updates on the address while creasating the orders and security updates as well

.env.production

@@ -0,0 +1,21 @@
+# Committed on purpose.
+#
+# Every other env file (.env, .env.development, .env.staging) is gitignored,
+# so a fresh clone or a build host has none of them. A production build then
+# leaves REACT_APP_URL undefined, every request becomes the relative path
+# "undefined/orders/..." and silently resolves against whatever origin the
+# console is served from instead of the API. That shipped once.
+#
+# CRA auto-loads this file for `npm run build`, so the build host needs no
+# manual setup. `.gitignore` excludes .env.production.local but NOT this file,
+# which is what makes it the right place for these.
+#
+# Nothing secret belongs here: these hostnames are already visible in the
+# shipped JS bundle. Keep credentials in .env.production.local (gitignored).
+#
+# env-cmd (build:dev / build:staging) sets process.env before CRA runs, and
+# CRA's dotenv does not overwrite existing values, so those builds still win.
+
+REACT_APP_URL=https://jupiter.nearle.app/live/api/v1
+REACT_APP_URL2=https://jupiter.nearle.app/live/api/v2
+REACT_APP_URL3=https://jupiter.nearle.app/live/api/v3