# =============================================================================
# Django application settings (read by timetracker/config.py)
#
# Resolution priority, highest first:
#   SECRET_KEY__FILE  ->  env var  ->  .env  ->  settings.ini  ->  built-in default
# See docs/configuration.md for the full reference.
# =============================================================================

# Turn DEBUG off in production. Defaults on for local development.
# (The old PROD=1 variable still works but is deprecated; prefer DEBUG.)
DEBUG=false

# Secret key. Required in production; an insecure default is used in DEBUG.
# For Docker/K8s secrets, point SECRET_KEY__FILE at a mounted file instead.
SECRET_KEY=change-me-to-a-long-random-string
# SECRET_KEY__FILE=/run/secrets/timetracker_secret_key

# Public URL of the site. Derives ALLOWED_HOSTS and CSRF_TRUSTED_ORIGINS.
APP_URL=https://tracker.kucharczyk.xyz

# Optional explicit overrides (comma-separated). When set they win over APP_URL.
# Useful behind a reverse proxy, e.g. ALLOWED_HOSTS=*
# ALLOWED_HOSTS=*
# CSRF_TRUSTED_ORIGINS=https://tracker.kucharczyk.xyz

# Container timezone.
TZ=Europe/Prague

# Directory holding the SQLite database (defaults to the project root).
DATA_DIR=/home/timetracker/app/data

# =============================================================================
# Container / entrypoint-only settings (read by entrypoint.sh, NOT by Django)
# =============================================================================

# User/group IDs the container process runs as.
PUID=1000
PGID=100

# Create an admin/admin superuser on startup (for initial setup only).
CREATE_DEFAULT_SUPERUSER=false

# =============================================================================
# docker-compose-only settings (compose file substitution, not the app)
# =============================================================================

# Docker registry URL (used in docker-compose.yml).
REGISTRY_URL=registry.kucharczyk.xyz

# External port mapping.
TIMETRACKER_EXTERNAL_PORT=8000