# Server
PORT=4208
BODY_LIMIT=100mb

# CORS — comma-separated allowed origins
CORS_ORIGINS=http://localhost:5173

# Auth — Google OAuth client ID and JWT signing secret
GOOGLE_CLIENT_ID=
JWT_SECRET=fallback_secret_please_change_in_production
IMPLICIT_CREATE=false

# Database Provider — 'sqlite' or 'mssql' (defaults to 'mssql', or 'sqlite' if SQLITE_PATH is set)
DB_PROVIDER=sqlite
# SQLite database path (e.g. './data/dash.db' or ':memory:' for in-memory)
SQLITE_PATH=./data/dash.db

# Database — MSSQL (used when DB_PROVIDER=mssql)
MSSQL_SERVER=
MSSQL_DATABASE=
MSSQL_USER=
MSSQL_PASSWORD=
MSSQL_PORT=1433
MSSQL_ENCRYPT=false
MSSQL_TRUST_SERVER_CERTIFICATE=false

# Article search — category filters (comma-separated IDs)
KAT_SKIP=
KAT_LISTS=0

# Tax zone name for VAT rates (tSteuerzone.cName)
STEUER_ZONE=Zone-EU