.env.example

# Server
PORT=5000
NODE_ENV=development

# Express trust proxy hops. Default is 1 (typical reverse-proxy / Docker).
# Set false if the process is reached directly.
TRUST_PROXY=1

# CORS. Unset: allow http://localhost:5173 in non-production; same-origin only in production.
# Comma-separated origins, * to reflect any origin, or false to deny cross-origin.
# CORS_ORIGIN=http://localhost:5173

# Storage paths (resolved from the process working directory when relative)
# SQLITE_PATH=backend/database/deaddrop.db
# UPLOAD_DIR=uploads

# Rate limits (defaults shown)
# RATE_LIMIT_API_MAX=100
# RATE_LIMIT_API_WINDOW_MS=900000
# RATE_LIMIT_UPLOAD_MAX=20
# RATE_LIMIT_UPLOAD_WINDOW_MS=3600000
# RATE_LIMIT_DOWNLOAD_MAX=10
# RATE_LIMIT_DOWNLOAD_WINDOW_MS=900000

# Frontend (Vite). Copy to frontend/.env if you need a split-origin API.
# The Vite app reads this from frontend/.env, not this root file.
# VITE_API_BASE_URL=/api