# Secret env files for server-infra deploy.
# Copy to the control node (never commit):
#   ~/Documents/secrets/monica_site/monica_site_prod.env
#   ~/Documents/secrets/monica_site/monica_site_beta.env
#
# server-infra pushes these to /opt/apps/env/monica_site_<env>.env on each host.
#
# Docker Compose: if a secret contains $ (e.g. in DATABASE_URL password), escape each
# $ as $$ or compose will treat $word as a variable.

# =============================================================================
# PROD — mkdrealtor.com (holding page until launch)
# =============================================================================
DJANGO_ENV=prod
DJANGO_DEBUG=false
DJANGO_SECRET_KEY=replace-with-a-long-random-secret
DJANGO_ALLOWED_HOSTS=mkdrealtor.com,www.mkdrealtor.com
# Optional override; when unset, https:// origins are derived from DJANGO_ALLOWED_HOSTS.
# DJANGO_CSRF_TRUSTED_ORIGINS=https://mkdrealtor.com,https://www.mkdrealtor.com

# Holding page gate — keep true on prod until go-live; beta should be false.
SITE_UNDER_CONSTRUCTION=true

SITE_NAME=Monica Dhillon
SITE_TAGLINE=MKDRealtor.com · EXIT Realty Redefined
PUBLIC_SITE_URL=https://mkdrealtor.com
# Inbox From (display name auto-added from SITE_NAME if omitted).
# SMTP2GO must allow sending as this address. Example:
# DEFAULT_FROM_EMAIL="Monica Dhillon" <notifications-beta@mkdrealtor.com>
DEFAULT_FROM_EMAIL=noreply@mkdrealtor.com
CONTACT_PHONE=
CONTACT_EMAIL=
CONTACT_SERVICE_AREA=Serving Greater Metro Area
CREDIT_NAME=AI ML Operations, LLC
CREDIT_URL=https://aimloperations.com

# Shared external Postgres (10.0.0.230)
DATABASE_URL=postgres://westfarn:replace-db-password@10.0.0.230:5432/monica_site

# Host port on adama/roslin/ai-server-4080 (must match server-infra host_apps)
WEB_PORT=8004

# reCAPTCHA v3
RECAPTCHA_PUBLIC_KEY=replace-me
RECAPTCHA_PRIVATE_KEY=replace-me

# SMTP2GO email — HOST_USER is SMTP auth only; From uses DEFAULT_FROM_EMAIL
EMAIL_HOST=mail.smtp2go.com
EMAIL_HOST_USER=replace-me
EMAIL_HOST_PASSWORD=replace-me
EMAIL_PORT=2525
EMAIL_USE_TLS=true

# SMTP2GO SMS
SMTP2GO_SMS_API_KEY=replace-me
# Email + SMS event webhook auth. SMTP2GO Authorization header = Bearer + this value.
SMTP2GO_WEBHOOK_SECRET=replace-me

# Postcards — PCM Integrations (key+secret → POST /auth/login → Bearer token)
POSTCARD_PROVIDER=pcm
PCM_API_KEY=replace-me
PCM_API_SECRET=replace-me
# PCM_CHILD_REF_NBR=
# One signature secret per PCM webhook subscription (comma-separated).
PCM_WEBHOOK_SECRETS=replace-me,replace-me-2
# PCM_WEBHOOK_SECRET=replace-me  # optional single-secret alias

# JSON return address for postcard orders
PCM_RETURN_ADDRESS={"firstName":"Monica","lastName":"Dhillon","address":"replace-me","city":"replace-me","state":"IL","zipCode":"replace-me"}
# LOB_API_KEY=  # only if POSTCARD_PROVIDER=lob
# CLICK2MAIL_API_KEY=
# POSTGRID_API_KEY=

# Social (native)
META_APP_ID=
META_APP_SECRET=
LINKEDIN_CLIENT_ID=
LINKEDIN_CLIENT_SECRET=
SOCIAL_TOKEN_ENCRYPTION_KEY=replace-with-fernet-key

# Ollama for social drafting (reachable from app hosts)
OLLAMA_BASE_URL=http://10.0.0.128:11434
OLLAMA_MODEL=llama3.2
OLLAMA_TIMEOUT_SECONDS=120

# Nominatim address suggest (server-side proxy only; not called from browser)
NOMINATIM_BASE_URL=http://10.0.0.128:8089
NOMINATIM_TIMEOUT_SECONDS=8
NOMINATIM_COUNTRY_CODES=us
# NOMINATIM_API_KEY=

# Tianji analytics (pageviews + events)
TIANJI_ENABLED=true
TIANJI_TRACKER_URL=https://tianji.aimloperations.com/tracker.js
TIANJI_WEBSITE_ID=cmshzhxdf6gee10qzkzrfn9iw

GUNICORN_WORKERS=2
GUNICORN_BIND=0.0.0.0:8000

# =============================================================================
# BETA overrides — monica-preview.aimloperations.com (full app)
# File: monica_site_beta.env
# =============================================================================
# DJANGO_ENV=beta
# DJANGO_DEBUG=false
# DJANGO_SECRET_KEY=replace-with-a-different-beta-secret
# DJANGO_ALLOWED_HOSTS=monica-preview.aimloperations.com
# SITE_UNDER_CONSTRUCTION=false
# PUBLIC_SITE_URL=https://monica-preview.aimloperations.com
# DATABASE_URL=postgres://westfarn:replace-db-password@10.0.0.230:5432/monica_site_beta
# WEB_PORT=8014
# RECAPTCHA_PUBLIC_KEY=replace-me
# RECAPTCHA_PRIVATE_KEY=replace-me
# EMAIL_HOST_USER=replace-me
# EMAIL_HOST_PASSWORD=replace-me
# SMTP2GO_SMS_API_KEY=replace-me
# LOB_API_KEY=replace-me
# SOCIAL_TOKEN_ENCRYPTION_KEY=replace-with-fernet-key
# OLLAMA_BASE_URL=http://10.0.0.128:11434
# NOMINATIM_BASE_URL=http://10.0.0.128:8089
# NOMINATIM_COUNTRY_CODES=us