.env.example

# Server Configuration
PORT=3000
NODE_ENV=development

# Security Settings
# Trust proxy - Set to number of proxies (e.g., 1) or specific IPs (e.g., "loopback, 10.0.0.0/8")
# For Cloudflare: use "true" or specific Cloudflare IPs
# Documentation: https://expressjs.com/en/guide/behind-proxies.html
TRUST_PROXY=1

# CORS Configuration
# Allowed origins - Use "*" for public API, or specific domains for restricted access
# Multiple origins: "https://example.com,https://app.example.com"
# For production, always specify exact origins
CORS_ORIGIN=*

# Rate Limiting (Per-IP limits)
# Maximum requests per IP within the time window
RATE_LIMIT_MAX=60
# Time window in milliseconds (60000 = 1 minute)
RATE_LIMIT_WINDOW_MS=60000

# Data Configuration
# Path to rejection reasons file
REASONS_FILE_PATH=./data/reasons.json

# Logging
# Log level: error, warn, info, debug
LOG_LEVEL=info

# Optional: Custom rate limit message
RATE_LIMIT_MESSAGE=Too many requests, please try again later.

# Optional: API Key for protected endpoints (if implementing authentication)
# API_KEY=your-secret-api-key-here

# Optional: Sentry DSN for error tracking
# SENTRY_DSN=https://your-sentry-dsn

# Optional: Custom health check endpoint path
# HEALTH_CHECK_PATH=/health