RUST_LOG=info

# Deployment environment.
#   development (default) — allows insecure JWT_SECRET/ENCRYPTION_KEY defaults (with warnings).
#   production            — REFUSES to boot unless JWT_SECRET and ENCRYPTION_KEY are set to
#                           strong, non-default values.
APP_ENVIRONMENT=development

# The app reads NORMOGEN_HOST / NORMOGEN_PORT (config/mod.rs), NOT SERVER_*.
# Defaults: host 0.0.0.0, port 6500.
NORMOGEN_HOST=0.0.0.0
NORMOGEN_PORT=6500
MONGODB_URI=mongodb://mongodb:27017
MONGODB_DATABASE=normogen

# Generate with: openssl rand -base64 48
# MUST be changed and MUST NOT equal "secret" when APP_ENVIRONMENT=production.
JWT_SECRET=change-this-to-a-strong-random-secret-key
JWT_ACCESS_TOKEN_EXPIRY_MINUTES=15
# Default is 7 days; 30 shown here as an opinionated example.
JWT_REFRESH_TOKEN_EXPIRY_DAYS=30

# MUST be set (and not the default) when APP_ENVIRONMENT=production.
ENCRYPTION_KEY=change-this-to-a-32-byte-key