# Django settings
DJANGO_SECRET_KEY=c7d0nm_3!*zat*mgwlk%t075r^!ti6*_la3r5m47bce4x*k5
DJANGO_DEBUG=1
DJANGO_ALLOWED_HOSTS=localhost
DJANGO_CSRF_TRUSTED_ORIGINS=https://resume.example.com

# Database (set to your production connection string)
DATABASE_URL=sqlite:///db.sqlite3

# Security toggles
DJANGO_SECURE_SSL_REDIRECT=1
DJANGO_SECURE_HSTS_SECONDS=31536000
DJANGO_SECURE_HSTS_INCLUDE_SUBDOMAINS=1
DJANGO_SECURE_HSTS_PRELOAD=1
DJANGO_SESSION_COOKIE_SECURE=1
DJANGO_CSRF_COOKIE_SECURE=1

# Media/static overrides (optional)
# DJANGO_MEDIA_ROOT=/var/www/resume/media
# DJANGO_STATIC_URL=/static/
