fix: harden server reliability and OAuth security

2026-08-21 17:19:13 +09:00
parent b2aab2c520
commit 080030c764
16 changed files with 946 additions and 100 deletions
@@ -3,9 +3,11 @@ MCP_PORT=3000
 MCP_ENDPOINT=/mcp
 MCP_PUBLIC_URL=https://mcp.example.com
 MCP_ALLOWED_HOSTS=mcp.example.com,127.0.0.1,localhost
-MCP_AUTH_TOKEN=replace-with-a-long-random-token
+MCP_TRUST_PROXY_HOPS=1
+MCP_AUTH_TOKEN=
 MCP_ALLOW_NO_AUTH=false
 MCP_OAUTH_ENABLED=true
+MCP_OAUTH_APPROVAL_KEY=replace-with-a-separate-long-random-key
 MCP_OAUTH_ISSUER=https://mcp.example.com
 MCP_OAUTH_RESOURCE=https://mcp.example.com/mcp
 MCP_OAUTH_STATE_FILE=/var/lib/remote-dev-mcp/oauth-state.json