.env.example

# Firefly III Configuration (Required)
# Your Firefly III instance URL
FIREFLY_BASE_URL=https://your-firefly-instance.com

# Personal access token from Firefly III
# Generate at: Profile → OAuth → Personal Access Tokens
FIREFLY_TOKEN=your_firefly_personal_access_token_here

# Logging Configuration (Optional)
# Set the logging level for the application
# Options: DEBUG, INFO, WARNING, ERROR, CRITICAL
# Default: INFO
LOGGING_LEVEL=INFO

# MCP Server Configuration (Optional)
# Transport mode: stdio (default, for local development), http, or sse
MCP_TRANSPORT=stdio

# Host to bind the MCP server to (for http/sse transports)
MCP_HOST=0.0.0.0

# Port to bind the MCP server to (for http/sse transports)
MCP_PORT=3000

# Google OAuth Configuration (Optional - for remote server authentication)
# Only required when running as a remote MCP server with authentication
# All three fields must be provided together or all left blank

# Google OAuth 2.0 Client ID
# Get from: https://console.cloud.google.com/apis/credentials
GOOGLE_CLIENT_ID=your-client-id.apps.googleusercontent.com

# Google OAuth 2.0 Client Secret
GOOGLE_CLIENT_SECRET=your-client-secret

# Public URL of your FastMCP server
# Examples:
#   - Local development: http://localhost:8000
#   - Production: https://api.yourdomain.com
SERVER_BASE_URL=http://localhost:8000

# OAuth Token Persistence (Optional - for persistent authentication across restarts)
# Only required when running with Google OAuth authentication enabled
# Both JWT_SIGNING_KEY and OAUTH_STORAGE_ENCRYPTION_KEY must be provided together

# JWT signing key for OAuth tokens
# Generate with: python -c "import secrets; print(secrets.token_urlsafe(32))"
JWT_SIGNING_KEY=your-jwt-signing-key-here

# Fernet encryption key for OAuth token storage
# Generate with: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
OAUTH_STORAGE_ENCRYPTION_KEY=your-fernet-encryption-key-here

# Path for persistent OAuth token storage (optional)
# Default: ~/.local/share/lampyrid/oauth (local installations)
# For Docker: /app/data/oauth (recommended)
# OAUTH_STORAGE_PATH=/app/data/oauth