# Copy this file to `.env` (same folder: apps/server/.env) and fill it in.
# The dev/start scripts load it automatically via Node's --env-file-if-exists.
#
#   cp apps/server/.env.example apps/server/.env
#
# Required ----------------------------------------------------------------
# The server refuses to start without a strong JWT_SECRET (>=32 chars).
# Generate one with:  openssl rand -hex 32
JWT_SECRET=

# Optional ----------------------------------------------------------------
# PORT=3000
# HOST=0.0.0.0                 # interface to bind. 127.0.0.1 = loopback only.
# LOG_LEVEL=info
# DATABASE_URL=./parking.sqlite

# Testing-only ------------------------------------------------------------
# Bypass the admin auth on /api/setup/* so you can discover/assign devices
# before the login flow exists. HARDENED: only honoured when NODE_ENV is not
# "production" AND HOST is loopback (127.0.0.1 / ::1 / localhost); otherwise
# the server refuses to start. Never set this in production.
# SETUP_AUTH_BYPASS=1
# HOST=127.0.0.1