.env.example

# ================================
# NT - TAXOFFICE Environment Variables
# ================================

# Server Configuration
PORT=3000
NODE_ENV=development

# Session Secret (Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))")
# IMPORTANT: Generate a new random secret for production!
SESSION_SECRET=

# MySQL Database Configuration
# For Docker: Use service name from docker-compose.yml (usually 'mysql')
# For local: Use 'localhost' or '127.0.0.1'
DB_HOST=localhost
DB_PORT=3306
DB_USER=nt_taxoffice
DB_PASSWORD=
DB_NAME=nt_taxoffice_appointments

# Email Configuration (Gmail SMTP)
# To get Gmail App Password:
# 1. Enable 2-Factor Authentication on your Google account
# 2. Go to: https://myaccount.google.com/apppasswords
# 3. Select "Mail" and "Other (Custom name)"
# 4. Generate password and copy the 16-character code
GMAIL_USER=ntallas@ntallas.com
GMAIL_APP_PASSWORD=

# Admin Email (for receiving notifications)
ADMIN_EMAIL=ntallas@ntallas.com

# Application URLs
APP_URL=http://localhost:3000
APP_NAME=NT - TAXOFFICE

# Rate Limiting
# Window time in milliseconds (3600000 = 1 hour)
# Maximum requests allowed per IP address within the window
# Helps prevent abuse and brute-force attacks
RATE_LIMIT_WINDOW_MS=3600000
RATE_LIMIT_MAX_REQUESTS=5

# Timezone
# All dates/times in the system are converted to this timezone
# This affects appointment display, email timestamps, and availability calculations
TIMEZONE=Europe/Athens

# Appointment Configuration
# Default duration for each appointment slot in minutes
# This determines the granularity of available time slots in the booking calendar
DEFAULT_SLOT_DURATION=30

# Security
# Number of bcrypt hashing rounds for password encryption
# Higher numbers = more secure but slower (10-12 recommended for production)
BCRYPT_ROUNDS=12