# ============================================================================
# SentinelScan (WSS) — Environment Variables
# Copy this file to .env and fill in your actual values.
# ============================================================================

# --- Flask ---
FLASK_ENV=development
JWT_SECRET=your-super-secret-jwt-key-here

# --- Database (GCP Cloud SQL — PostgreSQL) ---
DATABASE_URL=postgresql://user:password@host:5432/dbname

# --- Redis (Celery broker) ---
CELERY_BROKER_URL=redis://localhost:6379/0
CELERY_RESULT_BACKEND=redis://localhost:6379/0

# --- Firebase Cloud Storage ---
FIREBASE_CREDENTIALS=serviceAccountKey.json
FIREBASE_STORAGE_BUCKET=your-project-id.appspot.com

# --- Local uploads (fallback when Firebase is not configured) ---
# UPLOAD_FOLDER=./uploads/logos

# --- Email (Resend) ---
RESEND_API_KEY=re_your_resend_api_key

# --- Stripe (legacy, unused by the Razorpay checkout) ---
STRIPE_SECRET_KEY=sk_live_your_stripe_key

# --- Razorpay (payments: India + international) ---
RAZORPAY_KEY_ID=rzp_test_your_key_id
RAZORPAY_KEY_SECRET=your_razorpay_key_secret
RAZORPAY_WEBHOOK_SECRET=your_razorpay_webhook_secret
# Platform fee added on top of the plan price at checkout
PLATFORM_FEE_PERCENT=2
PLATFORM_FEE_GST_PERCENT=18
# Fallback conversion used only for legacy tiers without explicit INR prices
USD_TO_INR_RATE=88

# --- External URLs ---
FRONTEND_URL=http://localhost:3000

# --- Scanner tuning ---
SCANNER_RATE_LIMIT=60
SCANNER_RATE_WINDOW=60

# --- Superadmin ---
SUPERADMIN_PASSWORD=larshield2025