NODE_ENV=development
PORT=3000
APP_BASE_URL=http://localhost:3000
FRONTEND_BASE_URL=http://localhost:4200
TRUST_PROXY=false

DATABASE_HOST=mysql.example.internal
DATABASE_PORT=3306
DATABASE_NAME=business_app
DATABASE_USER=business_app
DATABASE_PASSWORD=change-me
DATABASE_SSL=false

OIDC_ISSUER=https://idp.example.com/realms/internal
OIDC_CLIENT_ID=business-app
OIDC_CLIENT_SECRET=change-me
OIDC_SCOPES=openid profile email
OIDC_ALLOWED_ALGORITHMS=RS256
OIDC_HTTP_TIMEOUT_MS=5000

SESSION_COOKIE_NAME=app_session
SESSION_IDLE_TIMEOUT_SECONDS=28800
SESSION_ABSOLUTE_TIMEOUT_SECONDS=604800
SESSION_SECRET=replace-with-at-least-32-random-bytes
SESSION_ENCRYPTION_KEY=replace-with-32-byte-base64url-key

CORS_ORIGINS=http://localhost:4200,http://localhost:3000
CSRF_HEADER_NAME=X-CSRF-Token

LOG_LEVEL=info
SWAGGER_ENABLED=true

RATE_LIMIT_WINDOW_SECONDS=60
RATE_LIMIT_MAX_REQUESTS=300
RATE_LIMIT_SENSITIVE_WINDOW_SECONDS=60
RATE_LIMIT_SENSITIVE_MAX_REQUESTS=10