.env.example

# --- Required ----------------------------------------------------------------

# Postgres connection. Reuse the same DB host as hospitable-mcp; use a dedicated
# database (or schema) for isolation.
DATABASE_URL=postgres://github_mcp:CHANGE_ME@127.0.0.1:5432/github_mcp

# >= 32 chars. Used as input to HKDF for AES-256-GCM token encryption AND
# as the salt for hashing the per-user identifier. Treat as secret.
API_KEY_HASH_SALT=CHANGE_ME_to_a_random_string_at_least_32_chars_long

# GitHub OAuth App credentials. Register at:
#   https://github.com/settings/developers  (or org-level Developer settings)
# Homepage URL:  https://github.nlma.io
# Callback URL:  https://github.nlma.io/oauth/github/callback
GITHUB_CLIENT_ID=Iv1.xxxxxxxxxxxxxxxx
GITHUB_CLIENT_SECRET=CHANGE_ME

# Comma-separated GitHub OAuth scopes. Conservative default; bump as needed.
# `workflow` is required for creating/updating files under .github/workflows/*.
# `user:email` is required to read verified emails for
# GITHUB_APPROVED_EMAIL_DOMAINS below — drop it only if you run no domain gate.
GITHUB_SCOPES=repo,read:org,read:user,user:email,read:project,workflow

# --- Optional ----------------------------------------------------------------

# Where the gateway listens. nginx proxies github.nlma.io to this.
PORT=3061
HOST=127.0.0.1

# Public-facing base URL. Used in OAuth metadata + redirect URIs.
BASE_URL=https://github.nlma.io

# Upstream github-mcp-server (the official container). Gateway swaps the
# Authorization header before forwarding here.
UPSTREAM_MCP_URL=http://127.0.0.1:3060

# OPTIONAL: an allowlist of GitHub usernames (comma-separated). If set, these
# users can complete the OAuth flow. Empty/unset = no login gate.
# Useful while in dev / before opening to the wider team.
GITHUB_ALLOWED_USERS=

# OPTIONAL: approved email domains (comma-separated). If set, a user is admitted
# when one of their VERIFIED GitHub emails is on one of these domains;
# subdomains count, so nlma.io also admits me@mail.nlma.io.
# OR'd with GITHUB_ALLOWED_USERS above — either list admits a user.
# Empty/unset = no domain gate. Requires the user:email scope.
GITHUB_APPROVED_EMAIL_DOMAINS=