# ==========================================
# REQUIRED SETTINGS
# ==========================================

# Security: Must be set to a secure random string in production
SECRET_KEY=generate_with_openssl_rand_base64_32

# ==========================================
# OPTIONAL SETTINGS (Defaults shown)
# ==========================================

# Database: Defaults to sqlite:////config/config.db if not set
# DATABASE_URL=sqlite:////config/config.db

# Security: Defaults to HS256 and 1440 (24h)
# ALGORITHM=HS256
# ACCESS_TOKEN_EXPIRE_MINUTES=1440

# CORS: Add external domains here. Defaults to empty list (localhost only).
# ALLOWED_HOSTS=["https://your-domain.com"]

# Frontend: Defaults to localhost:8000
# VITE_API_URL=http://localhost:8000
# VITE_WS_URL=ws://localhost:8000/ws

# Development: Defaults to false/info
# DEBUG=false
# LOG_LEVEL=info