.env.docker

# Docker Environment Configuration
# Copy this file to .env and fill in your values before running docker-compose

# CRITICAL: Generate secure secrets with this command:
# node -e "const crypto = require('crypto'); console.log('JWT_SECRET=' + crypto.randomBytes(32).toString('hex')); console.log('SESSION_SECRET=' + crypto.randomBytes(32).toString('hex')); console.log('ENCRYPTION_KEY=' + crypto.randomBytes(32).toString('hex'));"

# JWT Authentication Secret (64 hex characters)
JWT_SECRET=CHANGE_ME_GENERATE_WITH_COMMAND_ABOVE

# Session Secret (64 hex characters)
SESSION_SECRET=CHANGE_ME_GENERATE_WITH_COMMAND_ABOVE

# Encryption Key for stored credentials (64 hex characters)
# WARNING: Never change this after initial setup or you won't be able to decrypt existing credentials!
ENCRYPTION_KEY=CHANGE_ME_GENERATE_WITH_COMMAND_ABOVE

# CORS Origin (the frontend URL that can access this API)
CORS_ORIGIN=http://localhost:3000

# Set to true in production with proper SSL/TLS setup
REQUIRE_HTTPS=false