.env.example

JWT_SECRET=change-me-to-a-long-random-string
# Use either name (db.js accepts both)
MONGODB_URI=mongodb://127.0.0.1:27017/sermng
PORT=3000

# Optional: public URL used in password-reset emails
PUBLIC_APP_URL=http://localhost:3000

# Optional: set true behind a reverse proxy so rate limiting uses client IP
TRUST_PROXY=false

# Optional: SMTP for password reset emails (if unset, reset link is logged to console)
# SMTP_HOST=smtp.example.com
# SMTP_PORT=587
# SMTP_SECURE=false
# SMTP_USER=
# SMTP_PASS=
# SMTP_FROM=noreply@example.com

# Local testing only: API returns reset token in JSON (never enable in production)
# DEV_RETURN_RESET_TOKEN=true

# OpenAI — optional; ticket creation still works without it
# OPENAI_API_KEY=sk-...
# OPENAI_MODEL=gpt-4o-mini

# React dev (Vite) is allowed in server.js CORS + Socket.IO automatically on ports 5173