# Production API config (copy to server/.env)
NODE_ENV=production
PORT=4000
BIND_HOST=127.0.0.1
DATABASE_URL=postgres://postgres:replace-with-db-password@localhost:5432/crm_omt
JWT_SECRET=replace-with-a-long-random-string-at-least-32-chars
JWT_EXPIRES_IN=12h

# Same-origin when SPA is served by this API.
# Keep localhost/127.0.0.1 unless you intentionally expose the service behind a reverse proxy.
CORS_ORIGIN=http://localhost:4000,http://127.0.0.1:4000
ENABLE_LOCAL_TEST_ROUTES=0