Related to #1; at some point, it will be necessary to pass configuration to the backend, for example which CORS origin(s) to allow or which hostname/port to listen on. I should update the backend to read configuration from the environment or a .env file in the backend root directory.
