# =============================================================================
# TFM aInventory - Backend Configuration Schema (v1.12.0)
# =============================================================================
# Purpose: Configuration for the FastAPI backend, database, AI, and logging.
# Load order: system environment variables > config/backend.yaml > code defaults.
# Required/Optional: Most are optional; defaults in code provide sensible behavior.
# =============================================================================

# --- Database & Storage ---
database:
  # Path to SQLite database file (relative to backend/ folder)
  # Default: data/inventory.db
  # Environment: BACKEND_DATABASE_SQLITE_PATH
  sqlite_path: "data/inventory.db"

  # Keep database logs for performance auditing?
  # Default: true
  # Environment: BACKEND_DATABASE_WAL_MODE
  wal_mode: true

  # How many days of audit logs to keep?
  # Default: 30
  # Environment: BACKEND_DATABASE_LOG_RETENTION_DAYS
  log_retention_days: 30

# --- AI & Vision Services ---
ai:
  # Primary provider for image OCR and classification (gemini|claude)
  # Default: gemini
  # Environment: BACKEND_AI_PRIMARY_AI_PROVIDER
  primary_ai_provider: "gemini"

  # Fallback provider if primary fails
  # Default: claude
  # Environment: BACKEND_AI_FALLBACK_PROVIDER
  fallback_provider: "claude"

# --- Authentication & LDAP ---
auth:
  # Enable LDAP Authentication?
  # Default: false
  # Environment: BACKEND_AUTH_LDAP_ENABLED or LDAP_ENABLED
  ldap_enabled: false

  # LDAP Server address (optional)
  # Example: "ldaps://192.168.1.100:636"
  # Environment: BACKEND_AUTH_LDAP_SERVER or LDAP_SERVER
  ldap_server: ""

  # LDAP Base DN for user search
  # Example: "dc=example,dc=com"
  # Environment: BACKEND_AUTH_LDAP_BASE_DN or LDAP_BASE_DN
  ldap_base_dn: ""

  # LDAP User DN Template
  # Example: "uid={username},ou=people,dc=example,dc=com"
  # Environment: BACKEND_AUTH_LDAP_USER_TEMPLATE or LDAP_USER_TEMPLATE
  ldap_user_template: "uid={username},ou=people,dc=ldap,dc=lan"

  # LDAP Groups Base DN
  # Example: "ou=groups,dc=example,dc=com"
  # Environment: BACKEND_AUTH_LDAP_GROUPS_DN or LDAP_GROUPS_DN
  ldap_groups_dn: "ou=groups"

  # Use TLS for LDAP connection?
  # Default: true
  # Environment: BACKEND_AUTH_LDAP_USE_TLS or LDAP_USE_TLS
  ldap_use_tls: true

  # Ignore TLS certificate verification? (NOT FOR PRODUCTION)
  # Default: false
  # Environment: BACKEND_AUTH_LDAP_IGNORE_CERT or LDAP_IGNORE_CERT
  ldap_ignore_cert: false

  # LDAP Role Mappings (List of group-to-role mappings)
  # assigned_role = None (if no match found)
  ldap_role_mappings:
    - group: "inventory_admins"
      role: "admin"
    - group: "inventory_users"
      role: "user"

  # Path to store hashed passwords for offline use
  # Environment: BACKEND_AUTH_PASSWORD_CACHE_PATH
  password_cache_path: "data/.passwords"

# --- Logging & Diagnostics ---
logging:
  # Log level (DEBUG|INFO|WARNING|ERROR)
  # Default: INFO
  # Environment: BACKEND_LOGGING_LOG_LEVEL or LOG_LEVEL
  log_level: "INFO"

  # Log file rotation size in megabytes
  # Default: 10
  # Environment: BACKEND_LOGGING_LOG_ROTATION_SIZE_MB
  log_rotation_size_mb: 10

  # Number of rotated log files to keep
  # Default: 5
  # Environment: BACKEND_LOGGING_LOG_ROTATION_COUNT
  log_rotation_count: 5

# --- Application ---
application:
  # Directory for persistent data
  # Environment: BACKEND_APPLICATION_DATA_DIR or DATA_DIR
  data_dir: "./data"

  # Directory for log files
  # Environment: BACKEND_APPLICATION_LOGS_DIR or LOGS_DIR
  logs_dir: "./logs"

# --- Feature Flags ---
features:
  # Enable AI image extraction and OCR?
  # Default: true
  ai_extraction_enabled: true

  # Enable offline synchronization features?
  # Default: true
  offline_sync_enabled: true

  # Enable detailed audit logging for each API request?
  # Default: true
  audit_logging_enabled: true