# Copy to .env and fill in. The server reads these at startup.

# Address the API Server listens on.
PORT=8080

# PocketBase instance (database). All DB access goes through this server.
PB_URL=http://10.2.1.10:8027

# PocketBase superuser (admin) credentials. Used by the API Server to
# authenticate against PocketBase. Never commit the real .env file.
PB_ADMIN_EMAIL=
PB_ADMIN_PASSWORD=

# Comma-separated list of allowed CORS origins for the web app (dev default).
CORS_ORIGINS=http://localhost:5173

# Secret used to sign auth (JWT) tokens. MUST be set to a long random value in
# production. If unset, the server falls back to an insecure dev secret.
AUTH_SECRET=

# PocketBase auth collection holding app users (default: users).
AUTH_USERS_COLLECTION=users