.env.template

# Copy to `.env` and fill in. Every key below is validated at startup by
# task_manager_pro/config.py (pydantic-settings); invalid values fail fast.

# ── Application ─────────────────────────────────────────────────────────
# development | test | production  (development enables uvicorn --reload)
ENVIRONMENT=development
HOST=127.0.0.1
PORT=8000
# Comma-separated list of allowed browser origins
CORS_ORIGINS=http://localhost:3000,http://localhost:8080

# ── Database ────────────────────────────────────────────────────────────
# sqlite:///./tasks.db            (local SQLite, default)
# sqlite:///:memory:              (ephemeral, used by the test-suite)
# postgresql+psycopg://user:password@localhost:5432/taskmanager
DATABASE_URL=sqlite:///./tasks.db
# Log every SQL statement (debugging only)
SQL_ECHO=false

# ── Security ────────────────────────────────────────────────────────────
# REQUIRED, minimum 32 characters. Generate with: openssl rand -hex 32
SECRET_KEY=
JWT_ALGORITHM=HS256
ACCESS_TOKEN_EXPIRE_MINUTES=30
# bcrypt work factor (4..31). 12 for production; the test-suite uses 4.
BCRYPT_ROUNDS=12
# Per-client sliding-window limit on /api/auth/login and /api/auth/register
RATE_LIMIT_ENABLED=true
AUTH_RATE_LIMIT_PER_MINUTE=20

# ── Shared state (rate limits, revoked tokens) ──────────────────────────
# memory: correct for a single process (default)
# redis:  shared between replicas; requires REDIS_URL and `pip install "task-manager-pro[redis]"`
SHARED_STATE_BACKEND=memory
REDIS_URL=

# ── Observability ───────────────────────────────────────────────────────
LOG_LEVEL=INFO
# Emit one JSON object per log line (recommended for containers)
LOG_JSON=false
# Expose Prometheus metrics at /metrics
METRICS_ENABLED=true

# ── Email reminders (optional) ──────────────────────────────────────────
# Sender address and an app-specific password / SMTP token.
# ⚠️ Never use your primary mailbox password. For Gmail see
#    https://myaccount.google.com/apppasswords
EMAIL_USER=
EMAIL_PASS=
SMTP_SERVER=smtp.gmail.com
SMTP_PORT=587