JWT_SECRET=change-me-to-a-random-secret JWT_REFRESH_SECRET=change-me-to-another-random-secret API_KEY_ENCRYPTION_SECRET=change-me-to-a-64-char-hex-string GOOGLE_CLIENT_ID= GOOGLE_CLIENT_SECRET= GITHUB_CLIENT_ID= GITHUB_CLIENT_SECRET= OAUTH_CALLBACK_BASE_URL=https://your-domain.com FRONTEND_URL=https://your-domain.com