fix: removed hardcoded api url

ENV_SETUP.md

@@ -21,7 +21,6 @@ Required or commonly used:
 - `JWT_SECRET`
 - `ENCRYPTION_KEY`
 - `FRONTEND_URL`
-- `VITE_API_BASE_URL`
 - `DEFAULT_ADMIN_EMAIL`
 - `DEFAULT_ADMIN_USERNAME`
 - `DEFAULT_ADMIN_PASSWORD`
@@ -41,7 +40,6 @@ Optional backend runtime values that Docker Compose will also pass through if pr
 - MongoDB container: `mongodb://admin:password@mongodb:27017/noteapp?authSource=admin`
 - Backend port: `8080`
 - Public frontend URL: `http://localhost`
-- Browser API base URL for container builds: `http://localhost`
 
 ## 2. `backend/.env`
 
@@ -107,13 +105,12 @@ cp .env.example .env
 
 ### Frontend Variables In `frontend/.env.example`
 
-- `VITE_API_BASE_URL`
 - `VITE_ENV`
 - `VITE_ENABLE_ANALYTICS`
 
 ### Variables Currently Relevant To The Frontend App
 
-- `VITE_API_BASE_URL`: used by the API client
+- API requests are sent to the current browser origin (same-origin runtime behavior)
 
 The other example values are safe to keep, but the current checked-in frontend code does not actively consume them.