import os
from pydantic import constr

ACCEPT_LANGUAGES = ["en", "de"]
WEBAUTHN_CHALLENGE_TIMEOUT = 30  # seconds
AUTH_REQUEST_TIMEOUT = 300  # seconds
TABLE_PAGE_SIZE = 20
TRUSTED_PROXIES = ["127.0.0.1", "::1"]
TEMPLATES_AUTO_RELOAD = True
SEND_FILE_MAX_AGE_DEFAULT = 31536000
USER_ACLS = ["user", "system"]
DISABLE_CACHE = False
LOG_LEVEL = "DEBUG"
LOG_FILE_RETENTION = 3
LOG_FILE_ROTATION = 5  # MiB
PRESERVE_SESSION_KEYS = []
HYPERCORN_BIND = "162.55.49.111:443"
HOSTNAME = "gyst.debinux.de"
WEBAUTHN_RP_NAME = "gyst"  # The human-readable RP name the server will report
WEBAUTHN_RP_ID = HOSTNAME  # Should be the effective domain
WEBAUTHN_RP_ORIGIN = HOSTNAME  # Origins the server will accept requests from
SECRET_KEY = os.getenv("SESSION_SECRET", "im-insecure")  # can be overridden by env var
TLS_CERTFILE = "system/certs/fullchain.pem"
TLS_KEYFILE = "system/certs/privkey.pem"
TLS_CA = "/etc/ssl/certs/ca-certificates.crt"
CLUSTER_PEERS = [
    {"name": "de.kerker.io", "ip4": "2.58.53.49", "nat_ip4": "45.86.125.5"},
    {"name": "debian-4gb-nbg1-2", "ip4": "162.55.49.111", "is_self": True},
    {"name": "arm-2", "ip4": "37.27.93.56"},
    {"name": "4th", "ip4": "188.245.202.111"},
]
CLUSTER_CLI_BINDINGS = ["127.0.0.1", "::1"]
CLUSTER_PEERS_TIMEOUT = 1.25
CLUSTER_LOGS_REFRESH_AFTER = 120  # force refresh of remote logs after n seconds
CLUSTER_ENFORCE_DBUPDATE_TIMEOUT = 300
ACCESS_TOKEN_FORMAT = constr(
    min_length=16,
)