The backend will reject requests from origins not listed in ALLOWED_ORIGINS. Make sure both the platform frontend (:8080) and marketing site (:5173) are included for local development.
# EnvironmentENVIRONMENT=developmentDEBUG=trueSECRET_KEY=your-secret-key-here# SupabaseSUPABASE_URL=https://your-project.supabase.coSUPABASE_ANON_KEY=your-anon-keySUPABASE_SERVICE_ROLE_KEY=your-service-role-key# CORS — include both frontend dev serversALLOWED_ORIGINS=http://localhost:5173,http://localhost:8080,http://localhost:3000ALLOWED_HOSTS=localhost,127.0.0.1# AI ServicesGOOGLE_API_KEY=your-google-api-keyOPENAI_API_KEY=your-openai-api-keyTAVILY_API_KEY=your-tavily-keyVISION_AGENT_API_KEY=your-vision-agent-key# Stripe — local dev redirect URLsSTRIPE_API_KEY=sk_test_...STRIPE_WEBHOOK_SECRET=whsec_...STRIPE_SUCCESS_URL=http://localhost:8080/payment-success?session_id={CHECKOUT_SESSION_ID}STRIPE_CANCEL_URL=http://localhost:5173/#pricing# Redis / CeleryREDIS_URL=redis://localhost:6379/0USE_CELERY=trueCELERY_BROKER_URL=redis://localhost:6379/0CELERY_RESULT_BACKEND=redis://localhost:6379/0