# STUPA PDF API Configuration Example
# Copy this file to .env and update with your values

# Database Configuration
MYSQL_HOST=db
MYSQL_PORT=3306
MYSQL_DB=stupa
MYSQL_USER=stupa
MYSQL_PASSWORD=your_secure_password_here
MYSQL_ROOT_PASSWORD=your_secure_root_password_here

# Authentication
# Master key for admin access - keep this secure!
MASTER_KEY=your_secure_master_key_here

# Rate Limiting
# Requests per minute per IP address
RATE_IP_PER_MIN=60
# Requests per minute per application key
RATE_KEY_PER_MIN=30

# Application Settings
# Timezone for the application
TZ=Europe/Berlin

# PDF Templates (paths inside container - don't change unless you know what you're doing)
QSM_TEMPLATE=/app/assets/qsm.pdf
VSM_TEMPLATE=/app/assets/vsm.pdf

# Frontend Configuration
NODE_ENV=production

# Optional: CORS Configuration (for production)
# CORS_ORIGINS=["https://your-domain.com"]

# Optional: Debug Mode (never enable in production)
# DEBUG=false

# Optional: Database Connection Pool
# DB_POOL_SIZE=10
# DB_MAX_OVERFLOW=20

# Optional: File Upload Limits
# MAX_UPLOAD_SIZE=104857600  # 100MB in bytes
# MAX_ATTACHMENTS_PER_APP=30

# Optional: Session Configuration
# SESSION_TIMEOUT=3600  # 1 hour in seconds

# Optional: Email Configuration (for future notifications)
# SMTP_HOST=smtp.example.com
# SMTP_PORT=587
# SMTP_USER=notifications@example.com
# SMTP_PASSWORD=smtp_password_here
# SMTP_FROM=noreply@example.com

# Optional: Logging Configuration
# LOG_LEVEL=INFO
# LOG_FILE=/var/log/stupa-api.log

# Optional: Backup Configuration
# BACKUP_ENABLED=true
# BACKUP_SCHEDULE="0 2 * * *"  # Daily at 2 AM
# BACKUP_RETENTION_DAYS=30

# Production Security Headers (uncomment for production)
# SECURE_HEADERS=true
# HSTS_ENABLED=true
# CSP_ENABLED=true