# Database Configuration
DATABASE_URL=postgresql+asyncpg://user:password@postgres:5432/tradingdb
DB_POOL_SIZE=20
DB_MAX_OVERFLOW=30
STATEMENT_TIMEOUT_MS=30000
DB_ECHO=false

# Audit Service Configuration
AUDIT_BATCH_SIZE=50
AUDIT_FLUSH_INTERVAL=5
AUDIT_MAX_QUEUE=10000

# Circuit Breaker Configuration
CB_FAILURE_THRESHOLD=5
CB_RECOVERY_TIMEOUT=60

# Data Retention
RETENTION_DAYS=2555

# Rate Limiting
RATE_LIMIT=100
RATE_LIMIT_WINDOW=60
RATE_LIMIT_MAX_IPS=50000

# Security
API_KEY=your-secret-api-key-here
REQUIRE_API_KEY_FOR_TRADES=false

# Security Headers
SECURITY_CSP=default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self'; frame-ancestors 'none';
SECURITY_HSTS_ENABLED=false
SECURITY_HSTS_MAX_AGE=31536000
SECURITY_HSTS_INCLUDE_SUBDOMAINS=true
SECURITY_HSTS_PRELOAD=true
SECURITY_FRAME_OPTIONS=DENY
SECURITY_XSS_PROTECTION=1; mode=block
SECURITY_REFERRER_POLICY=strict-origin-when-cross-origin
SECURITY_PERMISSIONS_POLICY=geolocation=(), microphone=(), camera=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=()

# CORS Configuration
CORS_ORIGINS=*
CORS_ALLOW_CREDENTIALS=false
CORS_ALLOW_METHODS=*
CORS_ALLOW_HEADERS=*

# Metrics Configuration
METRICS_ENABLED=true

# Logging
LOG_LEVEL=INFO

# DLQ Configuration
AUDIT_DLQ_DIR=./logs
AUDIT_DLQ_MAX_SIZE_MB=100
AUDIT_DLQ_RETENTION_DAYS=30
DLQ_CHECK_INTERVAL=300

# Deployment Configuration
DEPLOY_SERVER_IP=your-server-ip-here
DEPLOY_SSH_KEY_PATH=./your-ssh-key-here
DEPLOY_USER=root
DEPLOY_REMOTE_APP=/opt/trading_platform