.env - Copy.example

# Example environment variables
PORT=3000
NODE_ENV=development

# CORS Configuration
# Comma-separated list of allowed origins for production
CORS_ALLOWED_ORIGINS=https://app.currentdao.com,https://www.currentdao.com

# Development-specific CORS origins (optional)
CORS_DEV_ORIGINS=http://localhost:4200,http://localhost:8080

# Staging-specific CORS origins (optional)
CORS_STAGING_ORIGINS=https://staging.currentdao.com

# Security Configuration
# API rate limiting (requests per minute)
RATE_LIMIT_TTL=60
RATE_LIMIT_MAX=100

# Session configuration
SESSION_SECRET=your-super-secret-session-key-change-in-production

# Helmet security (automatically configured based on NODE_ENV)
# HSTS max-age in seconds (default: 31536000 for production)
HSTS_MAX_AGE=31536000

# Content Security Policy report URI
CSP_REPORT_URI=/api/csp-report