.env.example

# Athena Attendance System - Environment Configuration
# Copy this file to .env and fill in your values

# ---------- SECURITY ----------
# Encryption key for field-level AES-256-GCM (generate with: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())")
# Minimum 32 bytes (44 chars in base64). KEEP THIS SECRET - data cannot be decrypted without it.
ENCRYPTION_KEY=

# Secret key for signing session cookies (generate with: python -c "import secrets; print(secrets.token_hex(32))")
SECRET_KEY=

# ---------- DATABASE ----------
# SQLite database file path (relative to project root)
DATABASE_URL=athena_attendance.db

# ---------- TIMEZONE ----------
# Default timezone for session display (IANA format)
TIMEZONE=Asia/Vientiane

# ---------- SESSION SETTINGS ----------
# Session timeout in minutes (default: 30)
SESSION_TIMEOUT_MINUTES=30

# Default late arrival threshold in minutes (default: 10)
DEFAULT_LATE_THRESHOLD=10

# Rate limit: max login attempts per IP per window
RATE_LIMIT_MAX_ATTEMPTS=5
RATE_LIMIT_WINDOW_MINUTES=10

# ---------- SERVER ----------
# Host and port for the server
HOST=0.0.0.0
PORT=8000

# HTTPS enforcement (set True in production with real cert)
# For dev: False (use self-signed cert or reverse proxy)
HTTPS_ENABLED=False