# ── Server ─────────────────────────────────────────────────────────────
NODE_ENV=production
PORT=3001

# MongoDB
MONGODB_URI=mongodb://localhost:27017/wa_platform

# JWT (MUST be at least 32 random characters — generate with: openssl rand -hex 32)
JWT_SECRET=ESA_SECRET_BNANA_JISSE_LOGO_KI_PIDIYA_LAG_JAYE_CRACK_KARNE_MEIN
JWT_EXPIRES_IN=24h

# Cookie secret (MUST be at least 32 random characters)
COOKIE_SECRET=MUJHE_CHANGE_KAR_DAL_AUR_LIFE_FIR_MAJA_MA

# bcrypt rounds
BCRYPT_ROUNDS=12

# Admin seed (run: cd server && npm run seed)
ADMIN_USERNAME=mai_bap
ADMIN_PASSWORD=tera_bhai_kisi_se_kam_hai_kya

# CORS — exact URL of your frontend
CLIENT_URL=http://localhost:3000

# File uploads
UPLOAD_DIR=./uploads
MAX_FILE_SIZE=10485760

# WhatsApp session storage
SESSION_DIR=./sessions

# Rate limiting
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX=100
LOGIN_RATE_LIMIT_MAX=5
ACCOUNT_LOCK_DURATION_MINUTES=30

# Logging
LOG_LEVEL=info

# ── Client ─────────────────────────────────────────────────────────────
NEXT_PUBLIC_API_URL=http://localhost:3001