# Same-origin in dev (Vite proxies to the real API — avoids CORS)
VITE_API_BASE_URL=/server/api
# Set true only for offline local OTP (code 1234)
VITE_USE_MOCK_AUTH=false