# Database (PostgreSQL required)
DATABASE_URL=postgres://postgres:password@localhost:5432/thoughts

# Authentication
JWT_SECRET=change-me

# Public base URL — used for ActivityPub actor URLs and canonical links
BASE_URL=http://localhost:3000

# Optional
HOST=0.0.0.0
PORT=3000

# CORS — comma-separated allowed origins, or * for permissive (default: *)
CORS_ORIGINS=*
# CORS_ORIGINS=https://your-nextjs-app.example.com

# Rate limiting — max requests per minute per IP (disabled by default)
# RATE_LIMIT=60
ALLOW_REGISTRATION=true   # set to false to disable new sign-ups
RUST_ENV=development      # set to "production" to disable AP debug mode

# NATS event bus (optional — federation and notifications still work without it,
# but events will not be delivered to the worker)
# NATS_URL=nats://localhost:4222

# Logging
RUST_LOG=info