the server. Leave empty to allow anyone
# who can complete the GitHub login (almost never what you want).
GITHUB_ALLOWED_USERS=your-github-username