EXCALIDRAW_PORT=8080
# local (Basic si AUTH_USER/AUTH_PASSWORD) ou oidc
AUTH_MODE=local
AUTH_USER=
AUTH_PASSWORD=
# AUTH_MODE=oidc. Émetteur, ex. Authentik : https://auth.example.org/application/o/excalicloud/
# Keycloak : https://sso.example.org/realms/<realm>
OIDC_ISSUER=
OIDC_CLIENT_ID=
OIDC_CLIENT_SECRET=
OIDC_REDIRECT_URL=
OIDC_SCOPES=openid profile email
OIDC_ALLOWED_GROUPS=
OIDC_GROUPS_CLAIM=groups
OIDC_LOGOUT=true
SESSION_TTL=24h
SESSION_SECRET=
MAX_BODY_MB=50
UPDATE_CHECK=true
UPDATE_CHECK_INTERVAL=12h
HISTORY_KEEP=50
HISTORY_INTERVAL=10m
HISTORY_MAX_AGE=0
SHARE_SECRET=
# Serveur MCP (/mcp) : URL publique et hôtes de retour OAuth autorisés
PUBLIC_URL=
OAUTH_REDIRECT_HOSTS=claude.ai,claude.com
EXCALIDRAW_VERSION=