05/06/2026 Initial commit

.env.example

@@ -0,0 +1,23 @@
+FLASK_ENV=production
+SECRET_KEY=change-me-to-a-random-256-bit-key
+ADMIN_SECRET_KEY=separate-key-for-admin-portal-sessions
+DATABASE_URL=mysql+pymysql://salon_pos_app:password@localhost/salon_pos
+MAIL_SERVER=smtp.example.com
+MAIL_PORT=587
+MAIL_USE_TLS=true
+MAIL_USERNAME=noreply@mydomain.com
+MAIL_PASSWORD=
+ADMIN_IP_ALLOWLIST=192.168.1.0/24,203.0.113.0/24
+ADMIN_DOMAIN=admin.mydomain.com
+TENANT_DOMAIN=mydomain.com
+DEMO_TENANT_SLUG=demo
+BACKUP_DIR=/var/backups/salon_pos
+BACKUP_RETAIN_DAYS=30
+SESSION_TIMEOUT_TENANT=1800
+SESSION_TIMEOUT_ADMIN=3600
+JWT_ACCESS_TOKEN_EXPIRES=900
+JWT_REFRESH_TOKEN_EXPIRES=604800
+MAX_LOGIN_ATTEMPTS=5
+LOGIN_LOCKOUT_MINUTES=15
+STAFF_PASSCODE_MIN_LENGTH=4
+STAFF_PASSCODE_MAX_LENGTH=6