25 lines
895 B
Bash
25 lines
895 B
Bash
# Prisma connection string (PostgreSQL)
|
|
DATABASE_URL=postgresql://postgres:CHANGE_ME@localhost:5432/inkreach-official-website
|
|
|
|
# JWT signing secret: generate with `node -e "console.log(require('crypto').randomBytes(48).toString('hex'))"`
|
|
# Must be at least 32 characters.
|
|
JWT_SECRET=CHANGE_ME_TO_A_STRONG_RANDOM_SECRET
|
|
|
|
# Access token lifetime (e.g. 30m, 12h); short-lived, rotated via /auth/refresh
|
|
TOKEN_EXPIRES_IN=30m
|
|
|
|
# Refresh token lifetime (HttpOnly cookie)
|
|
REFRESH_TOKEN_EXPIRES_IN=7d
|
|
|
|
# Comma-separated list of allowed CORS origins (leave empty to disable CORS)
|
|
CORS_ORIGINS=http://localhost:5173
|
|
|
|
# Global rate limit per minute (per IP)
|
|
THROTTLE_LIMIT=120
|
|
|
|
PORT=3001
|
|
|
|
# Product-family public read path (family block + family variant union in
|
|
# GET /public/goods/:goodId). Set to 'false' for emergency rollback to legacy behavior.
|
|
PUBLIC_DETAIL_FROM_FAMILY=true
|