RUST_LOG=info

# Deployment environment.
#   development (default) — allows insecure JWT_SECRET/ENCRYPTION_KEY defaults (with warnings).
#   production            — REFUSES to boot unless JWT_SECRET and ENCRYPTION_KEY are set to
#                           strong, non-default values.
APP_ENVIRONMENT=development

SERVER_HOST=0.0.0.0
SERVER_PORT=8000
MONGODB_URI=mongodb://mongodb:27017
MONGODB_DATABASE=normogen

# Generate with: openssl rand -base64 48
# MUST be changed and MUST NOT equal "secret" when APP_ENVIRONMENT=production.
JWT_SECRET=change-this-to-a-strong-random-secret-key
JWT_ACCESS_TOKEN_EXPIRY_MINUTES=15
JWT_REFRESH_TOKEN_EXPIRY_DAYS=30

# MUST be set (and not the default) when APP_ENVIRONMENT=production.
ENCRYPTION_KEY=change-this-to-a-32-byte-key