# ORCHESTRA
####

#ORCHESTRA_SECRET_KEY='uncomment-it-and-fill-this'

# MUSICIAN
####

MUSICIAN_SECRET_KEY='changeme_v9&&N$Lt9t*5EGwm0w'
# specially useful if you want to deploy in a specific domain
MUSICIAN_API_BASE_URL='https://orchestra.example.org'
MUSICIAN_ALLOWED_HOSTS='127.0.0.1,localhost,musician.example.org'
MUSICIAN_DOMAIN='musician.example.org'

# DEVICEHUB
####

# Please fill in these three variables
DEVICEHUB_API_DLT='http://$FIXME_IP_API_DLT'
DEVICEHUB_API_DLT_TOKEN=$FIXME_TOKEN
DEVICEHUB_API_RESOLVER='http://$FIXME_IP_API_RESOLVER'
# you might change or register ID_FEDERATED if you change DEVICEHUB_HOST
DEVICEHUB_ID_FEDERATED='DH12'
# TODO this should be guessed by DEVICEHUB_HOST, and avoid hardcode of ID_FEDERATED
DEVICEHUB_SERVER_ID_FEDERATED='DH12'
DEVICEHUB_CLIENT_ID_FEDERATED='DH20'

# Database Variables
DEVICEHUB_DB_USER='dhub'
DEVICEHUB_DB_PASSWORD='ereuse'
DEVICEHUB_DB_HOST='localhost'
DEVICEHUB_DB_DATABASE='dpp'
DEVICEHUB_SCHEMA='dbtest'
DEVICEHUB_DB_SCHEMA='dbtest'

#DEVICEHUB_SERVER_ID_DEVICEHUB_HOST='http://devicehub-server-id.example.com'
DEVICEHUB_SERVER_ID_DEVICEHUB_HOST='http://localhost:5000'
#DEVICEHUB_CLIENT_ID_DEVICEHUB_HOST='http://devicehub-client-id.example.com'
DEVICEHUB_CLIENT_ID_DEVICEHUB_HOST='http://localhost:5001'
DEVICEHUB_SERVER_ID_SERVICE='server_id'
DEVICEHUB_CLIENT_ID_SERVICE='client_id'
DEVICEHUB_HOST='localhost'

DEVICEHUB_EMAIL_DEMO='user@example.com'
DEVICEHUB_SERVER_ID_EMAIL_DEMO='user5000@example.com'
DEVICEHUB_CLIENT_ID_EMAIL_DEMO='user5001@example.com'
DEVICEHUB_PASSWORD_DEMO='1234'

DEVICEHUB_JWT_PASS='uncomment-it-and-fill-this'
DEVICEHUB_SECRET_KEY='uncomment-it-and-fill-this'

# important to import snapshots (step 15)
#   rel path starts with ./
DEVICEHUB_SNAPSHOTS_PATH='./examples/snapshots'
#   full path starts with /
#DEVICEHUB_SNAPSHOTS_PATH='/tmp/dhub_docker/snapshots'
DEVICEHUB_IMPORT_SNAPSHOTS='n'

# If you have a URL_MANUALS implementation, please change this url
DEVICEHUB_URL_MANUALS='http://localhost:4000'

# on devicehub without dpp case, uncomment for a production deployment.
#   That is, use of gunicorn instead of a debug python server
#DEVICEHUB_DEPLOYMENT='PROD'

# IDHUB
####

IDHUB_TIME_ZONE='Europe/Madrid'
#IDHUB_SECRET_KEY='uncomment-it-and-fill-this'
# enable dev flags when DEVELOPMENT deployment
# adapt to your domain in a production/reverse proxy env
IDHUB_CSRF_TRUSTED_ORIGINS='https://idhub.example.org'

# fill this section with your email credentials
IDHUB_DEFAULT_FROM_EMAIL="user@example.org"
IDHUB_EMAIL_HOST="smtp.example.org"
IDHUB_EMAIL_HOST_USER="smtp_user"
IDHUB_EMAIL_HOST_PASSWORD="smtp_passwd"
IDHUB_EMAIL_PORT=25
IDHUB_EMAIL_USE_TLS=True
IDHUB_EMAIL_BACKEND="django.core.mail.backends.smtp.EmailBackend"

# replace with production data
#   this is used when IDHUB_DEPLOYMENT is not equal to DEVELOPMENT
IDHUB_USER='admin'
IDHUB_PASSWD='admin'
IDHUB_EMAIL='admin@example.org'

# this option needs to be set to 'n' to be able to make work idhub in docker
#   by default it is set to 'y' to facilitate idhub dev when outside docker
IDHUB_SYNC_ORG_DEV='n'

IDHUB_PILOT_TEST__ADMIN_EMAIL='admin@example.com'
IDHUB_PILOT_TEST__ADMIN_PASSWORD='1234'
IDHUB_PILOT_LAFEDE__ADMIN_EMAIL='masked@example.com'

# AUTHENTIK aka goauthentik
####

AUTHENTIK_PG_PASS=goauthentik
AUTHENTIK_PG_USER=goauthentik
AUTHENTIK_PG_DB=goauthentik
AUTHENTIK_SECRET_KEY='fixme_EMeeeT-$DEzm{4%=qo2L8!A=b3H-8HV>ycCs2vP+C'

# SMTP Host Emails are sent to
AUTHENTIK_EMAIL__HOST='smtp.pangea.org'
AUTHENTIK_EMAIL__PORT=587
# Optionally authenticate (don't add quotation marks to your password)
AUTHENTIK_EMAIL__USERNAME='fixme_H6v<MIBmni23=uuc@y'
AUTHENTIK_EMAIL__PASSWORD='fixme_T?Q|19r{P<e_cGq29E'
AUTHENTIK_EMAIL__USE_TLS=true
AUTHENTIK_EMAIL__USE_SSL=false
AUTHENTIK_EMAIL__TIMEOUT=10
# Email address authentik will send from, should have a correct @domain
AUTHENTIK_EMAIL__FROM='noreply@example.org'

AUTHENTIK_BOOTSTRAP_EMAIL='admin@example.org'
AUTHENTIK_BOOTSTRAP_TOKEN='fixme_!dN94KJ%Uz%f?+NES'
AUTHENTIK_BOOTSTRAP_PASSWORD='fixme_<1|-@4-yDsat@p>XES'