chore: update .env.production

.env.production

@@ -36,7 +36,7 @@ LOG_LABELS=environment=production
 PHP_USER=www-data:www-data
 PHP_IDE_CONFIG=""
 XDEBUG_MODE=off
-COMPOSER_INSTALL_FLAGS=--no-dev --optimize-autoloader --classmap-authoritative
+COMPOSER_INSTALL_FLAGS="--no-dev --optimize-autoloader --classmap-authoritative"
 
 # Resource Limits (Production)
 WEB_MEMORY_LIMIT=256M
@@ -64,14 +64,12 @@ NETWORK_BACKEND_INTERNAL=true
 NETWORK_CACHE_INTERNAL=true
 
 # Production-specific configs
-DB_PORT=
 REDIS_CONFIG_PATH=./docker/redis/redis-secure.conf
 # PostgreSQL doesn't need custom config path
 HEALTHCHECK_START_PERIOD=30s
 
 # Production ports (only HTTPS)
 APP_PORT=
-APP_SSL_PORT=443
 
 # External APIs (Production)
 SHOPIFY_WEBHOOK_SECRET=SECURE_WEBHOOK_SECRET_HERE
@@ -100,7 +98,8 @@ ANALYTICS_TRACK_PAGE_VIEWS=true
 ANALYTICS_TRACK_API_CALLS=true
 ANALYTICS_TRACK_USER_ACTIONS=true
 ANALYTICS_TRACK_ERRORS=true
-ANALYTICS_TRACK_PERFORMANCE=false  # Disable debug performance tracking
+# Disable debug performance tracking
+ANALYTICS_TRACK_PERFORMANCE=false
 
 # Session Fingerprinting (Production - Stricter)
 SESSION_FINGERPRINT_STRICT=true
@@ -112,9 +111,6 @@ SESSION_FINGERPRINT_THRESHOLD=0.8
 # JavaScript Logger Configuration
 VITE_LOG_LEVEL=error
 
-# CRITICAL: Disable Xdebug in production
-XDEBUG_MODE=off
-
 # Admin IP Whitelist (comma-separated)
 # Add your office/home IP for production admin access
-ADMIN_ALLOWED_IPS=127.0.0.1,::1
+ADMIN_ALLOWED_IPS=127.0.0.1,::1