# Copy this file to ".env" and fill in real values.

# JWT signing secret — REQUIRED. Must be 32+ random chars. Never commit the real value.
# Generate: node -e "console.log(require('crypto').randomBytes(48).toString('hex'))"
JWT_SECRET=replace-with-64-random-hex-chars

# Default admin credentials used by `npm run seed` — REQUIRED, min 12 chars
ADMIN_USERNAME=admin
ADMIN_PASSWORD=replace-with-strong-password

# Server port
PORT=3001

# Public origin (used in returned image URLs). Set to your real domain in prod.
PUBLIC_ORIGIN=http://localhost:3001

# Comma-separated origins allowed to call the API (your frontend URL)
ALLOWED_ORIGINS=http://localhost:5173

# Contact form recipients (comma-separated)
MAIL_TO=alirezaameria2@gmail.com, mtdemne@gmail.com

# Gmail credentials for contact form emails
MAIL_USER=your-gmail@gmail.com
MAIL_PASS=your-gmail-app-password