# Required for Docker Compose production access control.
TRAJECTORY_BASIC_AUTH_USER=operator
TRAJECTORY_BASIC_AUTH_PASSWORD=

# Browser-visible origin used for same-origin mutation checks.
TRAJECTORY_PUBLIC_ORIGIN=http://127.0.0.1:3000

# Safe production defaults.
TRAJECTORY_READ_ONLY=false
TRAJECTORY_ENABLE_SEED=false

# Keep false for browser-only deployments. Set true only for authenticated,
# trusted non-browser API clients that cannot send an Origin header.
TRAJECTORY_ALLOW_ORIGINLESS_MUTATIONS=false

# Direct npm deployments must use an absolute persistent path.
# Docker Compose sets this to /data automatically.
TRAJECTORY_DATA_DIR=/absolute/path/to/trajectory-data