"""
MCLogger – Konfiguration
Alle Einstellungen über ENV-Variablen (Coolify-kompatibel).
"""
import os


class Config:
    # ── Flask ──────────────────────────────────────────────────
    SECRET_KEY = os.getenv("SECRET_KEY", "change-me-use-a-long-random-string-min-32-chars")
    HOST  = os.getenv("HOST", "0.0.0.0")
    PORT  = int(os.getenv("PORT", "5000"))
    DEBUG = os.getenv("DEBUG", "false").lower() == "true"

    # ── Panel-Datenbank (Nutzer, Gruppen, Mitgliedschaften) ────
    PANEL_DB_HOST     = os.getenv("PANEL_DB_HOST",     "localhost")
    PANEL_DB_PORT     = int(os.getenv("PANEL_DB_PORT", "3306"))
    PANEL_DB_USER     = os.getenv("PANEL_DB_USER",     "root")
    PANEL_DB_PASSWORD = os.getenv("PANEL_DB_PASSWORD", "")
    PANEL_DB_NAME     = os.getenv("PANEL_DB_NAME",     "mclogger_panel")

    # ── Credentials-Datenbank (verschlüsselte MC-DB-Zugangsdaten) ──
    CREDS_DB_HOST     = os.getenv("CREDS_DB_HOST",     os.getenv("PANEL_DB_HOST", "localhost"))
    CREDS_DB_PORT     = int(os.getenv("CREDS_DB_PORT", os.getenv("PANEL_DB_PORT", "3306")))
    CREDS_DB_USER     = os.getenv("CREDS_DB_USER",     os.getenv("PANEL_DB_USER", "root"))
    CREDS_DB_PASSWORD = os.getenv("CREDS_DB_PASSWORD", os.getenv("PANEL_DB_PASSWORD", ""))
    CREDS_DB_NAME     = os.getenv("CREDS_DB_NAME",     "mclogger_creds")

    # ── Sicherheit ────────────────────────────────────────────
    PASSWORD_PEPPER = os.getenv("PASSWORD_PEPPER", "change-me-global-pepper-secret-never-change")
    # Generieren: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
    FERNET_KEY = os.getenv("FERNET_KEY", "")

    # ── Standard-Berechtigungen neuer Gruppenmitglieder ───────
    DEFAULT_PERMISSIONS = {
        "view_dashboard":     True,
        "view_players":       True,
        "view_sessions":      True,
        "view_chat":          True,
        "view_commands":      True,
        "view_deaths":        True,
        "view_blocks":        True,
        "view_proxy":         False,
        "view_server_events": False,
        "view_perms":         False,
    }