# Required at boot — see docs-canonical/ENVIRONMENT.md for context. DATABASE_URL=postgres://acme:devpass@localhost:5432/payments STRIPE_SECRET_KEY=sk_test_xxxxxxxxxxxxxxxxxxxxxxxxx # Intentional drift: JWT_SECRET is used in code but NOT documented in ENVIRONMENT.md JWT_SECRET=change-me-in-prod