.env.example

# =============================================================================
# ECOMMDEV Environment Configuration
# Copy this file to .env and fill in your values
# NEVER commit .env files with real credentials to version control!
# =============================================================================

# Django Core
SECRET_KEY=your-secret-key-generate-with-django-get_random_secret_key
DEBUG=True
ALLOWED_HOSTS=localhost,127.0.0.1

# =============================================================================
# Database
# =============================================================================
DB_ENGINE=django.db.backends.sqlite3
DB_NAME=db.sqlite3
# For PostgreSQL:
# DB_ENGINE=django.db.backends.postgresql
# DB_NAME=your_database_name
# DB_USER=your_database_user
# DB_PASSWORD=your_database_password
# DB_HOST=localhost
# DB_PORT=5432

# =============================================================================
# JWT Settings
# =============================================================================
JWT_ACCESS_TOKEN_LIFETIME=60
JWT_REFRESH_TOKEN_LIFETIME=10080

# =============================================================================
# Email Configuration
# =============================================================================
EMAIL_BACKEND=django.core.mail.backends.console.EmailBackend
EMAIL_HOST=smtp.gmail.com
EMAIL_PORT=587
EMAIL_USE_TLS=True
EMAIL_HOST_USER=your-email@gmail.com
EMAIL_HOST_PASSWORD=your-app-password
DEFAULT_FROM_EMAIL=Your Name <your-email@gmail.com>

# =============================================================================
# Payment Integration (Mercado Pago)
# =============================================================================
MERCADOPAGO_ACCESS_TOKEN=your-access-token
MERCADOPAGO_PUBLIC_KEY=your-public-key
MERCADOPAGO_WEBHOOK_SECRET=your-webhook-secret

# =============================================================================
# Analytics
# =============================================================================
GA_TRACKING_ID=G-YOUR_TRACKING_ID

# =============================================================================
# Site URL
# =============================================================================
SITE_URL=http://localhost:8000

# =============================================================================
# Internationalization
# =============================================================================
LANGUAGE_CODE=pt-br
TIME_ZONE=America/Fortaleza

# =============================================================================
# Rate Limiting - Trusted Proxies
# =============================================================================
# SECURITY: Configure if your app is behind a reverse proxy (Nginx, Cloudflare, etc.)
# This prevents IP spoofing attacks that could bypass rate limiting.
# Example: TRUSTED_PROXY_IPS=10.0.0.1,172.17.0.1
TRUSTED_PROXY_IPS=
# Number of proxies in the chain (Client -> Cloudflare -> Nginx -> App = 2)
NUM_TRUSTED_PROXIES=1