.env.example

# Copy to .env (never commit .env). docker compose reads it; so does `npm run dev` via your shell.
PORT=3000

# Postgres. With docker compose this is the db container; for `npm run dev` point it at your own.
DATABASE_URL=postgres://task:task@localhost:5432/task

# Public URL of the site. Drives cookie security, passkey RP ID, OAuth redirect URIs and the MCP URL.
SITE_URL=http://localhost:3000

# Shown in the header, emails and the MCP server name.
APP_NAME=Task

# Time zone for "today" / "overdue" (an IANA name).
TZ=America/Chicago

# First run: if the users table is empty, this email becomes the first admin.
BOOTSTRAP_ADMIN_EMAIL=you@example.com

# Email codes and invitations go through Resend (https://resend.com). Leave the key blank locally and
# messages print to the console instead.
RESEND_API_KEY=
MAIL_FROM=Task <login@example.com>

# Optional: "Continue with Google / Microsoft" buttons appear only when these are set.
# Google: https://console.cloud.google.com/apis/credentials  (redirect URI: SITE_URL/auth/google/callback)
# Microsoft: https://entra.microsoft.com -> App registrations, "Accounts in any organizational directory
#   and personal Microsoft accounts" (redirect URI: SITE_URL/auth/microsoft/callback)
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
MICROSOFT_CLIENT_ID=
MICROSOFT_CLIENT_SECRET=
# MICROSOFT_TENANT=common   (default; set a tenant id to allow only one organization)

# Only used by docker-compose.yml for the bundled Postgres container.
POSTGRES_PASSWORD=task