env.example

# Database Configuration
DATABASE_URL="postgresql://user:password@localhost:5432/jewellery_db?schema=public"

# JWT Authentication
# IMPORTANT: Generate a strong random secret (min 32 characters)
# Use: openssl rand -base64 32
JWT_SECRET="your-super-secret-jwt-key-minimum-32-characters-long-change-this-in-production"

# Environment
NODE_ENV="development"

# Admin Credentials (Optional - only for development)
# If not provided, a random password will be generated during seed
# IMPORTANT: Never use these defaults in production
ADMIN_PASSWORD="change-this-immediately-in-production"
TEST_USER_PASSWORD="change-this-for-test-user"

# CSRF Protection (Optional)
# Set to "true" in production to enable strict CSRF validation
# Default: lenient mode (backward compatible)
# ENABLE_STRICT_CSRF="false"