environment emprovements

.env.example

@@ -1,34 +1,66 @@
 # Django настройки
-DJANGO_SECRET_KEY=django-insecure-your-secret-key-here-change-this-in-production
-DJANGO_DEBUG=True
-DJANGO_ALLOWED_HOSTS=127.0.0.1,localhost,0.0.0.0
+DJANGO_SECRET_KEY=
+DJANGO_DEBUG=False
+DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1
+DJANGO_CSRF_TRUSTED_ORIGINS=
+
+# CORS настройки
+CORS_ALLOWED_ORIGINS=
+CORS_ALLOW_ALL_ORIGINS=False
+CORS_ALLOW_CREDENTIALS=True
+CORS_ALLOW_HEADERS=accept,accept-encoding,authorization,content-type,dnt,origin,user-agent,x-csrftoken,x-requested-with
+
+# Локализация
+DJANGO_LANGUAGE_CODE=ru-ru
+DJANGO_TIME_ZONE=UTC
+DJANGO_USE_I18N=True
+DJANGO_USE_TZ=True
+
+# Статические файлы
+DJANGO_STATIC_URL=/static/
+DJANGO_MEDIA_URL=/storage/
+
+# API настройки
+DJANGO_APPEND_SLASH=False
+
+# JWT настройки
+JWT_ACCESS_TOKEN_LIFETIME_MINUTES=60
+JWT_REFRESH_TOKEN_LIFETIME_DAYS=1
 
 # База данных PostgreSQL
 DATABASE_ENGINE=django.db.backends.postgresql
-DATABASE_NAME=links_db
-DATABASE_USER=links_user
-DATABASE_PASSWORD=links_password
+DATABASE_NAME=
+DATABASE_USER=
+DATABASE_PASSWORD=
 DATABASE_HOST=db
 DATABASE_PORT=5432
 
 # PostgreSQL настройки для контейнера
-POSTGRES_DB=links_db
-POSTGRES_USER=links_user
-POSTGRES_PASSWORD=links_password
+POSTGRES_DB=
+POSTGRES_USER=
+POSTGRES_PASSWORD=
 
 # Frontend настройки
-NEXT_PUBLIC_API_URL=http://localhost:8000
+NEXT_PUBLIC_API_URL=
 
-# Опциональные настройки
-# DJANGO_EMAIL_BACKEND=django.core.mail.backends.console.EmailBackend
-# DJANGO_EMAIL_HOST=
-# DJANGO_EMAIL_PORT=587
-# DJANGO_EMAIL_HOST_USER=
-# DJANGO_EMAIL_HOST_PASSWORD=
-# DJANGO_EMAIL_USE_TLS=True
+# Безопасность (для продакшена)
+DJANGO_SECURE_SSL_REDIRECT=False
+DJANGO_SECURE_HSTS_SECONDS=0
+DJANGO_SECURE_HSTS_INCLUDE_SUBDOMAINS=False
+DJANGO_SECURE_HSTS_PRELOAD=False
+DJANGO_SECURE_CONTENT_TYPE_NOSNIFF=True
+DJANGO_SECURE_BROWSER_XSS_FILTER=True
+DJANGO_X_FRAME_OPTIONS=DENY
 
-# Для продакшена
-# DJANGO_SECURE_SSL_REDIRECT=True
-# DJANGO_SECURE_HSTS_SECONDS=31536000
-# DJANGO_SECURE_HSTS_INCLUDE_SUBDOMAINS=True
-# DJANGO_SECURE_HSTS_PRELOAD=True
+# Email настройки (опционально)
+DJANGO_EMAIL_BACKEND=django.core.mail.backends.console.EmailBackend
+DJANGO_EMAIL_HOST=
+DJANGO_EMAIL_PORT=587
+DJANGO_EMAIL_HOST_USER=
+DJANGO_EMAIL_HOST_PASSWORD=
+DJANGO_EMAIL_USE_TLS=True
+
+# SSL настройки (для Let's Encrypt)
+DOMAIN=
+EMAIL=
+ACME_CA_URI=https://acme-v02.api.letsencrypt.org/directory