# Server
PORT=4208
BODY_LIMIT=100mb

# CORS — comma-separated allowed origins
CORS_ORIGINS=http://localhost:5173

# Auth — Google OAuth client ID and JWT signing secret
GOOGLE_CLIENT_ID=
JWT_SECRET=fallback_secret_please_change_in_production
IMPLICIT_CREATE=false

# Database — MSSQL (auth allowlist and JTL-Wawi article data)
MSSQL_SERVER=
MSSQL_DATABASE=
MSSQL_USER=
MSSQL_PASSWORD=
MSSQL_PORT=1433
MSSQL_ENCRYPT=false
MSSQL_TRUST_SERVER_CERTIFICATE=false

# Article search — category filters (comma-separated IDs)
KAT_SKIP=
KAT_LISTS=0

# Tax zone name for VAT rates (tSteuerzone.cName)
STEUER_ZONE=Zone-EU