# Server Configuration
PORT=3000
NODE_ENV=development
# Security Settings
# Trust proxy - Set to number of proxies (e.g., 1) or specific IPs (e.g., "loopback, 10.0.0.0/8")
# For Cloudflare: use "true" or specific Cloudflare IPs
# Documentation: https://expressjs.com/en/guide/behind-proxies.html
TRUST_PROXY=1
# CORS Configuration
# Allowed origins - Use "*" for public API, or specific domains for restricted access
# Multiple origins: "https://example.com,https://app.example.com"
# For production, always specify exact origins
CORS_ORIGIN=*
# Rate Limiting (Per-IP limits)
# Maximum requests per IP within the time window
RATE_LIMIT_MAX=60
# Time window in milliseconds (60000 = 1 minute)
RATE_LIMIT_WINDOW_MS=60000
# Data Configuration
# Path to rejection reasons file
REASONS_FILE_PATH=./data/reasons.json
# Logging
# Log level: error, warn, info, debug
LOG_LEVEL=info
# Optional: Custom rate limit message
RATE_LIMIT_MESSAGE=Too many requests, please try again later.
# Optional: API Key for protected endpoints (if implementing authentication)
# API_KEY=your-secret-api-key-here
# Optional: Sentry DSN for error tracking
# SENTRY_DSN=https://your-sentry-dsn
# Optional: Custom health check endpoint path
# HEALTH_CHECK_PATH=/health
