.env.example

# Django Secret Key
SECRET_KEY=your-secret-key-here

# Debug Mode (True/False)
DEBUG=True

# Comma-separated additional allowed hosts/domains (e.g. for staging or custom domain setups)
ALLOWED_HOSTS_EXTRA=

# Database Connection String
# For local SQLite: sqlite:///db.sqlite3
# For Postgres: postgresql://user:password@host:port/dbname
DATABASE_URL=sqlite:///db.sqlite3

# Email Configuration for OTP and Password Reset Emails
# Use Gmail App Passwords (not normal Gmail password)
# 
# Note: The email backend automatically defaults to the console backend when DEBUG=True 
# (printing emails to your terminal). You can explicitly set EMAIL_BACKEND here to override this.
# EMAIL_BACKEND=django.core.mail.backends.smtp.EmailBackend
EMAIL_HOST_USER=your-email@gmail.com
EMAIL_HOST_PASSWORD=your_16_digit_google_app_password
# (Optional) Default from email address. Falls back to EMAIL_HOST_USER.
# DEFAULT_FROM_EMAIL=no-reply@yourdomain.com

# Trusted proxies for client IP extraction from X-Forwarded-For header.
# For local development: 127.0.0.1,::1
# For production (e.g., Vercel, Cloudflare, AWS ALB): comma-separated trusted proxy IPs.
# Example for Cloudflare: TRUSTED_PROXIES=173.245.48.0/20,103.21.244.0/22,...
# Refer to your platform's documentation for the full list of proxy IPs.
TRUSTED_PROXIES=127.0.0.1,::1

# Trusted proxies for password reset rate limiting client IP extraction.
# Required in production.
# For local development behind local proxies: 127.0.0.1
TRUSTED_PROXY_IPS=127.0.0.1

# Cache Configuration
# Defaults to LocMemCache locally. A shared cache is required in production
# (e.g. Redis or DatabaseCache) to enforce lockouts across workers/instances.
# If using DatabaseCache, run `python manage.py createcachetable` first.
# CACHE_BACKEND=django.core.cache.backends.db.DatabaseCache
# CACHE_LOCATION=checkora_cache_table