.env.example

# --- Deployment (compose) ---
# Image tag: main, sha-<7>, or a release.
MUSIC_VERSION=main
# Where web listens on the host.
MUSIC_BIND=127.0.0.1
MUSIC_PORT=3000
POSTGRES_PASSWORD=

# --- Sign-in ---
# The public URL; also the MCP resource (<url>/mcp) and issuer base.
BETTER_AUTH_URL=https://music.example.com
# openssl rand -base64 32
BETTER_AUTH_SECRET=
# A confidential OIDC client in your Keycloak realm, redirect URI
# <BETTER_AUTH_URL>/api/auth/callback/keycloak.
KEYCLOAK_ISSUER=https://auth.example.com/realms/example
KEYCLOAK_CLIENT_ID=
KEYCLOAK_CLIENT_SECRET=

# --- Player ---
# The player on the speaker's network sends this as a Bearer token.
# openssl rand -hex 32
PLAYER_TOKEN=

# --- Observability (optional; off when the endpoint is empty) ---
OTEL_EXPORTER_OTLP_ENDPOINT=
# Authorization=Bearer <token>
OTEL_EXPORTER_OTLP_HEADERS=
OTEL_SERVICE_NAME=music