# =============================================================================
# Django
# =============================================================================
SECRET_KEY="change-me"
DJANGO_DEBUG=True
# Comma-separated. Include the backend service name for the compose network.
ALLOWED_HOSTS="localhost,127.0.0.1,backend"
# Comma-separated absolute origins the browser calls the API from.
CORS_ALLOWED_ORIGINS="http://localhost:5173"
CSRF_TRUSTED_ORIGINS="http://localhost:5173"

# --- only read when DJANGO_DEBUG=False ---
SECURE_SSL_REDIRECT=False
SECURE_HSTS_SECONDS=0

# =============================================================================
# Database (PostgreSQL) - matches the `database` service in compose.yml
# =============================================================================
POSTGRES_DATABASE=sarlink
POSTGRES_USER=sarlink
POSTGRES_PASSWORD=changeme
POSTGRES_HOST=database
POSTGRES_PORT=5432

# =============================================================================
# SMS gateway - login/registration OTP
# Leave empty in dev: codes are written to the log instead of being sent.
# =============================================================================
SMS_API_URL=""
SMS_API_KEY=""
SMS_SENDER="SARLink"

# =============================================================================
# OTP policy
# =============================================================================
OTP_TTL_SECONDS=300
OTP_MAX_ATTEMPTS=5
OTP_RESEND_COOLDOWN_SECONDS=60
# How long a number stays verified for the registration form (30 min).
REGISTRATION_TICKET_TTL_SECONDS=1800

# =============================================================================
# Public frontend base URL (used in SMS links)
# =============================================================================
FRONTEND_URL=http://localhost:5173