# DMARQ Environment Variables
#
# Copy this file to .env and fill in the values for your environment
# Example: cp .env.example .env

# Application Settings
PROJECT_NAME="DMARQ"

# SECURITY: Generate a secure random secret key
# Use: openssl rand -hex 32
# NEVER use the default value in production!
SECRET_KEY="CHANGE_THIS_TO_A_RANDOM_SECRET_IN_PRODUCTION"

# Admin API Key for the X-API-Key header (optional)
# If set, this key is used instead of generating a random one at startup.
# Generate with: openssl rand -hex 32
# If not set, a random key is generated each restart (key length logged only).
# ADMIN_API_KEY="your_admin_api_key_here"

# Environment (development/production)
# Affects HSTS and other security settings
ENVIRONMENT="development"

# Database
DATABASE_URL="sqlite:///./dmarq.db"
# For production, use PostgreSQL:
# DATABASE_URL="postgresql://user:password@localhost/dmarq"

# IMAP Settings for DMARC Report Retrieval
IMAP_SERVER="mail.example.com"  # Required for IMAP polling
IMAP_PORT=993                   # Default for SSL
IMAP_USERNAME="dmarc@example.com"
IMAP_PASSWORD="your_imap_password" # Consider using a secrets manager in production

# CORS Origins (comma separated)
# SECURITY: Be specific - avoid wildcards in production
BACKEND_CORS_ORIGINS="http://localhost:3000,http://localhost:5173"
# For production:
# BACKEND_CORS_ORIGINS="https://yourdomain.com"

# Admin User (first-time setup)
FIRST_SUPERUSER="admin@example.com"
FIRST_SUPERUSER_PASSWORD="adminpassword"

# Optional Cloudflare API Integration (for Milestone 8)
# CLOUDFLARE_API_TOKEN="your_cloudflare_api_token"
# CLOUDFLARE_ZONE_ID="your_cloudflare_zone_id"