# PostgreSQL (Docker Compose)
POSTGRES_HOST=localhost
POSTGRES_PORT=5434
POSTGRES_USER=balout
POSTGRES_PASSWORD=balout_secret
POSTGRES_DB=balout_pastry

DATABASE_URL=postgresql://balout:balout_secret@localhost:5434/balout_pastry

# API
PORT=3100
CORS_ORIGIN=http://baloutpastry.com:5173,http://admin.baloutpastry.com:5173,http://customer.baloutpastry.com:5173,http://localhost:5173,http://127.0.0.1:5173,http://localhost:5174,http://127.0.0.1:5174,http://baloutpastry.com:5174,http://www.baloutpastry.com:5174

# JWT
JWT_ACCESS_SECRET=change-me-balout-access-secret-min-32-chars
JWT_REFRESH_SECRET=change-me-balout-refresh-secret-min-32-chars
JWT_ACCESS_EXPIRES_IN=15m
JWT_REFRESH_EXPIRES_IN=7d

# Object storage (Parspack / S3-compatible) — same bucket as Meshkee, prefix balout/
STORAGE_DISK=s3
S3_ENDPOINT=https://c804387.parspack.net
S3_BUCKET=c804387
S3_PUBLIC_URL=https://c804387.parspack.net/c804387
S3_REGION=us-east-1
S3_FORCE_PATH_STYLE=true
S3_ACCESS_KEY_ID=
S3_SECRET_ACCESS_KEY=

MEDIA_MAX_FILE_SIZE_MB=10

# Meshkee SMS (server-side only — never expose to frontend)
MESHKEE_SMS_URL=https://api.meshkee.com/api/v1/public/sms/send
MESHKEE_SMS_API_KEY=
MESHKEE_SMS_DOMAIN=baloutpastry.com