Chris CoutinhoandClaude Opus 4.6
146b622ebf
Two bugs made `uvx --from . nextcloud-mcp-server run` (and any pip install) unusable outside Docker: 1. Dynaconf was configured with ignore_unknown_envvars=True and relied on settings.toml to declare the key schema. With no settings.toml in a wheel install, every env var (NEXTCLOUD_HOST, MCP_DEPLOYMENT_MODE, ...) was silently dropped. Moved the schema into a Python _DEFAULTS dict passed directly to Dynaconf, kept settings.toml as an optional external override (renamed to settings.toml.example, gitignored), and pointed docker-compose at the example file. 2. Token SQLite DB defaulted to /app/data/tokens.db in multiple places (auth/storage.py, migrations.py, alembic/env.py, cli.py db subcommands), which blew up at uvicorn startup with FileNotFoundError on non-Docker hosts. Replaced with a new config.get_token_db_path() helper that resolves TOKEN_STORAGE_DB if explicitly set, otherwise allocates a per-process tempfile cleaned up at interpreter exit via atexit — mirroring the "ephemeral by default" pattern used for QDRANT_LOCATION=:memory:. Containers are unaffected: docker-compose services now explicitly set TOKEN_STORAGE_DB=/app/data/tokens.db (the fourth service that was missing this pin has been brought in line with the other three). Verified end-to-end in an isolated /tmp venv: env-var-only startup, Alembic migrations run against the tempfile, Application startup complete, /health/live returns 200, tempfile deleted on SIGTERM. Unit tests (464) + ruff + ty pass. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
133 lines
3.5 KiB
TOML
133 lines
3.5 KiB
TOML
# Nextcloud MCP Server Configuration
|
|
# This file defines all configuration keys with their default values.
|
|
# Environment variables always override values from this file.
|
|
#
|
|
# Loading priority (last wins):
|
|
# 1. settings.toml [default] section
|
|
# 2. settings.toml [<mode>] section (via MCP_DEPLOYMENT_MODE)
|
|
# 3. .secrets.toml [default] section
|
|
# 4. .secrets.toml [<mode>] section
|
|
# 5. settings.local.toml (all sections, gitignored)
|
|
# 6. Environment variables (highest priority)
|
|
#
|
|
# See docs/ADR-024-dynaconf-configuration-management.md for details.
|
|
|
|
[default]
|
|
|
|
# --- Deployment mode (ADR-021) ---
|
|
# Valid: single_user_basic, multi_user_basic, login_flow, keycloak, oauth_single_audience
|
|
# If unset, mode is auto-detected from other settings.
|
|
mcp_deployment_mode = "@none"
|
|
|
|
# --- Nextcloud core ---
|
|
nextcloud_host = "@none"
|
|
nextcloud_username = "@none"
|
|
nextcloud_password = "@none"
|
|
nextcloud_app_password = "@none"
|
|
nextcloud_verify_ssl = true
|
|
nextcloud_ca_bundle = "@none"
|
|
nextcloud_mcp_server_url = "@none"
|
|
nextcloud_resource_uri = "@none"
|
|
|
|
# --- OAuth/OIDC ---
|
|
oidc_discovery_url = "@none"
|
|
nextcloud_oidc_client_id = "@none"
|
|
nextcloud_oidc_client_secret = "@none"
|
|
oidc_issuer = "@none"
|
|
jwks_uri = "@none"
|
|
introspection_uri = "@none"
|
|
userinfo_uri = "@none"
|
|
oidc_resource_server_id = "@none"
|
|
|
|
# --- Mode flags ---
|
|
enable_multi_user_basic_auth = false
|
|
enable_login_flow = false
|
|
enable_semantic_search = false
|
|
enable_background_operations = false
|
|
|
|
# Deprecated aliases (declared so env var overrides work)
|
|
vector_sync_enabled = false
|
|
enable_offline_access = false
|
|
enable_token_exchange = false
|
|
|
|
# --- Token storage ---
|
|
token_encryption_key = "@none"
|
|
token_storage_db = "/tmp/tokens.db"
|
|
|
|
# --- Vector sync ---
|
|
vector_sync_scan_interval = 300
|
|
vector_sync_processor_workers = 3
|
|
vector_sync_queue_max_size = 10000
|
|
vector_sync_user_poll_interval = 60
|
|
|
|
# --- Qdrant ---
|
|
# No default for qdrant_location — conditional default (:memory:) is in Settings.__post_init__
|
|
qdrant_url = "@none"
|
|
qdrant_location = "@none"
|
|
qdrant_api_key = "@none"
|
|
qdrant_collection = "nextcloud_content"
|
|
|
|
# --- Ollama ---
|
|
ollama_base_url = "@none"
|
|
ollama_embedding_model = "nomic-embed-text"
|
|
ollama_verify_ssl = true
|
|
|
|
# --- OpenAI ---
|
|
openai_api_key = "@none"
|
|
openai_base_url = "@none"
|
|
openai_embedding_model = "text-embedding-3-small"
|
|
|
|
# --- Document chunking ---
|
|
document_chunk_size = 2048
|
|
document_chunk_overlap = 200
|
|
|
|
# --- Observability ---
|
|
metrics_enabled = true
|
|
metrics_port = 9090
|
|
otel_exporter_otlp_endpoint = "@none"
|
|
otel_exporter_verify_ssl = false
|
|
otel_service_name = "nextcloud-mcp-server"
|
|
otel_traces_sampler = "always_on"
|
|
otel_traces_sampler_arg = 1.0
|
|
log_format = "text"
|
|
log_level = "INFO"
|
|
log_include_trace_context = true
|
|
|
|
# --- Document processing ---
|
|
enable_document_processing = false
|
|
document_processor = "unstructured"
|
|
enable_unstructured = false
|
|
unstructured_api_url = "http://unstructured:8000"
|
|
unstructured_timeout = 120
|
|
unstructured_strategy = "auto"
|
|
unstructured_languages = "eng,deu"
|
|
progress_interval = 10
|
|
enable_tesseract = false
|
|
tesseract_cmd = "@none"
|
|
tesseract_lang = "eng"
|
|
enable_pymupdf = true
|
|
pymupdf_extract_images = true
|
|
pymupdf_image_dir = "@none"
|
|
enable_custom_processor = false
|
|
custom_processor_url = "@none"
|
|
custom_processor_types = "application/pdf"
|
|
custom_processor_name = "custom"
|
|
custom_processor_api_key = "@none"
|
|
custom_processor_timeout = 60
|
|
|
|
|
|
# --- Deployment mode sections ---
|
|
# Keys here override [default] when MCP_DEPLOYMENT_MODE matches.
|
|
|
|
[single_user_basic]
|
|
|
|
[multi_user_basic]
|
|
enable_multi_user_basic_auth = true
|
|
|
|
[login_flow]
|
|
enable_login_flow = true
|
|
|
|
[keycloak]
|
|
|
|
[oauth_single_audience]
|