# TimeClock v3 - Production Environment Configuration
# Kopiere diese Datei zu .env und passe die Werte an:
# cp env.production.template .env

# =============================================================================
# NODE ENVIRONMENT
# =============================================================================
NODE_ENV=production
PORT=3010

# =============================================================================
# DATABASE CONFIGURATION
# =============================================================================
DB_HOST=tsschulz.de
DB_PORT=3306
DB_NAME=stechuhr2
DB_USER=stechuhr2
DB_PASSWORD=p3Lv9!7?+Qq

# =============================================================================
# JWT AUTHENTICATION
# =============================================================================
# Generiere einen sicheren Secret mit: node -e "console.log(require('crypto').randomBytes(64).toString('hex'))"
JWT_SECRET=f393b1159fd0212df164711112bc72edf9481181b719de6bc61e4654885a6269ecf95dca0568a27081fa68b039e4de7cffcb4c9a8927bcddaf54dc869899f6e8
JWT_EXPIRES_IN=7d
JWT_REFRESH_EXPIRES_IN=30d

# =============================================================================
# SESSION CONFIGURATION
# =============================================================================
# Generiere einen sicheren Secret mit: node -e "console.log(require('crypto').randomBytes(64).toString('hex'))"
SESSION_SECRET=f393b1159fd0212df164711112bc72edf9481181b719de6bc61e4654885a6269ecf95dca0568a27081fa68b039e4de7cffcb4c9a8927bcddaf54dc869899f6e8

# =============================================================================
# FRONTEND URL
# =============================================================================
FRONTEND_URL=https://stechuhr3.tsschulz.de

# =============================================================================
# EMAIL CONFIGURATION (für Passwort-Reset etc.)
# =============================================================================
# SMTP-Server Konfiguration
EMAIL_HOST=smtp.1blu.de
EMAIL_PORT=587
EMAIL_SECURE=false
EMAIL_REQUIRE_TLS=true
EMAIL_USER=e226079_0-kontakt
EMAIL_PASSWORD=aNN31bll3Na!
EMAIL_FROM=kontakt@tsschulz.de
EMAIL_FROM_NAME=TimeClock Zeiterfassung

# =============================================================================
# OAUTH CONFIGURATION (Google OAuth)
# =============================================================================
# Optional: Falls Google OAuth verwendet werden soll
# Erstelle OAuth Credentials unter: https://console.cloud.google.com/
GOOGLE_CLIENT_ID=your-google-client-id.apps.googleusercontent.com
GOOGLE_CLIENT_SECRET=your-google-client-secret
GOOGLE_CALLBACK_URL=https://stechuhr3.tsschulz.de/api/auth/oauth/google/callback

# =============================================================================
# SECURITY & CORS
# =============================================================================
# Allowed Origins (comma-separated, falls mehrere Domains)
ALLOWED_ORIGINS=https://stechuhr3.tsschulz.de

# =============================================================================
# LOGGING
# =============================================================================
LOG_LEVEL=info
# Optionen: error, warn, info, http, verbose, debug, silly

# =============================================================================
# APPLICATION SETTINGS
# =============================================================================
# Maximale Dateigröße für Uploads (falls implementiert)
MAX_FILE_SIZE=5242880

# Rate Limiting (Anfragen pro Fenster)
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=100

# =============================================================================
# BACKUP CONFIGURATION (Optional)
# =============================================================================
# Backup-Verzeichnis
BACKUP_DIR=/var/backups/timeclock

# Backup-Retention in Tagen
BACKUP_RETENTION_DAYS=30