# Server Configuration NODE_ENV=development PORT=3000 HOST=0.0.0.0 # Database MONGODB_URI=mongodb://localhost:27017/turbotrades # Session SESSION_SECRET=your-super-secret-session-key-change-this-in-production # JWT Secrets JWT_ACCESS_SECRET=your-jwt-access-secret-change-this JWT_REFRESH_SECRET=your-jwt-refresh-secret-change-this JWT_ACCESS_EXPIRY=15m JWT_REFRESH_EXPIRY=7d # Steam OpenID STEAM_API_KEY=your-steam-api-key-here STEAM_REALM=http://localhost:3000 STEAM_RETURN_URL=http://localhost:3000/auth/steam/return # Cookie Settings COOKIE_DOMAIN=localhost COOKIE_SECURE=false COOKIE_SAME_SITE=lax # CORS CORS_ORIGIN=http://localhost:3000 # Rate Limiting RATE_LIMIT_MAX=100 RATE_LIMIT_TIMEWINDOW=60000 # Email Configuration (for future implementation) SMTP_HOST=smtp.example.com SMTP_PORT=587 SMTP_USER=your-email@example.com SMTP_PASS=your-email-password EMAIL_FROM=noreply@turbotrades.com # WebSocket WS_PING_INTERVAL=30000 WS_MAX_PAYLOAD=1048576