# Django Settings
DEBUG=False
SECRET_KEY=change-me-django-secret-key
ALLOWED_HOSTS=localhost,127.0.0.1,web,nginx

# Database Settings
USE_SQLITE=False
POSTGRES_DB=eusrr
POSTGRES_USER=eusrr_user
POSTGRES_PASSWORD=change-me-postgres-password
DB_HOST=db
DB_PORT=5432

# Redis Settings
REDIS_HOST=redis
REDIS_PORT=6379

# Celery Settings
CELERY_BROKER_URL=redis://redis:6379/0
CELERY_RESULT_BACKEND=redis://redis:6379/1

# Ports (for development)
WEB_PORT=8000
FRONTEND_PORT=3000
NGINX_PORT=80

# Frontend Settings
NODE_ENV=production

# LDAP Settings (if used)
# LDAP_SERVER_URI=ldap://your-ldap-server
# LDAP_BIND_DN=cn=admin,dc=example,dc=com
# LDAP_BIND_PASSWORD=your-ldap-password
# LDAP_USER_SEARCH_BASE=ou=users,dc=example,dc=com

# Email Settings (if used)
# EMAIL_HOST=smtp.gmail.com
# EMAIL_PORT=587
# EMAIL_USE_TLS=True
# EMAIL_HOST_USER=your-email@example.com
# EMAIL_HOST_PASSWORD=your-email-password

# Other Settings
# SITE_URL=http://localhost:8000

# LogStorm attendance analyzer
LOGSTORM_API_URL=http://localhost:8000
LOGSTORM_API_TOKEN=change-me-logstorm-token
LOGSTORM_TIMEOUT_SECONDS=30

# Finance / Payroll
# Change RULESET_VERSION whenever calculation semantics change.
PAYROLL_RULESET_ID=eusrr-standard
PAYROLL_RULESET_VERSION=2026.07.1
PAYROLL_EFFECTIVE_FROM=2026-01-01
# PAYROLL_EFFECTIVE_TO=2026-12-31
# Keep disabled until the point formula is reconciled against real Excel rows.
PAYROLL_POINT_POLICY=disabled
PAYROLL_MONEY_QUANTUM=0.01
PAYROLL_ROUNDING=half_up
PAYROLL_ALLOW_NEGATIVE_PAYABLE=false
PAYROLL_BASE_RATE_CODE=BASE
# Temporary: staff/superuser receive full payroll access during the pilot.
PAYROLL_SIMPLE_ADMIN_ACCESS=true