# Settings for the mtgc-server container, for `docker run --env-file`. Copy to
# .env (which git ignores) and fill in. See the README's "Running the sync
# server" for the full list.

# Where users reach the server, exactly as they reach it: through your ingress
# in production, or the forwarded port locally (http://localhost:8080).
MTGC_PUBLIC_URL=https://mtgc.example.com

# Username/password accounts, managed with `mtgc-server user ...`.
# Set to false to allow single sign-on only.
MTGC_LOCAL_AUTH=true

# Single sign-on (optional). Register a confidential OIDC client with the
# redirect URI ${MTGC_PUBLIC_URL}/auth/callback.
#MTGC_OIDC_ISSUER=https://auth.example.com/application/o/mtgc/
#MTGC_OIDC_CLIENT_ID=
#MTGC_OIDC_CLIENT_SECRET=
#MTGC_OIDC_NAME=Authentik
#MTGC_OIDC_SCOPES=openid email profile
# Comma-separated; leave unset to let the provider decide who may sign in.
#MTGC_ALLOWED_EMAILS=