.env.example

# postgres-mcp Environment Configuration
# Copy to .env and customize for your environment

# =============================================================================
# PostgreSQL Connection
# =============================================================================
# Option 1: Connection String
# POSTGRES_URL=postgres://user:password@localhost:5432/database

# Option 2: Individual Settings
PGHOST=localhost
PGPORT=5432
PGUSER=postgres
PGPASSWORD=
PGDATABASE=postgres

# Connection Pool Settings
POSTGRES_POOL_MIN=2
POSTGRES_POOL_MAX=10

# =============================================================================
# Server Configuration  
# =============================================================================
# Transport type: stdio (default), http, sse
MCP_TRANSPORT=stdio

# HTTP port (for http/sse transports)
PORT=3000

# Log level: debug, info, warn, error
LOG_LEVEL=info

# Tool filter (e.g., "-base,-extensions,+starter")
# MCP_TOOL_FILTER=-base,-extensions,+starter

# =============================================================================
# OAuth 2.1 Authentication (for HTTP/SSE transports)
# =============================================================================
# Enable OAuth authentication
OAUTH_ENABLED=false

# Authorization Server / Identity Provider
OAUTH_ISSUER=http://localhost:8080/realms/db-mcp

# Expected token audience  
OAUTH_AUDIENCE=postgres-mcp

# JWKS endpoint (auto-discovered from issuer if not set)
# OAUTH_JWKS_URI=http://localhost:8080/realms/db-mcp/protocol/openid-connect/certs

# Token clock tolerance in seconds (default: 60)
# OAUTH_CLOCK_TOLERANCE=60