# Timezone (use your local timezone)
# List: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
TZ=America/Chicago

# Security (DO NOT commit to git!)
# REQUIRED: generate a strong random key, e.g.  openssl rand -hex 32
# The app refuses to start with a missing/known-default/too-short key
# (override only for local dev with ALLOW_INSECURE_SECRET_KEY=1).
SECRET_KEY=
ACCESS_TOKEN_EXPIRE_MINUTES=1440  # 24 hours (default), adjust as needed

# Set to 1 to allow booting with an insecure SECRET_KEY (LOCAL DEV ONLY).
# ALLOW_INSECURE_SECRET_KEY=0
# Set to 1/true to block self-registration after the first admin account exists.
# DISABLE_OPEN_REGISTRATION=0
# Max upload size in MB for the client uploader (0 disables the limit).
# MAX_UPLOAD_MB=500
# Comma-separated allowed CORS origins (default "*").
# CORS_ALLOW_ORIGINS=*

# Container Paths (rarely changed)
INGEST_DIR=/app/ingest
OUTPUT_DIR=/app/audio_storage
LOG_DIR=/app/logs
DB_PATH=/app/data/scanscribe.db
CONFIG_PATH=/app/config.yml

# PyTorch CPU Optimization
OMP_NUM_THREADS=4
MKL_NUM_THREADS=4
TORCH_NUM_THREADS=4