# Environment example for backend
DATABASE_URL=sqlite:///./modern_dev.db
BASE_URL=http://localhost:8000
# Comma-separated list also supported through Settings parsing
FRONTEND_ORIGIN=http://localhost:5173
# Security toggles (recommended true in production behind TLS)
FORCE_HTTPS=false
HSTS_ENABLE=false
COOKIE_SECURE=false
COOKIE_SAMESITE=lax
CSRF_ENABLE=false
CSRF_HEADER_NAME=x-csrf-token
CSRF_COOKIE_NAME=csrf_token
MAX_BODY_BYTES=1048576
REQUESTS_PER_MINUTE=120
# Register a Google OAuth app and put credentials here for testing
GOOGLE_CLIENT_ID=your-google-client-id
GOOGLE_CLIENT_SECRET=your-google-client-secret