Configuration
Environment variables that control runtime behavior.
Required secrets
JWT_ACCESS_SECRET/JWT_REFRESH_SECRETCSRF_SECRET/TOTP_ENCRYPTION_KEYPOSTGRES_PASSWORD/REDIS_PASSWORD
URLs and ports
APP_URL should match the public origin. Override NGINX_HTTP_PORT when 2121 is unavailable.
Optional integrations
GSTIN, IFSC, and HSN lookup providers can be enabled through feature flags in .env.