# Copy to .env (gitignored) and fill in before running `docker-compose up`.

# Any string works for local dev; use a long random value for anything
# beyond that.
JWT_SECRET=dev-secret-change-me-please-32-chars-min

# Optional — defaults to "devpassword" if unset.
POSTGRES_PASSWORD=devpassword

# Effectively unused now that the client talks to the API via a same-origin
# /api/* proxy (see src/Client/nginx.conf) rather than a cross-origin
# request — CORS just never triggers. Left configurable as a defensive
# fallback; defaults to http://localhost:8081 if unset. For production set
# it to the real public origin, e.g. https://ruvdstest.danamir.site
CLIENT_ORIGIN=http://localhost:8081