# Copy this to .env (backend/.env) and fill in real values. Never commit the real .env.

# MongoDB Atlas connection string (staging/sandbox cluster).
MONGODB_URI=mongodb+srv://jawlanmahmut_db_user:zFcaXUSpbOkN4yvR@cluster0.nbbwl0h.mongodb.net/occubuy?retryWrites=true&w=majority

# Port the server listens on. On cPanel's "Setup Node.js App", this is usually injected
# for you - only set it manually for local dev if 8787 is already in use.
PORT=8787

# Server-side-only secret mixed into every partner-key/session-token hash. Without this
# set to a real random value, anyone with the Mongo dump could brute-force keys offline.
# Generate one with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
OCCUBUY_HASH_PEPPER=4502b5694000442b22160544a9e45d5f37e1ebd936c2602a07bca7c721ca32d7
