from pathlib import Path
from datetime import timedelta
import os

# ======================
# BASE DIR
# ======================
BASE_DIR = Path(__file__).resolve().parent.parent

# ======================
# SECURITY
# ======================
SECRET_KEY = os.environ.get("DJANGO_SECRET_KEY", "django-insecure-change-this")
DEBUG = False

ALLOWED_HOSTS = [
    "takoeth.com",
    "www.takoeth.com",
    "testmuhajir.takoeth.com",
]

CSRF_TRUSTED_ORIGINS = [
    "https://takoeth.com",
    "https://www.takoeth.com",
    "https://testmuhajir.takoeth.com",
    "http://takoeth.com",
    "http://www.takoeth.com",
    "http://testmuhajir.takoeth.com",
]

# ======================
# APPLICATIONS
# ======================
INSTALLED_APPS = [
    "django.contrib.admin",
    "django.contrib.auth",
    "django.contrib.contenttypes",
    "django.contrib.sessions",
    "django.contrib.messages",
    "django.contrib.staticfiles",

    # Third-party
    "rest_framework",
    "corsheaders",
    "channels",
    "rest_framework_simplejwt",
    "rest_framework_simplejwt.token_blacklist",

    # Local
    "takoapp3",
]

# ======================
# MIDDLEWARE
# ======================
MIDDLEWARE = [
    "whitenoise.middleware.WhiteNoiseMiddleware",  # Static files
    "corsheaders.middleware.CorsMiddleware",      # CORS must be before CommonMiddleware
    "django.middleware.security.SecurityMiddleware",
    "django.contrib.sessions.middleware.SessionMiddleware",
    "django.middleware.common.CommonMiddleware",
    "django.middleware.csrf.CsrfViewMiddleware",
    "django.contrib.auth.middleware.AuthenticationMiddleware",
    "django.contrib.messages.middleware.MessageMiddleware",
    "django.middleware.clickjacking.XFrameOptionsMiddleware",
]

ROOT_URLCONF = "tako3.urls"
WSGI_APPLICATION = "tako3.wsgi.application"
ASGI_APPLICATION = "tako3.asgi.application"

# ======================
# CHANNELS
# ======================
CHANNEL_LAYERS = {
    "default": {
        "BACKEND": "channels.layers.InMemoryChannelLayer",
    }
}

# ======================
# DATABASE
# ======================
# ======================
# DATABASE (MySQL)
# ======================
# ======================
# DATABASE (MySQL)
# ======================
DATABASES = {
    "default": {
        "ENGINE": "django.db.backends.mysql",
        "NAME": "takoethc_muhajir",       # your database name
        "USER": "takoethc_muhajir",       # correct username
        "PASSWORD": "Mynameismujje10$", # the password you just tested
        "HOST": "localhost",              # usually localhost on cPanel
        "PORT": "3306",
    }
}

# ======================
# CUSTOM USER
# ======================
AUTH_USER_MODEL = "takoapp3.User"

# ======================
# PASSWORD VALIDATORS
# ======================
AUTH_PASSWORD_VALIDATORS = [
    {"NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator"},
    {"NAME": "django.contrib.auth.password_validation.MinimumLengthValidator"},
    {"NAME": "django.contrib.auth.password_validation.CommonPasswordValidator"},
    {"NAME": "django.contrib.auth.password_validation.NumericPasswordValidator"},
]

# ======================
# EMAIL
# ======================
# ====================== EMAIL ======================
EMAIL_BACKEND = "django.core.mail.backends.smtp.EmailBackend"
EMAIL_HOST = "smtp.gmail.com"
EMAIL_PORT = 587
EMAIL_USE_TLS = True
EMAIL_HOST_USER = "bekelegetaneh24@gmail.com"
EMAIL_HOST_PASSWORD = "oreviyfnqkjiajlf"
DEFAULT_FROM_EMAIL = EMAIL_HOST_USER
# TEMPLATES
# ======================
TEMPLATES = [
    {
        "BACKEND": "django.template.backends.django.DjangoTemplates",
        "DIRS": [BASE_DIR / "templates"],
        "APP_DIRS": True,
        "OPTIONS": {
            "context_processors": [
                "django.template.context_processors.debug",
                "django.template.context_processors.request",
                "django.contrib.auth.context_processors.auth",
                "django.contrib.messages.context_processors.messages",
                "django.template.context_processors.media",
            ],
        },
    },
]

# ======================
# INTERNATIONALIZATION
# ======================
LANGUAGE_CODE = "en-us"
TIME_ZONE = "Africa/Addis_Ababa"
USE_I18N = True
USE_TZ = True

# ======================
# STATIC FILES
# ======================
STATIC_URL = "/static/"
STATIC_ROOT = BASE_DIR / "staticfiles"
STATICFILES_STORAGE = "whitenoise.storage.CompressedManifestStaticFilesStorage"

MEDIA_URL = "/media/"
MEDIA_ROOT = BASE_DIR / "media"

# ======================
# CORS
# ======================
CORS_ALLOWED_ORIGINS = [
    "https://takoeth.com",
    "https://www.takoeth.com",
    "https://testmuhajir.takoeth.com",
]

CORS_ALLOW_CREDENTIALS = True

# ======================
# REST FRAMEWORK
# ======================
REST_FRAMEWORK = {
    "DEFAULT_PERMISSION_CLASSES": [
        "rest_framework.permissions.IsAuthenticated",
    ],
    "DEFAULT_AUTHENTICATION_CLASSES": [
        "rest_framework_simplejwt.authentication.JWTAuthentication",
    ],
    "DEFAULT_PAGINATION_CLASS": "takoapp3.serializers.StandardPagination",
    "PAGE_SIZE": 10,
}

# ======================
# SIMPLE JWT
# ======================
SIMPLE_JWT = {
    "ACCESS_TOKEN_LIFETIME": timedelta(days=7),
    "REFRESH_TOKEN_LIFETIME": timedelta(days=7),
    "ROTATE_REFRESH_TOKENS": True,
    "BLACKLIST_AFTER_ROTATION": True,
    "AUTH_HEADER_TYPES": ("Bearer",),
    "AUTH_HEADER_NAME": "HTTP_AUTHORIZATION",
}

# ======================
# SECURITY HEADERS
# ======================
SECURE_BROWSER_XSS_FILTER = True
SECURE_CONTENT_TYPE_NOSNIFF = True
X_FRAME_OPTIONS = "DENY"

# ======================
# DEFAULT AUTO FIELD
# ======================
DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"