.env.example

NODE_ENV=development
PORT=4000
APP_NAME=Lily Backend
# Optional build commit SHA exposed in health and startup diagnostics.
BUILD_COMMIT=
API_PREFIX=/api/v1
LOG_LEVEL=info
CORS_ORIGINS=http://localhost:3000,http://localhost:4000
BODY_SIZE_LIMIT=1mb
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=100
# Optional API-key authentication. Leave AUTH_API_KEY empty to disable it.
AUTH_API_KEY=
AUTH_API_KEY_HEADER=x-api-key
 # TRUST_PROXY: "false" (default), a non-negative integer hop count, or "loopback".
 # Numeric values specify how many proxy hops to trust (e.g., 1 for a single reverse proxy).
 # TRUST_PROXY=true is intentionally rejected because trusting all proxies is unsafe.
 TRUST_PROXY=false
# Optional API key authentication. When set, mutating routes (POST, PATCH, DELETE)
# require this value in the configured header.
# AUTH_API_KEY=your-secret-api-key-here
# Header name for API key authentication (default: x-api-key).
# AUTH_API_KEY_HEADER=x-api-key