# Production builds MUST NOT bake the ERPNext token into the JS bundle.
# In prod the ops-frontend nginx injects `Authorization: token …` server-side
# (see apps/ops/infra/nginx.conf). The client calls same-origin /ops/api and never
# holds a token. Leaving this empty keeps the admin key out of the shipped bundle.
# Local dev still uses apps/ops/.env (which may set VITE_ERP_TOKEN for `quasar dev`).
VITE_ERP_TOKEN=