# --- Authentication (set at least one before any public deploy) ---
# RapidAPI sends this secret on every proxied request via the header
# X-RapidAPI-Proxy-Secret. Set it so ONLY RapidAPI's gateway can reach you.
RAPIDAPI_PROXY_SECRET=

# Simple key for direct/local access. Clients send header: x-api-key: <value>
API_KEY=

# If BOTH are empty the API is OPEN (local testing only) and logs a warning.

# Port the server listens on. Cloud Run / Render inject this automatically.
PORT=8080