# Server PORT=4000 CORS_ORIGIN=http://localhost:5173 # MongoDB MONGO_URI=mongodb://localhost:27017 # JWT JWT_SECRET=change-me-in-production-use-a-long-random-string # Google OAuth (optional — email auth works without these) GOOGLE_CLIENT_ID= GOOGLE_CLIENT_SECRET= GOOGLE_CALLBACK_URL=http://localhost:4000/api/auth/google/callback