env.example

# Copy this file to ".env" and fill values as needed.

# Server
PORT=8000
FLASK_ENV=development

# API defaults
DEFAULT_PROVINCE_VERSION=current_34

# Security Mode:
# - "simple": dùng API_KEY đơn lẻ (dành cho dev/test)
# - "tiered": dùng hệ thống tier với MySQL (dành cho production/bán API)
API_KEY_MODE=simple

# Simple mode: API key đơn lẻ (để trống = không yêu cầu key)
API_KEY=

# Tiered mode: Cấu hình MySQL
MYSQL_HOST=localhost
MYSQL_PORT=3306
MYSQL_USER=root
MYSQL_PASSWORD=
MYSQL_DATABASE=cccd_api

# Admin secret (để gọi Admin API)
ADMIN_SECRET=change-this-to-random-string

# Email Configuration (SMTP)
# Example for Gmail: smtp.gmail.com:587
# For Gmail, you need to use App Password (not regular password)
# Generate App Password: https://myaccount.google.com/apppasswords
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_USERNAME=your_email@gmail.com
SMTP_PASSWORD=your_app_password
SMTP_USE_TLS=true

# Email sender info
EMAIL_FROM=noreply@cccd-api.com
EMAIL_FROM_NAME=CCCD API

# Base URL for email links (verification, password reset, etc.)
# Example: http://localhost:8000 (development) or https://yourdomain.com (production)
BASE_URL=http://localhost:8000

# Flask Secret Key (REQUIRED for "Remember Me" to work across server restarts)
# Generate a random secret: python -c "import secrets; print(secrets.token_hex(32))"
# IMPORTANT: Keep this secret key constant - if it changes, all sessions will be invalidated
FLASK_SECRET_KEY=