PUBLIC_URL=https://cms.example.com JWT_SECRET=replace-with-output-of-openssl-rand-hex-32 SMTP_HOST=smtp.example.com SMTP_PORT=465 SMTP_LOGIN=noreply@example.com SMTP_PASSWORD=replace-me SMTP_SENDER=noreply@example.com ENVIRONMENT=production CORS_ALLOWED_ORIGINS= AUTH_RATE_LIMIT_MAX_ATTEMPTS=5 AUTH_RATE_LIMIT_WINDOW_SECONDS=60 TRUSTED_PROXIES=