"""سامانه مدیریت شعب شکلات فرنگی - تنظیمات کم‌مصرف برای cPanel/Passenger."""
import os
from pathlib import Path
BASE_DIR=Path(__file__).resolve().parent.parent
# dotenv سبک و بدون وابستگی: فقط از .env اختصاصی کنار manage.py بارگذاری می‌شود.
env_file=BASE_DIR/'.env'
if env_file.is_file():
    for line in env_file.read_text(encoding='utf-8').splitlines():
        line=line.strip()
        if line and not line.startswith('#') and '=' in line:
            k,v=line.split('=',1)
            os.environ.setdefault(k.strip(),v.strip().strip('"').strip("'"))
SECRET_KEY=os.environ.get('DJANGO_SECRET_KEY','INSECURE-LOCAL-DEV-ONLY-CHANGE-ME')
DEBUG=os.environ.get('DJANGO_DEBUG','0')=='1'
if not DEBUG and SECRET_KEY=='INSECURE-LOCAL-DEV-ONLY-CHANGE-ME':
    raise RuntimeError('DJANGO_SECRET_KEY را در .env تنظیم کنید.')
ALLOWED_HOSTS=[h.strip() for h in os.environ.get('DJANGO_ALLOWED_HOSTS','localhost,127.0.0.1').split(',') if h.strip()]
CSRF_TRUSTED_ORIGINS=[h.strip() for h in os.environ.get('DJANGO_CSRF_TRUSTED_ORIGINS','').split(',') if h.strip()]
INSTALLED_APPS=['django.contrib.admin','django.contrib.auth','django.contrib.contenttypes','django.contrib.sessions','django.contrib.messages','django.contrib.staticfiles','core']
MIDDLEWARE=['django.middleware.security.SecurityMiddleware','django.contrib.sessions.middleware.SessionMiddleware','django.middleware.common.CommonMiddleware','django.middleware.csrf.CsrfViewMiddleware','django.contrib.auth.middleware.AuthenticationMiddleware','django.contrib.messages.middleware.MessageMiddleware','django.middleware.clickjacking.XFrameOptionsMiddleware','core.middleware.ErrorAndLogCleanupMiddleware']
ROOT_URLCONF='samshaf.urls'
TEMPLATES=[{'BACKEND':'django.template.backends.django.DjangoTemplates','DIRS':[],'APP_DIRS':True,'OPTIONS':{'context_processors':['django.template.context_processors.debug','django.template.context_processors.request','django.contrib.auth.context_processors.auth','django.contrib.messages.context_processors.messages','core.context_processors.global_context']}}]
WSGI_APPLICATION='samshaf.wsgi.application'
if os.environ.get('DB_ENGINE','sqlite').lower()=='mysql':
    DATABASES={'default':{'ENGINE':'django.db.backends.mysql','NAME':os.environ['DB_NAME'],'USER':os.environ['DB_USER'],'PASSWORD':os.environ['DB_PASSWORD'],'HOST':os.environ.get('DB_HOST','localhost'),'PORT':os.environ.get('DB_PORT','3306'),'OPTIONS':{'charset':'utf8mb4','init_command':"SET sql_mode='STRICT_TRANS_TABLES'"},'CONN_MAX_AGE':0}}
else:
    DATABASES={'default':{'ENGINE':'django.db.backends.sqlite3','NAME':BASE_DIR/'local.sqlite3','OPTIONS':{'timeout':15}}}
AUTH_PASSWORD_VALIDATORS=[{'NAME':'django.contrib.auth.password_validation.UserAttributeSimilarityValidator'},{'NAME':'django.contrib.auth.password_validation.MinimumLengthValidator','OPTIONS':{'min_length':10}},{'NAME':'django.contrib.auth.password_validation.CommonPasswordValidator'},{'NAME':'django.contrib.auth.password_validation.NumericPasswordValidator'}]
LANGUAGE_CODE='fa-ir'
TIME_ZONE='Asia/Tehran'
USE_I18N=True
USE_TZ=True
STATIC_URL='/static/'
STATIC_ROOT=BASE_DIR/'staticfiles'
STATICFILES_DIRS=[]
DEFAULT_AUTO_FIELD='django.db.models.BigAutoField'
LOGIN_URL='/login/'
LOGIN_REDIRECT_URL='/'
LOGOUT_REDIRECT_URL='/login/'
SESSION_COOKIE_HTTPONLY=True
SESSION_COOKIE_SAMESITE='Lax'
CSRF_COOKIE_SAMESITE='Lax'
SESSION_COOKIE_SECURE=not DEBUG
CSRF_COOKIE_SECURE=not DEBUG
SECURE_CONTENT_TYPE_NOSNIFF=True
X_FRAME_OPTIONS='DENY'
SECURE_REFERRER_POLICY='same-origin'
SECURE_PROXY_SSL_HEADER=('HTTP_X_FORWARDED_PROTO','https')
# SSL redirect فقط بعد از تأیید عملکرد HTTPS و پروکسی میزبان قابل فعال‌سازی است.
SECURE_SSL_REDIRECT=os.environ.get('DJANGO_FORCE_HTTPS','0')=='1'
FILE_UPLOAD_MAX_MEMORY_SIZE=2*1024*1024
DATA_UPLOAD_MAX_NUMBER_FIELDS=500