SECRET_KEY=change-me-to-a-long-random-string
DEBUG=True
ALLOWED_HOSTS=localhost,127.0.0.1

# Cross-origin frontends (comma separated). Same-origin keeps working with an
# empty list; add e.g. https://j621.example.com when the SPA is served from
# another origin than this API.
# CORS_ALLOWED_ORIGINS=https://j621.example.com
# CORS_ALLOW_ALL_ORIGINS=false
# CORS_ALLOW_CREDENTIALS=false
# CSRF_TRUSTED_ORIGINS=https://j621.example.com
# Trust X-Forwarded-Proto/Host from a TLS-terminating reverse proxy so media
# URLs keep https and the public hostname.
# TRUST_PROXY_HEADERS=true

# Absolute path to your media folder, or relative to the backend/ folder.
WATCHED_FOLDER=media/library

# MariaDB (docker compose at the repo root)
DB_HOST=127.0.0.1
DB_PORT=3307
DB_NAME=j621
DB_USER=j621
DB_PASSWORD=j621

# Redis (docker compose at the repo root)
REDIS_URL=redis://127.0.0.1:6380/1

# Guest visibility: e621's anonymous default blacklist is mirrored into
# Redis by `manage.py refresh_guest_blacklist`.
# GUEST_BLACKLIST_FALLBACK=young,cub,shota,loli,child,underage
# GUEST_BLACKLIST_TTL=3600

# Ephemeral similarity checks: temp files are wiped on startup and after
# this many minutes.
# SIMILARITY_TTL_MINUTES=30