[server]
host = "0.0.0.0"
port = 3000
max_body_size = 10485760
spa_dir = "/spa/dist"

[server.cors]
allow_any_origin = true

[storage]
data_dir = "/data"

[storage.media]
backend = "local"
media_dir = "media"

[auth]
jwt_secret = "dev-secret-do-not-use-in-prod"
access_token_ttl_seconds = 900
refresh_token_ttl_seconds = 2592000
allow_registration = true