.env.example

# Required: at least one of DATABASE_URL (dev) or DATABASE_URL_PROD (prod)
DATABASE_URL="postgresql://user:password@localhost:5432/museum"
# DATABASE_URL_PROD="postgresql://..."

# Required: min 32 characters
SESSION_SECRET="your-super-secret-session-key-at-least-32-chars"

# Server
PORT=5001
NODE_ENV=development

# CORS: allowed origin for browser requests (default http://localhost:3000)
FRONTEND_URL="http://localhost:3000"
# Optional: comma-separated extra origins
# CORS_ORIGINS="https://app.example.com,https://admin.example.com"

# Production: set when NODE_ENV=production
# API_PROD_URL="https://api.example.com"

# Optional: Cloudinary (for gallery uploads)
# CLOUDINARY_CLOUD_NAME=
# CLOUDINARY_API_KEY=
# CLOUDINARY_API_SECRET=