.env.example

# --- Middleware Configuration ---
MCP_PORT=8080
BASE_URL=http://localhost:8080
DATABASE_PATH=./data/erpbridge.db
REDIS_URL=redis://localhost:6379
ERP_BASE_URL=http://localhost:8081
RATE_LIMIT_RPS=10
RATE_LIMIT_BURST=20
LOG_LEVEL=info
APP_ENV=development
# Demo system tools are enabled only by make dev-up, never by default.
MCP_ENABLE_TEST_TOOLS=false

# --- Security & Secrets ---
# Compose reads this file as input. Do not source it in a shell.
# `make dev-up` generates an ephemeral MockERP credential pair when neither
# credential source is set. Set one source explicitly for direct Compose use.
# MOCK_ERP_CREDENTIALS_JSON=
# MOCK_ERP_CREDENTIALS_FILE=
# Referenced as 'credentialRef' in tool schemas. Set this outside the repository.
# ERP_PRIMARY_KEY=
# Optional base directory for tools, probes, resources, or plugins that declare
# credentialSource: file. Mount a read-only directory; files use the logical
# credentialRef as their filename. Do not use a rotating mount with subPath.
# ERPBRIDGE_CREDENTIALS_DIR=/run/secrets/erpbridge
# Development-only exact host:port exceptions for credentialed HTTP calls.
# Use HTTPS in production. Docker Compose uses mock-erp:8081 for its local fixture.
INSECURE_AUTH_ALLOWED_HOSTS=mock-erp:8081

# --- CLI (bridgectl) Configuration ---
BRIDGE_CONTEXT=local
BRIDGE_SERVER=http://localhost:8080
BRIDGE_MCP_SERVER=http://localhost:8080
BRIDGE_ERP_BASE=http://localhost:8081
BRIDGE_AUTH_TYPE=api-key
# BRIDGE_API_KEY=<set-outside-this-file>
BRIDGE_AUTH_HEADER=Authorization
# BRIDGE_TOKEN=
# BRIDGE_USERNAME=
# BRIDGE_PASSWORD=
# Note: BRIDGE_ERP_BASE and the BRIDGE_AUTH_* variables are parsed by the CLI
# but not consumed by any command yet.

# --- Mock ERP Configuration ---
MOCK_ERP_HOST_PORT=8081
MOCK_ERP_LOG_LEVEL=debug
REDIS_INSIGHT_BIND_ADDRESS=127.0.0.1
REDIS_INSIGHT_HOST_PORT=8001