# Application
APP_NAME=amazon-seller-reviews-service
APP_ENV=development
DEBUG=true
LOG_LEVEL=INFO

# Server
HOST=0.0.0.0
PORT=8000

# Database
DATABASE_URL=sqlite:///./seller_reviews.db
# For PostgreSQL: postgresql://user:password@localhost:5432/seller_reviews

# Redis
REDIS_URL=redis://localhost:6379/0

# AWS Configuration
AWS_REGION=us-east-1
AWS_ACCESS_KEY_ID=your-aws-access-key
AWS_SECRET_ACCESS_KEY=your-aws-secret-key
# For production, use IAM roles instead of keys

# AWS Secrets Manager
SECRETS_MANAGER_ENABLED=false
LWA_SECRETS_ARN=arn:aws:secretsmanager:us-east-1:123456789:secret:lwa-credentials
SPAPI_SECRETS_ARN=arn:aws:secretsmanager:us-east-1:123456789:secret:spapi-credentials

# S3 Storage
S3_BUCKET_RAW=amazon-reviews-raw-dev
S3_BUCKET_PROCESSED=amazon-reviews-processed-dev

# Login with Amazon (LWA) - Store in Secrets Manager for production
LWA_CLIENT_ID=amzn1.application-oa2-client.xxxxx
LWA_CLIENT_SECRET=your-lwa-client-secret
LWA_REDIRECT_URI=http://localhost:8000/auth/amazon/callback

# SP-API Configuration
# SP-API IAM credentials (role used for SigV4 signing)
SPAPI_AWS_ACCESS_KEY_ID=your-spapi-aws-key
SPAPI_AWS_SECRET_ACCESS_KEY=your-spapi-aws-secret
SPAPI_ROLE_ARN=arn:aws:iam::123456789:role/SPAPIRole
SPAPI_ENDPOINT_NA=https://sellingpartnerapi-na.amazon.com
SPAPI_ENDPOINT_EU=https://sellingpartnerapi-eu.amazon.com
SPAPI_ENDPOINT_FE=https://sellingpartnerapi-fe.amazon.com

# Encryption (for refresh tokens)
ENCRYPTION_KEY=generate-with-cryptography-fernet-key-generate
# Generate with: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"

# Rate Limiting
MAX_CONCURRENT_JOBS_PER_SELLER=3
SPAPI_REQUESTS_PER_SECOND=2
SPAPI_BURST_CAPACITY=10

# Job Configuration
JOB_TIMEOUT_SECONDS=3600
MAX_RETRIES=3
RETRY_BACKOFF_BASE_SECONDS=2
RETRY_BACKOFF_MAX_SECONDS=64

# Celery
CELERY_BROKER_URL=redis://localhost:6379/0
CELERY_RESULT_BACKEND=redis://localhost:6379/0

# Monitoring
METRICS_ENABLED=true
METRICS_PORT=9090