Environment Variables

Start from .env.example and adjust production values.

Core

NODE_ENV=production
HOST=127.0.0.1
PORT=3001
TRUST_PROXY=true
SERVE_STATIC_CLIENT=false

FRONTEND_URL=https://pay.payincus.com
ADMIN_FRONTEND_URL=https://admin.payincus.com
SITE_URL=https://pay.payincus.com
PAYMENT_CALLBACK_BASE_URL=https://pay.payincus.com
VITE_API_BASE_URL=/api
VITE_CUSTOMER_BASE_URL=https://pay.payincus.com
VITE_ADMIN_BASE_URL=https://admin.payincus.com

Cookies

COOKIE_SAME_SITE=
COOKIE_SECURE=
COOKIE_DOMAIN=

Keep COOKIE_DOMAIN empty unless you have a clear cross-domain cookie strategy.

Secrets

JWT_SECRET=change_me_generate_with_openssl_rand_base64_48
COOKIE_SECRET=change_me_generate_with_openssl_rand_base64_48
ENCRYPTION_KEY=change_me_generate_with_openssl_rand_base64_48
ADMIN_PASSWORD=change_me_admin_password

Never enable RESET_DATABASE in production.