PORT=3000
DB_REQUIRED=true
DATABASE_URL=postgres://web:web@host.docker.internal:5432/web
REDIS_URL=redis://host.docker.internal:6379
JWT_SECRET=change-me-in-production
JWT_ISSUER=web-api
ACCESS_TOKEN_TTL_SECS=900
REFRESH_TOKEN_TTL_SECS=2592000
ENABLE_SWAGGER_UI=true
IMAGE_UPLOAD_DIR=/app/uploads/originals
IMAGE_VARIANT_DIR=/app/uploads/variants
CORS_DEFAULT_ALLOW=false
CORS_ALLOW_LOCALHOST=true
CORS_RATE_LIMIT_PER_MINUTE=120
CORS_CACHE_TTL_SECS=300