.env.example

PORT=4000
API_PORT=4000
CLIENT_URL=http://localhost:8081
# Optional comma-separated CORS allowlist. CLIENT_URL is used when this is empty.
CLIENT_URLS=http://localhost:8081,http://localhost:8082
DATABASE_URL=postgresql://postgres@localhost:5432/soundlog_dev?schema=public
POSTGRES_PORT=5432
POSTGRES_USER=soundlog
POSTGRES_PASSWORD=soundlog_password
POSTGRES_DB=soundlog
JWT_SECRET=change-me-in-local-development
JWT_EXPIRES_IN_SECONDS=3600
# Optional. Production accepts HTTPS endpoints only; otherwise seed recommendations are used.
ML_RECOMMENDATION_API_URL=
ML_RECOMMENDATION_TIMEOUT_MS=5000
# 앱 심사 대응용 신고 운영 API 비밀키입니다. 운영에서는 32자 이상으로 설정합니다.
MODERATION_ADMIN_KEY=
# cloud_logging은 GCP 구조화 로그를 사용합니다. webhook은 아래 HTTPS 주소가 필요합니다.
MODERATION_ALERT_MODE=cloud_logging
MODERATION_ALERT_WEBHOOK_URL=
MODERATION_SWEEP_INTERVAL_MS=900000
# 심사 시연 데이터를 준비할 때만 사용하는 계정입니다. 저장소에 실제 비밀번호를 넣지 않습니다.
APP_REVIEW_EMAIL=
APP_REVIEW_PASSWORD=
# 앱과 공개 약관 및 고객지원 페이지에 함께 표시할 실제 수신 가능한 메일입니다.
SUPPORT_EMAIL=
REQUEST_BODY_LIMIT=1mb
MOMENT_PHOTO_MAX_FILE_SIZE_MB=10
REVERSE_GEOCODING_BASE_URL=https://nominatim.openstreetmap.org
REVERSE_GEOCODING_USER_AGENT=Soundlog/0.1 (+https://github.com/SoundLogTeam/SoundLogServer)
TOUR_API_BASE_URL=https://apis.data.go.kr/B551011/KorService2
TOUR_API_SERVICE_KEY=
ALLOW_DEV_AUTH_FALLBACK=false
# Rate limiting for /v1/auth/login, /v1/auth/register, /v1/auth/refresh.
# AUTH_RATE_LIMIT_ENABLED defaults to true, except under NODE_ENV=test where
# it defaults to false so test suites can call auth endpoints repeatedly.
# AUTH_RATE_LIMIT_ENABLED=true
# Per-account limit (keyed by IP + email): blocks repeated attempts against one account.
AUTH_RATE_LIMIT_WINDOW_MS=900000
AUTH_RATE_LIMIT_MAX=10
# Per-IP limit (keyed by IP only): blocks credential stuffing across many different
# emails from the same IP. Looser than the per-account limit above.
AUTH_RATE_LIMIT_IP_WINDOW_MS=900000
AUTH_RATE_LIMIT_IP_MAX=40
# Direct server access must keep this at 0. api.soundlog.p-e.kr의 nginx 뒤에서는 1로 설정합니다.
TRUST_PROXY_HOPS=0
UPLOAD_DIRECTORY=uploads
UPLOAD_PUBLIC_BASE_URL=http://localhost:4000
USE_MOCK_DB=false

# Production checklist:
# NODE_ENV=production
# CLIENT_URLS=https://api.soundlog.p-e.kr
# api.soundlog.p-e.kr의 HTTPS nginx가 준비된 운영 환경:
# UPLOAD_PUBLIC_BASE_URL=https://api.soundlog.p-e.kr
# TRUST_PROXY_HOPS=1
# USE_MOCK_DB=false
# ALLOW_DEV_AUTH_FALLBACK=false