# Server
NODE_ENV=development
PORT=5000
CORS_ORIGIN=http://localhost:5173,http://localhost:3000

# MongoDB
MONGODB_URI=mongodb://127.0.0.1:27017/green-yatri

# JWT
JWT_ACCESS_SECRET=change-me-access-secret-min-32-chars
JWT_REFRESH_SECRET=change-me-refresh-secret-min-32-chars
JWT_ACCESS_EXPIRES_IN=15m
JWT_REFRESH_EXPIRES_IN=7d

# Cookies (refresh token)
COOKIE_SECURE=false
COOKIE_SAME_SITE=lax

# OTP
OTP_LENGTH=6
OTP_EXPIRY_MINUTES=5
OTP_RESEND_MAX=3
OTP_RESEND_WINDOW_MINUTES=10

# Rate limiting
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX=100

# Local uploads (files served at /uploads)
PUBLIC_BASE_URL=http://localhost:5000
UPLOAD_DIR=uploads
UPLOAD_MAX_FILE_SIZE_MB=5
UPLOAD_ALLOWED_MIME_TYPES=image/jpeg,image/png,image/webp,application/pdf

# Ride booking cancellation window (minutes before departure)
BOOKING_CANCELLATION_WINDOW_MINUTES=60

# Optional override for Indian vehicle plate validation (JS regex source, no slashes)
# Default: ^[A-Z]{2}[0-9]{1,2}[A-Z]{0,3}[0-9]{4}$
VEHICLE_NUMBER_REGEX=

# Admin bootstrap (created automatically if no Admin docs exist)
ADMIN_BOOTSTRAP_EMAIL=admin@greenyatri.com
ADMIN_BOOTSTRAP_PASSWORD=Admin@12345

# Admin panel URL (used in password-reset email links)
ADMIN_PANEL_URL=http://localhost:5173
PASSWORD_RESET_EXPIRY_MINUTES=30

# Optional SMTP (when unset, emails log to console like the SMS stub)
# SMTP_HOST=smtp.example.com
# SMTP_PORT=587
# SMTP_SECURE=false
# SMTP_USER=
# SMTP_PASS=
# SMTP_FROM=Green Yatri <noreply@greenyatri.com>
