.env.example

# Django Settings
# SECRET_KEY is auto-generated if not set. For production, set a persistent value.
# SECRET_KEY=your-secret-key-here
DEBUG=True
# Use * to allow all hosts (convenient for development/testing)
# In production, set to specific domains: ALLOWED_HOSTS=yourdomain.com,www.yourdomain.com
ALLOWED_HOSTS=*

# Database Settings
DATABASE_NAME=blik
DATABASE_USER=blik
DATABASE_PASSWORD=changeme
DATABASE_HOST=db
DATABASE_PORT=5432

# Email Settings (SMTP)
# For development with Mailpit (local testing)
EMAIL_BACKEND=django.core.mail.backends.smtp.EmailBackend
EMAIL_HOST=host.docker.internal
EMAIL_PORT=1025
EMAIL_USE_TLS=False
EMAIL_HOST_USER=
EMAIL_HOST_PASSWORD=
DEFAULT_FROM_EMAIL=noreply@blik.local

# Organization Settings
ORGANIZATION_NAME=Your Organization


# Auto-setup Settings (for automated deployments)
# Leave empty to use the setup wizard at /setup/
DJANGO_SUPERUSER_USERNAME=
DJANGO_SUPERUSER_EMAIL=
DJANGO_SUPERUSER_PASSWORD=

# Security Settings (set to False in development)
SESSION_COOKIE_SECURE=False
CSRF_COOKIE_SECURE=False

# CSRF Trusted Origins (comma-separated list)
# Required for production. Include protocol (https://) and domain.
# Example: CSRF_TRUSTED_ORIGINS=https://example.com,https://www.example.com
CSRF_TRUSTED_ORIGINS=

# Encryption key for sensitive data (SMTP passwords stored in database)
# IMPORTANT: Generate a unique key for production with:
# python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
# Default key provided for development only - MUST be changed for production
ENCRYPTION_KEY=si1qWsaNKwavcargvESNiAZVdNmFt-ZieXiaziK-xnA=

# Stripe Settings (for SaaS billing)
# Get these from https://dashboard.stripe.com
# For local development webhooks, run: ./stripe-webhook-forward.sh
STRIPE_PUBLISHABLE_KEY=pk_test_your_key_here
STRIPE_SECRET_KEY=sk_test_your_key_here
STRIPE_WEBHOOK_SECRET=whsec_your_webhook_secret_here
STRIPE_PRICE_ID_SAAS=price_id_for_saas_plan
STRIPE_PRICE_ID_ENTERPRISE=price_id_for_enterprise_plan

# Site Settings (for SaaS deployment)
SITE_NAME=Blik360
SITE_DOMAIN=blik360.com
SITE_PROTOCOL=https
MAIN_APP_URL=https://app.blik360.com

# Growth Hack Settings (for landing page assessment)
# Run 'python manage.py setup_growth_org' and 'python manage.py create_growth_questionnaire'
# to create the organization and questionnaire
# Then create an API token for "Blik Growth Leads" organization via Django admin
GROWTH_QUESTIONNAIRE_UUID=
LANDING_SERVICE_API_TOKEN=