.env.example

# SECRET_KEY is auto-generated by `make setup`. In other environments, generate with:
# python -c "from django.core.management.utils import get_random_secret_key; print(get_random_secret_key())"
SECRET_KEY=
# Set to true only in local development
DEBUG=false

# Comma-separated list of allowed hostnames
ALLOWED_HOSTS=localhost,127.0.0.1

# PostgreSQL connection string
# Local dev example: postgres://localhost/fxsharing
# Cloud SQL (via proxy): postgres://user:password@localhost:5432/fxsharing
DATABASE_URL=

# Redis connection string
REDIS_URL=redis://localhost:6379/0

# FxA configuration
LOGIN_REDIRECT_URL='/auth-complete'
FXA_CLIENT_ID=''
FXA_CLIENT_SECRET=''
FXA_CONTENT_HOST=https://accounts.stage.mozaws.net
FXA_OAUTH_HOST=https://oauth.stage.mozaws.net/v1
FXA_PROFILE_HOST=https://profile.stage.mozaws.net/v1
FXA_SUPPORT_HOST=https://accounts.stage.mozaws.net/v1

# OpenTelemetry — uncomment to enable local tracing via Jaeger (http://localhost:16686)
# OTEL_SERVICE_NAME=fx-sharing
# OTEL_TRACES_EXPORTER=otlp
# OTEL_METRICS_EXPORTER=otlp
# OTEL_EXPORTER_OTLP_ENDPOINT=http://jaeger:4317
# OTEL_EXPORTER_OTLP_PROTOCOL=grpc
# OTEL_EXPORTER_OTLP_INSECURE=True
# OTEL_PYTHON_EXCLUDED_URLS=.*/(healthz|readiness|__lbheartbeat__)/?$

# GCS image/favicon storage (local dev only).
# In dev/prod GCS_IMAGE_BUCKET is injected via k8s values and auth uses
# Workload Identity, so these GOOGLE_* vars are not set there.
GCS_IMAGE_BUCKET=favicon-bucket-2
GOOGLE_CLOUD_PROJECT=niklas-test-fx-sharing
# Path to a service-account key file (mounted at /app inside the container).
GOOGLE_APPLICATION_CREDENTIALS=/app/.gcloud_credentials

# Cinder configuration
CINDER_URL=http://localhost:8081
CINDER_API_TOKEN=
CINDER_WEBHOOK_TOKEN=placeholder-token-for-local-dev
CINDER_TASK_RATE_LIMIT='100/s'