DATABASE_URL=postgres://mercury:mercury@db:5432/mercury JWT_SECRET=change_me_in_production JWT_EXPIRY_SECS=3600 CACHE_MAX_CAPACITY=10000 CACHE_IDLE_TIMEOUT_SECS=300 CACHE_SWEEP_INTERVAL_SECS=60 # Comma-separated allowed CORS origins, or * for permissive. Empty = no CORS headers. CORS_ORIGINS=