.env.example

# ── Server ────────────────────────────────────────────────────
PORT=5000
NODE_ENV=development                # development | production

# ── Database ───────────────────────────────────────────────────
DB_HOST=localhost
DB_PORT=3306
DB_NAME=your_database_name
DB_USER=your_db_user
DB_PASSWORD=your_db_password
DB_SSL=false                        # Set to true for cloud databases (Railway, PlanetScale, etc.)

# ── JWT Secrets ────────────────────────────────────────────────
# Use long, random strings — e.g. run: node -e "console.log(require('crypto').randomBytes(64).toString('hex'))"
JWT_USER_SECRET=your_user_jwt_secret_key
JWT_ADMIN_SECRET=your_admin_jwt_secret_key
JWT_INTERNAL_SECRET=your_internal_jwt_secret_key

# ── Token Expiry ───────────────────────────────────────────────
JWT_ACCESS_EXPIRES_IN=15m
JWT_REFRESH_EXPIRES_IN=7d

# ── Email / SMTP (Nodemailer) ──────────────────────────────────
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_USER=your_email@gmail.com
SMTP_PASS=your_app_password         # Gmail: use an App Password, not your account password

# ── DB Sync (development only) ────────────────────────────────
SHOULD_SYNC=false                   # Set to true to run sequelize.sync({ alter: true }) on startup