register and sign in pages

backend/.env.example

@@ -0,0 +1,45 @@
+# =============================================================================
+# Django
+# =============================================================================
+SECRET_KEY="change-me"
+DJANGO_DEBUG=True
+# Comma-separated. Include the backend service name for the compose network.
+ALLOWED_HOSTS="localhost,127.0.0.1,backend"
+# Comma-separated absolute origins the browser calls the API from.
+CORS_ALLOWED_ORIGINS="http://localhost:5173"
+CSRF_TRUSTED_ORIGINS="http://localhost:5173"
+
+# --- only read when DJANGO_DEBUG=False ---
+SECURE_SSL_REDIRECT=False
+SECURE_HSTS_SECONDS=0
+
+# =============================================================================
+# Database (PostgreSQL) - matches the `database` service in compose.yml
+# =============================================================================
+POSTGRES_DATABASE=sarlink
+POSTGRES_USER=sarlink
+POSTGRES_PASSWORD=changeme
+POSTGRES_HOST=database
+POSTGRES_PORT=5432
+
+# =============================================================================
+# SMS gateway - login/registration OTP
+# Leave empty in dev: codes are written to the log instead of being sent.
+# =============================================================================
+SMS_API_URL=""
+SMS_API_KEY=""
+SMS_SENDER="SARLink"
+
+# =============================================================================
+# OTP policy
+# =============================================================================
+OTP_TTL_SECONDS=300
+OTP_MAX_ATTEMPTS=5
+OTP_RESEND_COOLDOWN_SECONDS=60
+# How long a number stays verified for the registration form (30 min).
+REGISTRATION_TICKET_TTL_SECONDS=1800
+
+# =============================================================================
+# Public frontend base URL (used in SMS links)
+# =============================================================================
+FRONTEND_URL=http://localhost:5173