import base64
import hashlib
import os

from access_core.settings.base import *

# Dev-only fallback key for PHI field encryption. Staging/production must set
# PHI_KMS_KEY_ID instead; this default only applies when no KMS key is configured.
os.environ.setdefault(
    "PHI_LOCAL_ENCRYPTION_KEY",
    base64.b64encode(hashlib.sha256(b"access-core-dev-phi-key").digest()).decode(),
)

DEBUG = True

ALLOWED_HOSTS = ["*"]

# Dev holds synthetic data only and talks to the local CMS mock.
ALLOW_SYNTHETIC_MBI = True

DATABASES = {
    "default": {
        "ENGINE": "django.db.backends.postgresql",
        "NAME": os.getenv("POSTGRES_DB", "access_core"),
        "USER": os.getenv("POSTGRES_USER", "access_user"),
        "PASSWORD": os.getenv("POSTGRES_PASSWORD", "dev_password_synthetic_only"),
        "HOST": os.getenv("POSTGRES_HOST", "db"),
        "PORT": os.getenv("POSTGRES_PORT", "5432"),
    }
}

CMS_API_SUBMISSION_STATUS_PATH = os.getenv(
    "CMS_API_SUBMISSION_STATUS_PATH",
    "/fhir/{resource_type}/$submission-status?submissionID={submission_id}",
)