.env.example

# Default local configuration for cf-integration.
#
# Copy this file to .env for local runs. .env is ignored by git.
# Shell variables override values from .env:
#   CF_CONTROLPLANE_REF=user/luca/dataplane-integration-fixes \
#     cargo run --locked -- stack up --topology dataplane

# Default single-stack mode. Possible: controlplane, dataplane.
CF_MCP_STACK_MODE=dataplane

# cf-controlplane checkout. Default: v1.0.6, matching the default image release.
# Possible: any branch, tag, or commit accepted by git checkout.
CF_CONTROLPLANE_REF=v1.0.6

# cf-controlplane repository. Default: IBM upstream.
# Possible: any git clone URL.
CF_CONTROLPLANE_REPO=https://github.com/IBM/mcp-context-forge.git

# cf-controlplane image used by upstream compose.
# Default: ghcr.io/ibm/mcp-context-forge:latest.
# Set the full override only to select a different registry or immutable tag.
# Possible: any Docker image reference.
# CF_CONTROLPLANE_IMAGE=ghcr.io/ibm/mcp-context-forge:<tag>

# Official cf-controlplane image version suffix. Default: latest.
# Used only when CF_CONTROLPLANE_IMAGE and IMAGE_LOCAL are unset.
CF_CONTROLPLANE_VERSION=latest

# Build behavior. Default: auto.
# Possible:
#   auto  - pull/reuse prebuilt images; build only an explicitly selected source dataplane
#   true  - always pass docker compose --build (for explicit local development)
#   false - never pass --build
CF_COMPOSE_BUILD=auto

# Force a matching running integration stack to restart. Default: false.
CF_FORCE_STACK_RESTART=false

# Compose project names. Defaults shown.
CF_INTEGRATION_PROJECT=cf
CF_CONTROLPLANE_PROJECT=cf-controlplane-only

# Gateway replica count. Default: 1 for local integration runs.
# Possible: positive integer. Use 2+ only when explicitly testing multi-instance gateway behavior.
GATEWAY_REPLICAS=1

# Generated checkout/build/runtime directory. Default: .integration.
CF_INTEGRATION_DIR=.integration

# cf-dataplane source checkout. Default: empty, which means published image mode.
# Set this to any branch, tag, or commit to checkout/build cf-dataplane locally.
# Possible: main, user/luca/cp-parity-tool-names, any ref accepted by git checkout.
# CF_DATAPLANE_REF=user/luca/cp-parity-tool-names

# cf-dataplane repository. Default: contextforge-gateway-rs upstream.
# Possible: any git clone URL.
CF_DATAPLANE_REPO=https://github.com/contextforge-gateway-rs/contextforge-gateway-rs.git

# cf-dataplane checkout directory. Default: .integration/contextforge-gateway-rs.
CF_DATAPLANE_DIR=.integration/contextforge-gateway-rs

# Local cf-dataplane image tag used when CF_DATAPLANE_REF is set and CF_DATAPLANE_IMAGE is unset.
# Possible: any Docker image reference.
CF_DATAPLANE_LOCAL_IMAGE=contextforge-gateway-rs/contextforge-gateway-rs:local

# Full cf-dataplane image override. With no source ref or full override, the
# published default derives from CF_DATAPLANE_VERSION (currently 0.1.0). Leave
# the full override unset in source mode to use CF_DATAPLANE_LOCAL_IMAGE.
# CF_DATAPLANE_IMAGE=ghcr.io/contextforge-gateway-rs/contextforge-gateway-rs:<tag>
CF_DATAPLANE_VERSION=0.1.0

# cf-dataplane image platform. Default: auto.
# auto resolves to linux/amd64 in published image mode, or the Docker server platform
# when CF_DATAPLANE_REF is set for a local source build.
# Possible: auto, linux/amd64, linux/arm64, or any platform supported by the selected image.
CF_DATAPLANE_PLATFORM=auto

# Dataplane publisher interval in seconds. Default: 2 for fast local tests.
# Possible: positive integer. Use 60 to match older/default upstream behavior.
CF_DATAPLANE_PUBLISHER_INTERVAL_SECONDS=2

# Dataplane per-user config cache TTL in seconds. Default: 0 for functional tests.
# Possible: non-negative integer. Use 60 to restore the dataplane image default for load benchmarks.
CF_DATAPLANE_USER_CONFIG_CACHE_EXPIRY_SECONDS=0

# Guarded Fast Time contract and default registered virtual server.
CF_FAST_TIME_EXPECTED_IMAGE=ghcr.io/ibm/cfex-mcp-fast-time-server:latest
CF_FAST_TIME_SERVER_ID=9779b6698cbd4b4995ee04a4fab38737

# Public nginx port. Default: 8080.
NGINX_PORT=8080
# Direct public-origin override; otherwise derived from NGINX_PORT.
# MCP_CLI_BASE_URL=http://127.0.0.1:8080

# Default MCP protocol version for probe, load, live, and Inspector workflows.
# Conformance run keeps its pinned 2026-07-28 default unless overridden.
MCP_PROTOCOL_VERSION=2025-11-25

# Admin/test token identity. Stable random local secrets are created automatically
# under CF_INTEGRATION_DIR when these overrides are unset.
MCP_JWT_SUBJECT=admin@example.com
PLATFORM_ADMIN_EMAIL=admin@example.com
# JWT_SECRET_KEY=<integration-secret>
# AUTH_ENCRYPTION_SECRET=<integration-encryption-secret>

# Optional existing fixture and token overrides. Empty values use the harness
# Fast Time fixture and a Rust-generated mode-appropriate JWT.
# MCP_SERVER_ID=<virtual-server-id>
# MCPGATEWAY_BEARER_TOKEN=<token>

# Shared Locust/Goose load defaults. A smoke run uses 1 user at 1 user/second
# for 10s unless LOCUST_* is exported by the calling process.
LOCUST_USERS=100
LOCUST_SPAWN_RATE=10
LOCUST_RUN_TIME=5m
# Positive finite per-request deadline for the Locust adapter. Default: 60 seconds.
LOCUST_REQUEST_TIMEOUT_SECONDS=60

# Optional control-plane-only test behavior.
# CONTROLPLANE_ENABLE_SSO=true