# Runtime
NODE_ENV=production
API_PORT=3000
# Hostever Node.js App may inject PORT — the API also reads PORT.
API_PREFIX=api/v1

# Replace with your real Hostever domain (with https)
WEB_ORIGIN=https://your-domain.com
CORS_ORIGINS=https://your-domain.com

LOG_LEVEL=info
RATE_LIMIT_WINDOW_MS=60000
RATE_LIMIT_MAX=120

# PostgreSQL
# Hostever shared hosting normally provides MySQL, NOT PostgreSQL.
# Use one of:
#   1) Hostever VPS / Managed VPS with PostgreSQL installed
#   2) An external managed PostgreSQL (e.g. Neon, Supabase, Railway, Aiven)
# Example:
# DATABASE_URL=postgresql://USER:PASSWORD@HOST:5432/sakura_pharma?schema=public
DATABASE_URL=postgresql://USER:PASSWORD@HOST:5432/sakura_pharma?schema=public

POSTGRES_HOST=
POSTGRES_PORT=5432
POSTGRES_DB=sakura_pharma
POSTGRES_USER=
POSTGRES_PASSWORD=

# Authentication — replace with 64+ random characters
JWT_ACCESS_SECRET=replace-with-a-long-random-access-secret-at-least-64-characters
JWT_ACCESS_TTL=15m
JWT_REFRESH_DAYS=7

# Initial administrator (seed only)
SEED_ADMIN_EMAIL=admin@your-domain.com
SEED_ADMIN_PASSWORD=ChangeMe123!