# Public application
NODE_ENV=production
PORT=3000
MM_SKILLS_PUBLIC_URL=https://skills.example.com
MCP_ACCESS_TOKEN=replace-with-an-independent-random-token
MCP_REQUIRE_AUTH=true
MCP_ALLOWED_HOSTS=skills.example.com
MCP_ALLOWED_ORIGINS=

# Coolify upstream
COOLIFY_BASE_URL=https://panel.meyermedia.eu/api/v1
COOLIFY_API_TOKEN=replace-with-a-team-scoped-read-token
COOLIFY_OPENAPI_URL=https://raw.githubusercontent.com/coollabsio/coolify/v4.x/openapi.json
COOLIFY_MCP_TOOL_MODE=expanded

# Optional isolated sensitive token
COOLIFY_SENSITIVE_TOKEN=
COOLIFY_MCP_ALLOW_SENSITIVE_READS=false
COOLIFY_MCP_FULL_READ=false

# Capability gates: keep false in the general-purpose deployment
COOLIFY_MCP_ALLOW_DEPLOY=false
COOLIFY_MCP_ALLOW_WRITES=false
COOLIFY_MCP_ALLOW_DESTRUCTIVE=false
COOLIFY_MCP_ALLOW_ROOT=false

# Limits
COOLIFY_REQUEST_TIMEOUT_MS=30000
COOLIFY_OPENAPI_TIMEOUT_MS=15000
COOLIFY_OPENAPI_CACHE_SECONDS=3600
COOLIFY_MAX_RESPONSE_BYTES=2000000
MCP_MAX_REQUEST_BYTES=2000000
MCP_MAX_TOOL_RESULT_CHARACTERS=250000
MCP_RATE_LIMIT_PER_MINUTE=120
COOLIFY_MAX_CONCURRENCY=8