feat: Perform repository cleanup and hardening

.env.example

@@ -0,0 +1,27 @@
+# This file serves as an example for the .env file.
+# Copy this file to .env and fill in your actual credentials.
+# DO NOT COMMIT YOUR ACTUAL .env FILE TO VERSION CONTROL.
+
+# Server Configuration
+PORT=5004
+DATABASE_URL="postgresql://user:password@host:port/database"
+# SESSION_SECRET="your-strong-session-secret" # Uncomment and set if using express-session
+
+# Firebase Admin SDK (Server-side) - Get these from your Firebase project settings (Service Accounts)
+FIREBASE_PROJECT_ID="your-firebase-project-id"
+FIREBASE_CLIENT_EMAIL="your-firebase-client-email"
+FIREBASE_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\nYOUR_PRIVATE_KEY_HERE\n-----END PRIVATE KEY-----\n" # Ensure to format the private key correctly (replace \n with actual newlines if copy-pasting directly into .env)
+
+# Firebase Client SDK (Client-side, for Vite) - Get these from your Firebase project settings (Web app)
+VITE_API_KEY="your-firebase-api-key"
+VITE_AUTH_DOMAIN="your-firebase-auth-domain"
+VITE_PROJECT_ID="your-firebase-project-id" # Can be the same as FIREBASE_PROJECT_ID
+VITE_STORAGE_BUCKET="your-firebase-storage-bucket"
+VITE_MESSAGING_SENDER_ID="your-firebase-messaging-sender-id"
+VITE_APP_ID="your-firebase-app-id"
+
+# Frontend URL (for CORS configuration on the server)
+FRONTEND_URL="http://localhost:5173" # Or your deployed frontend URL
+
+# Optional: Logging level for Winston (e.g., info, debug, warn, error)
+# LOG_LEVEL="info"