# Local development defaults APP_ENV=development APP_DEBUG=true APP_NAME="Password Generator API" APP_VERSION="2.0.0" # Security API_KEY_ENABLED=false API_KEY="" # CORS (keep local development origin explicit instead of wildcard) CORS_ORIGIN="http://localhost:8080" CORS_METHODS="GET,POST,OPTIONS" CORS_HEADERS="Content-Type,Authorization" # Logging LOG_LEVEL=debug LOG_PATH=logs/app.log # Rate limiting RATE_LIMIT=60