.env.example

SECRET_KEY=django-insecure-change-me-in-production
DEBUG=True
ALLOWED_HOSTS=localhost,127.0.0.1,api

# Public HTTPS origins, needed for admin login once DEBUG=False behind the proxy
CSRF_TRUSTED_ORIGINS=
BEHIND_TLS_PROXY=False

POSTGRES_DB=coverletter_db
POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres
POSTGRES_HOST=db
POSTGRES_PORT=5432

REDIS_URL=redis://redis:6379/0

CORS_ALLOWED_ORIGINS=http://localhost:3007

GEMINI_API_KEY=
GEMINI_MODEL=gemini-2.5-flash
GEMINI_TIMEOUT_SECONDS=60

MEDIA_ROOT=/app/media
JOB_RETENTION_HOURS=24
MAX_RESUME_SIZE_MB=5
JOB_CREATE_RATE=10/hour

# Leave the password blank to skip superuser creation entirely
DJANGO_SUPERUSER_USERNAME=admin
DJANGO_SUPERUSER_EMAIL=admin@example.com
DJANGO_SUPERUSER_PASSWORD=admin