start project

.env.example

@@ -12,6 +12,10 @@ DJANGO_SECRET_KEY=change-me-to-a-64-character-random-string-before-any-real-depl
 DJANGO_DEBUG=false
 DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1,backend
 DJANGO_ADMIN_URL=admin/
+# Serve /api/docs/, /api/redoc/ and /api/schema/.  Handy locally; set to false
+# on any public deployment, since they describe every endpoint and payload in
+# the service and are reachable without authenticating.
+SERVE_API_DOCS=true
 ENVIRONMENT=development
 SERVICE_NAME=linkedin-search-api
 SECURE_SSL_REDIRECT=false