PORT=5000 NODE_ENV=development # SQLite database file path (relative to prisma/ directory) DATABASE_URL="file:./dev.db" # Must be at least 32 characters — use: openssl rand -base64 32 JWT_SECRET="your-super-secret-jwt-key-change-this-in-production" JWT_EXPIRES_IN="7d" # Comma-separated allowlist of frontend origins permitted to call the API CORS_ORIGIN="http://localhost:3000,https://your-netlify-site.netlify.app"