DATABASE_URL=postgres://mercury:mercury@db:5432/mercury
JWT_SECRET=change_me_in_production
JWT_EXPIRY_SECS=3600
CACHE_MAX_CAPACITY=10000
CACHE_IDLE_TIMEOUT_SECS=300
CACHE_SWEEP_INTERVAL_SECS=60
# Comma-separated allowed CORS origins, or * for permissive. Empty = no CORS headers.
CORS_ORIGINS=

# DEV ONLY: set to "true" to bypass all authentication/permission checks
# (every request is treated as a super-admin, no login required). Never set
# this in production.
DISABLE_AUTH=

# CDN (MinIO object storage) — credentials and bucket are pre-configured internally.
# When registering CDN objects in the admin UI, use this URL prefix:
#   docker-compose:  http://cdn:9000/mercury/<filename>
#   standalone:      http://localhost:9000/mercury/<filename>