# Copy to secrets/backend.env on the server.
# DATABASE_URL must match database.env credentials (host = postgres service name).
NODE_ENV=production
PORT=3000

DATABASE_URL=postgresql://dyolink_user:CHANGE_ME_STRONG_DB_PASSWORD@postgres:5432/dyolink_db

# Must be real random strings (openssl rand -hex 32). Values containing CHANGE_ME will crash the app.
JWT_SECRET=replace_with_openssl_rand_hex_32_output
JWT_EXPIRES_IN=15m
JWT_REFRESH_SECRET=replace_with_a_different_openssl_rand_hex_32_output
JWT_REFRESH_EXPIRES_IN=30d

# Must match DOMAIN in .env — used for CORS, invite links, cookies
FRONTEND_URL=https://wixur.ir

# Required for HTTPS — browsers reject Secure cookies over plain HTTP
COOKIE_SECURE=true

# SMS (sms.ir)
SMS_IR_API_KEY=CHANGE_ME_SMS_IR_API_KEY
SMS_IR_TEMPLATE_ID=123456