Homelab MCP Server

# synapse-mcp Environment Configuration
# Copy this file to .env and customize as needed

# =============================================================================
# HTTP Server (only used with --http transport mode)
# =============================================================================

# Server port (default: 3000)
SYNAPSE_PORT=3000

# Server host/bind address (default: 127.0.0.1)
# Use 0.0.0.0 to listen on all interfaces
SYNAPSE_HOST=127.0.0.1

# Redis port for external access (default: 53201, optional for debugging)
REDIS_PORT=53201

# =============================================================================
# Host Configuration
# =============================================================================

# Explicit path to config file (optional)
# If not set, searches: ./synapse.config.json, ~/.config/synapse-mcp/config.json, ~/.synapse-mcp.json
# SYNAPSE_CONFIG_FILE=/path/to/synapse.config.json

# JSON array of host configurations (fallback if no config file found)
# SYNAPSE_HOSTS_CONFIG='[{"name":"unraid","host":"unraid.local","port":2375,"protocol":"http"},{"name":"proxmox","host":"proxmox.local","port":2375,"protocol":"http"}]'

# Default host to use when no host is specified in requests
# SYNAPSE_DEFAULT_HOST=unraid

# =============================================================================
# NOTE: SSH Connection Pool variables removed
# =============================================================================
# SSH connection pooling IS implemented with hardcoded defaults.
# Environment variables for the pool are not yet exposed.
# Reference src/services/ssh-pool.ts for the default values.

# =============================================================================
# OAuth Configuration (HTTP Mode Only) - PULSE ARCHITECTURE
# =============================================================================

# Enable OAuth authentication for HTTP transport
# Synapse-MCP handles OAuth flow, issues its own JWTs (like Pulse)
MCP_ENABLE_OAUTH=false

# OAuth secret key for OUR JWT signing (REQUIRED if OAuth enabled)
# Generate with: openssl rand -base64 32
# MUST be at least 32 characters
# MCP_OAUTH_SECRET=your-secret-key-here-change-this-in-production

# Access token Time-To-Live in seconds (default: 3600 = 1 hour)
MCP_OAUTH_TOKEN_TTL=3600

# Google OAuth Credentials (BOTH REQUIRED if OAuth enabled)
# Get from: https://console.cloud.google.com/apis/credentials
# GOOGLE_CLIENT_ID=your-client-id.apps.googleusercontent.com
# GOOGLE_CLIENT_SECRET=your-client-secret
# GOOGLE_REDIRECT_URI=http://localhost:53200/auth/callback

# Redis URL for OAuth state/token storage (REQUIRED if OAuth enabled)
# REDIS_URL=redis://localhost:6379

# Server URL for metadata endpoints (REQUIRED if OAuth enabled)
# SERVER_URL=http://localhost:53200