# ============================================================================
#  <<project_name>> — 环境变量 (Environment Variables)
# ----------------------------------------------------------------------------
#  复制本文件为 .env 后修改；.env 中的值会覆盖 config.toml 中的同名配置。
#  Copy this file to .env and edit. Values here OVERRIDE config.toml.
#  变量名格式：SERVER__HOST / SERVER__PORT / MCP__BACKEND （双下划线分层）。
# ============================================================================

# 监听地址 / Listen address
# SERVER__HOST=0.0.0.0

# 监听端口 / Listen port
# SERVER__PORT=8000

# MCP 后端 / MCP backend (fastmcp | official)
# MCP__BACKEND=official

# 是否启用 SSE 传输 / enable the SSE transport
# MCP__SSE_ENABLED=false
<%- if auth_enabled %>

# ----------------------------------------------------------------------------
#  鉴权 / auth (Bearer JWT)。列表类型 (REQUIRED_SCOPES) 通过环境变量传入时必须是 JSON。
#  Auth. List values (REQUIRED_SCOPES) passed via env MUST be JSON.
# ----------------------------------------------------------------------------
# AUTH__ENABLED=true
# AUTH__JWKS_URI=https://login.microsoftonline.com/<tenant>/discovery/v2.0/keys
# AUTH__ISSUER=https://login.microsoftonline.com/<tenant>/v2.0
# AUTH__AUDIENCE=api://<client-id>
# AUTH__RESOURCE_SERVER_URL=http://127.0.0.1:8000
# AUTH__REQUIRED_SCOPES=["mcp.read","mcp.call"]  # list values via env MUST be JSON
<%- if auth_is_azure_ad %>
# ---- Entra / Azure AD 预设 / Entra preset ----
# AUTH__TENANT_ID=<your-tenant-guid>
# AUTH__RESOURCE_APP_ID=<your-api-app-id>
# jwks_uri/issuer/audience auto-derived from tenant_id when blank (azure-ad mode)
<%- endif %>
<%- endif %>
