# bike_admin production environment (copied to /opt/bike_admin/.env on the server)
# All values are BIKE_ADMIN_-prefixed. This file is NOT committed (see .gitignore).

# --- Required -------------------------------------------------
BIKE_ADMIN_USERNAME=jake
BIKE_ADMIN_PASSWORD=change-me-to-something-strong

# --- Required in production -----------------------------------
# Secret used to derive the CSRF / session tokens. Generate with:
#   python3 -c "import secrets;print(secrets.token_urlsafe(32))"
BIKE_ADMIN_SECRET_KEY=

# Adds the Secure flag to the session cookie (we're served over HTTPS via Caddy).
BIKE_ADMIN_IS_PRODUCTION=true

# Bind to all interfaces so the hermodr reverse proxy (on another host) can reach it.
# The app trusts X-Forwarded-* headers from the proxy (BIKE_ADMIN_TRUST_PROXY defaults true).
BIKE_ADMIN_BIND_HOST=0.0.0.0
BIKE_ADMIN_BIND_PORT=8000

# --- Optional fine-tuning (defaults shown) ---------------------
# BIKE_ADMIN_SERVICE_DUE_SOON_MILES=200   # service "book soon" lead time
# BIKE_ADMIN_RENEWAL_DUE_SOON_DAYS=60     # MOT/insurance "due soon" lead time
# BIKE_ADMIN_RENEWAL_MONTHS=12            # MOT/insurance validity (months)
# BIKE_ADMIN_DATA_DIR=/opt/bike_admin/data  # (defaults to <WorkingDirectory>/data; matches the systemd unit)