.env.example

# Server Configuration
PORT=5000
NODE_ENV=development

# Database
DATABASE_PATH=./data/database.db

# Security - JWT Authentication
# CRITICAL: Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
# Change these before deploying to production!
JWT_SECRET=change-this-secret-key-in-production-12345
SESSION_SECRET=change-this-session-secret-in-production-67890

# Security - Credential Encryption
# CRITICAL: Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
#ENCRYPTION_KEY must be exactly 32 bytes (64 hex characters)
# This key encrypts all passwords, private keys, and passphrases stored in the database
# WARNING: NEVER change this key after setting it, or you won't be able to decrypt existing credentials!
ENCRYPTION_KEY=
#
# CORS Configuration
CORS_ORIGIN=http://localhost:3000

# Production Settings
# Set to 'true' in production to enforce HTTPS
REQUIRE_HTTPS=false