# ─── Database ───────────────────────────────────────────
DATABASE_URL=postgresql://coastal:coastal_secret@localhost:5432/coastal_timesheet

# ─── JWT Secrets ────────────────────────────────────────
# Generate with: node -e "console.log(require('crypto').randomBytes(64).toString('hex'))"
JWT_SECRET=change-me-to-a-random-64-byte-hex-string
JWT_REFRESH_SECRET=change-me-to-a-different-random-64-byte-hex-string

# ─── Server ────────────────────────────────────────────
PORT=3001
NODE_ENV=development
CORS_ORIGINS=http://localhost:5173,http://localhost:3000

# ─── SMTP (Email) ──────────────────────────────────────
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_USER=your-email@gmail.com
SMTP_PASS=your-app-password
SMTP_FROM=your-email@gmail.com

# ─── Admin ──────────────────────────────────────────────
ADMIN_EMAIL=bizzle@coastalcontracting.com