NODE_ENV=development
PORT=3000

# PostgreSQL
DB_HOST=demo.venbait.in
DB_PORT=5432
DB_NAME=bharaterp
DB_USER=bharaterpdevdbuser
DB_PASSWORD=devdbuser@bharaterp
DATABASE_URL=postgresql://bharaterpdevdbuser:devdbuser%40bharaterp@demo.venbait.in:5432/bharaterp?schema=public

# JWT
JWT_ACCESS_SECRET=replace_with_strong_random_value_min_32_chars
JWT_ACCESS_EXPIRY=15m
JWT_REFRESH_SECRET=replace_with_another_strong_random_value_min_32_chars
JWT_REFRESH_EXPIRY=7d

# Password hashing
BCRYPT_SALT_ROUNDS=12

# Encryption
ENCRYPTION_KEY=replace_with_64_char_hex_string
ENCRYPTION_HMAC_KEY=replace_with_strong_hmac_key

# CORS
CORS_ORIGINS=http://localhost:3000,http://localhost:8080

# Rate limiting
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX=100
AUTH_RATE_LIMIT_MAX=10

# Logging
LOG_LEVEL=info

# Uploads
UPLOAD_DIR=uploads
MAX_FILE_SIZE_MB=5

# Account lockout
MAX_LOGIN_ATTEMPTS=5
LOCKOUT_DURATION_MINUTES=30

# Frontend URL used in password-reset emails
FRONTEND_URL=http://localhost:8080
PASSWORD_RESET_EXPIRY_MINUTES=60

# Bitbucket deploy webhook (POST /deploy?apikey=...)
BITBUCKET_API_KEY=
EXPECTED_REPO=your-org/your-repo
EXPECTED_BRANCH=main
DEPLOY_SCRIPT=/path/to/deploy.sh