# Copy to .env.docker on the server (never commit real secrets). # # Required in production: JWT_SECRET=replace-with-a-long-random-secret # # Frontend origin (your deployed Vue app URL): CORS_ORIGIN=https://your-frontend-domain.example