.env.example

# Django settings
DJANGO_ENV=production  # Options: development, staging, production
DEBUG=False
SECRET_KEY=your-secret-key-here
ALLOWED_HOSTS=localhost,127.0.0.1
CSRF_TRUSTED_ORIGINS=https://*.example.com,http://localhost:8000
CORS_ALLOWED_ORIGINS=https://example.com,http://localhost:8000

# Database
DATABASE_URL=postgres://user:password@localhost:5432/dbname
DB_CONN_MAX_AGE=600
DB_CONN_HEALTH_CHECKS=True

# Redis
REDIS_URL=redis://redis:6379/1
REDIS_PASSWORD=your-redis-password
REDIS_SSL=True  # Set to True for production with SSL

# Cache
CACHE_TIMEOUT=300
CACHE_BACKEND=django_redis.cache.RedisCache

# Email settings
EMAIL_BACKEND=django.core.mail.backends.smtp.EmailBackend
EMAIL_HOST=smtp.example.com
EMAIL_PORT=587
EMAIL_HOST_USER=your-email@example.com
EMAIL_HOST_PASSWORD=your-email-password
EMAIL_USE_TLS=True
DEFAULT_FROM_EMAIL=noreply@example.com

# Security
SECURE_SSL_REDIRECT=True
SESSION_COOKIE_SECURE=True
CSRF_COOKIE_SECURE=True
SECURE_BROWSER_XSS_FILTER=True
SECURE_CONTENT_TYPE_NOSNIFF=True
SECURE_HSTS_SECONDS=31536000
SECURE_HSTS_INCLUDE_SUBDOMAINS=True
SECURE_HSTS_PRELOAD=True

# Stripe settings
STRIPE_PUBLISHABLE_KEY=your-publishable-key
STRIPE_SECRET_KEY=your-secret-key
STRIPE_API_VERSION=2023-10-16
STRIPE_WEBHOOK_SECRET=your-webhook-secret
STRIPE_CURRENCY=usd

# Sentry
SENTRY_DSN=your-sentry-dsn
SENTRY_ENVIRONMENT=production
SENTRY_TRACES_SAMPLE_RATE=0.2
SENTRY_SEND_DEFAULT_PII=False

# Performance
CONN_MAX_AGE=60
ATOMIC_REQUESTS=True

# AWS S3 (Optional - for media/static files)
AWS_ACCESS_KEY_ID=your-access-key
AWS_SECRET_ACCESS_KEY=your-secret-key
AWS_STORAGE_BUCKET_NAME=your-bucket-name
AWS_S3_REGION_NAME=your-region