# Docker Compose production example
DJANGO_SETTINGS_MODULE=settings.production
DEBUG=False
SECRET_KEY=CHANGE_ME_PROD_SECRET_KEY
ALLOWED_HOSTS=example.com,api.example.com

POSTGRES_HOST=CHANGE_ME_POSTGRES_HOST
POSTGRES_PORT=5432
POSTGRES_DB=state_corp
POSTGRES_USER=postgres
POSTGRES_PASSWORD=CHANGE_ME_POSTGRES_PASSWORD
POSTGRES_SSLMODE=require

REDIS_CACHE_URL=redis://CHANGE_ME_REDIS_HOST:6379/1
CELERY_BROKER_URL=redis://CHANGE_ME_REDIS_HOST:6379/0
CELERY_RESULT_BACKEND=redis://CHANGE_ME_REDIS_HOST:6379/0

PORT=8000
GUNICORN_WORKERS=3
GUNICORN_TIMEOUT=60
CELERY_LOG_LEVEL=INFO
CELERY_WORKER_CONCURRENCY=4

COLLECTSTATIC_ON_MIGRATE=1
BACKUP_ENCRYPTION_KEY=CHANGE_ME_BASE64URL_32B_KEY
BACKUP_KEY_ID=default

# IAS ECP SSO (mount the PEM outside the repository and webroot)
SSO_ENABLED=false
SSO_PROVIDER_URL=https://divopk.vniicentr.ru/sso-redirect/
SSO_SERVICE_CODE=fkc
SSO_ISSUER=dvr
SSO_PUBLIC_KEY_PATH=/run/secrets/sso-public-key.pem
SSO_SESSION_TTL_SECONDS=7200

WEB_IMAGE=registry.example.com/state_corp-web:latest
CELERY_IMAGE=registry.example.com/state_corp-celery:latest