# Todo Backend - Production Environment Variables
# Copy this file to .env.production and fill in the values

# =============================================================================
# REQUIRED
# =============================================================================

# Database connection string (PostgreSQL)
DATABASE_URL=postgresql://todo_user:CHANGE_ME@localhost:5432/todo

# Mana Core Auth URL for JWT validation
MANA_CORE_AUTH_URL=https://auth.mana.how

# Allowed CORS origins (comma-separated)
# Include your frontend domains here
CORS_ORIGINS=https://todo.mana.how,https://todo-landing.mana.how

# =============================================================================
# OPTIONAL
# =============================================================================

# Server port (default: 3018)
PORT=3018

# Node environment (MUST be 'production' for security)
NODE_ENV=production

# Logging level (default: info)
LOG_LEVEL=info

# =============================================================================
# SECURITY NOTES
# =============================================================================
# - NEVER set DEV_BYPASS_AUTH=true in production
# - NEVER commit this file with real credentials
# - Use Docker secrets or environment injection for sensitive values
