Environment detection via your current working directory, because nothing says production like a string match on where somebody happened to cd. Move the app to /var/www_backup and it'll happily point production traffic at localhost:3000 while you sleep.