# IoT PreTester 4.6 Demo - local configuration template
# Copy to .env and set real values for SECRET_KEY and DJANGO_SUPERUSER_PASSWORD.
#   cp .env.example .env

# --- Django core -------------------------------------------------------------
DEBUG=False
# Required when DEBUG=False. Generate one with:
#   python3 -c "import secrets; print(secrets.token_urlsafe(64))"
SECRET_KEY=CHANGE_ME
ALLOWED_HOSTS=localhost,127.0.0.1

# --- Demo administrator ------------------------------------------------------
DJANGO_SUPERUSER_USERNAME=admin
DJANGO_SUPERUSER_EMAIL=admin@example.com
DJANGO_SUPERUSER_PASSWORD=CHANGE_ME
INIT_DATABASE=true

# --- CORS --------------------------------------------------------------------
CORS_ALLOW_ALL_ORIGINS=False
CORS_ALLOWED_ORIGINS=http://localhost:3000

# --- Ports -------------------------------------------------------------------
BACKEND_PORT=8000
FRONTEND_PORT=3000

# --- Capture analysis limits -------------------------------------------------
# Packets to inspect per capture. 0 reads the capture completely; a 250 MB
# capture takes well under a minute with the tshark-based extractor.
CAPTURE_PACKET_LIMIT=0
# Retained clear-text payload entries (encrypted flows are never retained).
CAPTURE_MAX_TEXT_PAYLOADS=50000
CAPTURE_MAX_PAYLOAD_CHARS=16384
# Extra expected provider domains (comma-separated suffixes). Traffic to these
# is reported at lower severity, never hidden. Example: vendor-cloud.com,iot.example
ANALYZER_BENIGN_DOMAINS=

# --- Gunicorn / logging ------------------------------------------------------
GUNICORN_WORKERS=4
GUNICORN_TIMEOUT=600
# debug shows every detector step and the tshark command lines in the logs.
LOG_LEVEL=info

# --- Frontend ----------------------------------------------------------------
NODE_ENV=production
NEXT_PUBLIC_API_URL=http://localhost:8000/api