grocery/.env.prod.template at main · adamsuskin/grocery · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
# Production Environment Configuration Template
# Copy this file to .env.prod and fill in the values

# =============================================================================
# Domain Configuration (Required for SSL)
# =============================================================================
DOMAIN=your-domain.com
CERTBOT_EMAIL=your-email@example.com

# =============================================================================
# Database Configuration
# =============================================================================
DB_USER=grocery
DB_PASSWORD=CHANGE_ME_strong_password_here
DB_NAME=grocery_db
DB_PORT=5432

# Database pool settings
DB_MAX_CONNECTIONS=20
DB_IDLE_TIMEOUT=30000
DB_CONNECTION_TIMEOUT=2000

# =============================================================================
# JWT Configuration
# Generate secrets with: openssl rand -base64 32
# =============================================================================
JWT_ACCESS_SECRET=CHANGE_ME_generate_with_openssl
JWT_REFRESH_SECRET=CHANGE_ME_generate_with_openssl
JWT_ACCESS_EXPIRY=15m
JWT_REFRESH_EXPIRY=7d

# =============================================================================
# Security Configuration
# =============================================================================
# Bcrypt rounds (10-12 recommended for production)
BCRYPT_ROUNDS=12

# Rate limiting
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=100

# =============================================================================
# Zero-cache Configuration
# =============================================================================
ZERO_AUTH_SECRET=CHANGE_ME_generate_with_openssl
ZERO_LOG_LEVEL=info

# =============================================================================
# CORS Configuration
# =============================================================================
# Set to your frontend domain (with protocol)
CORS_ORIGIN=https://your-domain.com

# =============================================================================
# Frontend Build Configuration
# =============================================================================
# API URLs (use your domain)
VITE_API_URL=https://your-domain.com/api
VITE_ZERO_SERVER=wss://your-domain.com/zero
VITE_AUTH_ENABLED=true

# =============================================================================
# Server Configuration
# =============================================================================
NODE_ENV=production
PORT=3001