# Database
DATABASE_URL=postgres://postgres:postgres@postgres:5432/appdb?sslmode=disable
DB_AUTO_MIGRATE=true

# Auth
JWT_SECRET=change_me_in_production

# CORS — must include the URL where frame-cms is served
CORS_ALLOWED_ORIGINS=http://localhost:3000

# Frontend base URL used in email links
FRONTEND_BASE_URL=http://localhost:3000

# SMTP (optional — without this, email verification won't work)
# SMTP_HOST=smtp.example.com
# SMTP_PORT=587
# SMTP_USERNAME=user@example.com
# SMTP_PASSWORD=secret
# SMTP_FROM=noreply@example.com
# SMTP_MODE=tls