.env.example

# Splitwiser Environment Variables
# Copy this file to .env and update values for your deployment.

# Application environment. Set to "production" to enable production warnings.
# Default: "development"
APP_ENV=development

# JWT secret for signing authentication tokens.
# REQUIRED for production — use a strong random string (e.g. openssl rand -hex 32).
# Default: "dev-secret-do-not-use-in-production"
JWT_SECRET=change-me-to-a-strong-random-string

# Server port.
# Default: 8080
PORT=8080

# Allowed CORS origin for browser requests.
# Set to your frontend domain in production (e.g. https://your-domain.com).
# Default: "*" (allows all origins — insecure for production)
CORS_ORIGIN=https://your-domain.com

# TLS certificate and key files for HTTPS.
# Both must be set to enable TLS. If neither is set, the server runs plain HTTP with h2c.
# TLS_CERT_FILE=/path/to/cert.pem
# TLS_KEY_FILE=/path/to/key.pem

# Path to the SQLite database file.
# Default: "./data/bills.db"
DB_PATH=./data/bills.db

# Path to the frontend static files directory.
# Default: "../frontend/static"
STATIC_PATH=../frontend/static