.env.example

# Local development only. Dev deployment uses the provided forms schema-owner login.
DATABASE_URL=postgresql://forms:forms_local@127.0.0.1:5546/forms?schema=forms
PORT=3006
CORS_ORIGINS=http://localhost:3000,http://localhost:3006

# Shared Topcoder JWT authentication: HS256 secret and RS256 issuer-derived JWKS.
AUTH_SECRET=local-development-only-change-this-secret-000000
VALID_ISSUERS=https://api.topcoder-dev.com,https://auth.topcoder-dev.com/,https://topcoder-dev.auth0.com/
AUTH_CLAIM_NAMESPACE=https://topcoder.com/

# Requests per client IP per minute, per API replica. Shared enforcement belongs at the gateway.
THROTTLE_LIMIT=30
# Empty means X-Forwarded-For is untrusted. List only your actual ingress proxy CIDRs.
TRUST_PROXY_CIDRS=

# Local Docker Compose host ports.
FORMS_HTTP_PORT=3006
FORMS_DATABASE_PORT=5546

# Optional outbound Kafka publication through Bus API (required for kafka=true submissions).
# The wrapper adds /bus/events; use the API base ending in /v6.
# BUSAPI_URL=https://api.topcoder-dev.com/v6
# AUTH0_URL=https://topcoder-dev.auth0.com/oauth/token
# AUTH0_AUDIENCE=https://www.topcoder-dev.com
# AUTH0_CLIENT_ID=
# AUTH0_CLIENT_SECRET=
# TOKEN_CACHE_TIME=86400000
# AUTH0_PROXY_SERVER_URL=
# KAFKA_ERROR_TOPIC=common.error.reporting