# ═══════════════════════════════════════════════════
# QAFYS Backend — Environment Variables
# Copy this file to .env and fill in your values
# ═══════════════════════════════════════════════════

# ── Server ──
NODE_ENV=development
PORT=5000

# ── Database (MySQL) ──
DB_HOST=localhost
DB_PORT=3307
DB_USER=root
DB_PASSWORD=
DB_NAME=qafys_db

# ── JWT Authentication ──
JWT_SECRET=replace_with_a_strong_random_64_char_hex_string
JWT_REFRESH_SECRET=replace_with_another_strong_random_64_char_hex_string
JWT_ACCESS_EXPIRY=15m
JWT_REFRESH_EXPIRY=7d

# ── Encryption (AES-256-GCM for SSN) ──
# Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
ENCRYPTION_KEY=replace_with_64_char_hex_string

# ── CORS ──
CORS_ORIGIN=http://localhost:5173

# ── File Uploads ──
UPLOAD_DIR=uploads
MAX_FILE_SIZE=5242880

# ── Rate Limiting ──
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX=100
AUTH_RATE_LIMIT_MAX=10
