# intervalsicu-mcp-ui (portal) — environment (copy to .env; do not commit real secrets)

# Postgres connection string — the SAME shared CNPG database as the MCP server.
DATABASE_URL=postgres://user:password@host:5432/dbname

# OIDC provider = the intervalsicu-mcp-auth server.
OIDC_ISSUER=https://intervalsicu.farhoodlabs.com/api/auth
OIDC_CLIENT_ID=intervalsicu-portal
# Public client (PKCE) — leave empty for no client secret.
OIDC_CLIENT_SECRET=
OIDC_REDIRECT_URL=https://intervalsicu.farhoodlabs.com/portal/auth/callback
# Optional OIDC scopes (default: openid email profile).
# OIDC_SCOPES=openid email profile

# Session cookie signing secret — generate a long random string.
SESSION_SECRET=

# Base64-encoded 32-byte key for AES-256-GCM encryption of stored Intervals API
# keys. MUST be identical to the MCP server's INTERVALS_ENC_KEY (shared DB/crypto).
INTERVALS_ENC_KEY=

# Comma-separated admin emails allowed to approve accounts.
ADMIN_EMAILS=

# Optional Intervals.icu API base (default https://intervals.icu/api/v1).
# INTERVALS_API_BASE_URL=https://intervals.icu/api/v1
# Path prefix when served under a subpath (this deployment serves under /portal).
ROOT_PATH=/portal
# MCP connector URL shown to users on the account page.
MCP_URL=https://intervalsicu.farhoodlabs.com/mcp