# Gitea Configuration
GITEA_URL=https://gitea.example.com
GITEA_TOKEN=your-bot-user-token-here

# MCP Server Configuration
MCP_HOST=0.0.0.0
MCP_PORT=8080
MCP_DOMAIN=mcp.yourdomain.com  # Domain for Traefik (if using)

# Authentication Configuration (REQUIRED)
# Generate key with: python scripts/generate_api_key.py
AUTH_ENABLED=true
MCP_API_KEYS=your-generated-api-key-here

# Multiple keys (comma-separated for grace period during rotation):
# MCP_API_KEYS=key1,key2,key3

# Authentication limits
MAX_AUTH_FAILURES=5           # Max failures before rate limiting
AUTH_FAILURE_WINDOW=300       # Time window in seconds (5 min)

# Logging Configuration
LOG_LEVEL=INFO
AUDIT_LOG_PATH=/var/log/aegis-mcp/audit.log

# Security Configuration (optional)
# MAX_FILE_SIZE_BYTES=1048576  # 1MB
# REQUEST_TIMEOUT_SECONDS=30
# RATE_LIMIT_PER_MINUTE=60