.env.example

# AuthForge Environment Configuration

# Server
NODE_ENV=development
PORT=3000
API_VERSION=v1

# Database (PostgreSQL)
DATABASE_URL="postgresql://postgres:password@localhost:5432/authforge?schema=public"

# Redis (for token blacklist and sessions)
REDIS_URL="redis://localhost:6379"

# JWT Configuration
JWT_ACCESS_SECRET="your-super-secret-access-key-min-32-chars"
JWT_REFRESH_SECRET="your-super-secret-refresh-key-min-32-chars"
JWT_ACCESS_EXPIRY="15m"
JWT_REFRESH_EXPIRY="7d"
JWT_ISSUER="https://auth.authforge.io"

# Security
BCRYPT_ROUNDS=12
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=100
LOGIN_RATE_LIMIT_MAX=5

# CORS
CORS_ORIGIN="http://localhost:3001"
CORS_CREDENTIALS=true

# Cookie Settings
COOKIE_DOMAIN="localhost"
COOKIE_SECURE=false
COOKIE_SAME_SITE="strict"