# Copy to .env and fill in real values for local development.
# NEVER commit a real .env file.

# --- Runtime ---
AURORA_ENV=development
AURORA_LOG_LEVEL=INFO
AURORA_API_DOCS_ENABLED=true

# --- Database ---
# Async URL used by the application (asyncpg driver).
DATABASE_URL=postgresql+asyncpg://aurora:aurora@localhost:5432/aurora_core
# Sync URL used by Alembic migrations (psycopg2 driver).
DATABASE_URL_SYNC=postgresql+psycopg2://aurora:aurora@localhost:5432/aurora_core
DATABASE_POOL_SIZE=10
DATABASE_MAX_OVERFLOW=20

# --- Redis ---
REDIS_URL=redis://localhost:6379/0
# If false, the app runs without caching/rate-limiting when Redis is unreachable
# instead of failing readiness checks.
REDIS_REQUIRED=false

# --- Security ---
# Signs user-account JWT access tokens (app/core/auth.py) -- a weak or
# leaked value lets anyone forge a valid login for any user id. Generate
# with: python -c "import secrets; print(secrets.token_urlsafe(48))"
AURORA_SECRET_KEY=changeme-generate-a-real-secret
# Comma-separated API keys allowed to call /api/v1/admin/* endpoints.
AURORA_ADMIN_API_KEYS=changeme-admin-key

# --- CORS ---
CORS_ORIGINS=http://localhost:3000,http://localhost:5173

# --- Providers ---
# https://www.themoviedb.org/settings/api
TMDB_API_KEY=

# --- Workers ---
WORKER_CONCURRENCY=4

# --- Caching ---
CACHE_DEFAULT_TTL=300

# --- Rate limiting ---
RATE_LIMIT_ENABLED=true
RATE_LIMIT_PER_MINUTE=120

# --- Artwork storage ---
# Local disk, shared between the api and worker containers via a volume
# (see docker-compose.yml) -- the worker downloads here, the api serves it.
MEDIA_ROOT=./media
MEDIA_URL_PREFIX=/media
ARTWORK_DOWNLOAD_MAX_BYTES=15728640

# --- Production only (docker-compose.prod.yml) ---
# Not used by docker-compose.yml (local dev) or the app itself directly --
# only interpolated into the postgres/pgbouncer service definitions.
# Generate POSTGRES_PASSWORD with a URL-safe generator, not `openssl rand
# -base64`: base64 output can contain `/+=`, which breaks pgbouncer's (and
# any DATABASE_URL parser's) naive URL parsing.
POSTGRES_USER=aurora
# python3 -c "import secrets; print(secrets.token_urlsafe(32))"
POSTGRES_PASSWORD=changeme-generate-a-real-password
POSTGRES_DB=aurora_core