# Server
PORT=3000

# Security
TOKEN_SECRET=your_random_secret_here

# CORS (comma-separated origins, empty = allow all)
CORS_ORIGINS=

# MySQL
DB_HOST=your_mysql_host_here
DB_USER=your_mysql_user_here
DB_PASSWORD=your_mysql_password_here
DB_NAME=your_mysql_name_here

# Uploads
UPLOAD_DIR=./uploads

# Backup
BACKUP_DIR=/var/backups/xiaocai

# WeChat Mini Program
WX_APPID=your_wx_appid_here
WX_SECRET=your_wx_secret_here