/\*\*

- Environment Configuration
- Development | Staging | Production
  \*/

// ============================================================================
// BACKEND CONFIGURATION (PHP)
// ============================================================================

// File: backend/config.php

<?php
define('ENVIRONMENT', getenv('APP_ENV') ?: 'development');

// Database Configuration
if (ENVIRONMENT === 'production') {
    define('DB_HOST', getenv('DB_HOST') ?: 'prod-db.example.com');
    define('DB_USER', getenv('DB_USER') ?: 'fitness_app');
    define('DB_PASS', getenv('DB_PASS'));
    define('DB_NAME', 'fitness_app');
    define('DB_PORT', getenv('DB_PORT') ?: 3306);
    define('DB_CHARSET', 'utf8mb4');
    
    // Security Headers
    define('FORCE_HTTPS', true);
    define('SECURE_COOKIES', true);
    define('HSTS_MAX_AGE', 31536000); // 1 year
} elseif (ENVIRONMENT === 'staging') {
    define('DB_HOST', 'staging-db.example.com');
    define('DB_USER', 'fitness_staging');
    define('DB_PASS', getenv('DB_PASS'));
    define('DB_NAME', 'fitness_staging');
    define('DB_PORT', 3306);
    define('FORCE_HTTPS', true);
} else {
    // Development
    define('DB_HOST', 'localhost');
    define('DB_USER', 'root');
    define('DB_PASS', 'password');
    define('DB_NAME', 'fitness_app_dev');
    define('DB_PORT', 3306);
    define('FORCE_HTTPS', false);
}

// API Configuration
define('API_VERSION', 'v1');
define('API_BASE_PATH', '/api/' . API_VERSION);
define('REQUEST_TIMEOUT', 30); // seconds
define('MAX_PAYLOAD_SIZE', 10485760); // 10MB

// Rate Limiting
define('RATE_LIMIT_ENABLED', true);
define('RATE_LIMIT_REQUESTS', 100); // per minute
define('RATE_LIMIT_WINDOW', 60); // seconds

// Logging
define('LOG_LEVEL', ENVIRONMENT === 'production' ? 'error' : 'debug');
define('LOG_FILE', '/var/log/fitness_api.log');
define('LOG_DATABASE', true); // Log to DB as well

// CORS Configuration
define('ALLOWED_ORIGINS', [
    'https://fitness-app.com',
    'https://app.fitness-app.com',
    ENVIRONMENT === 'development' ? 'http://localhost:3000' : null
]);

// Email Configuration (for notifications)
define('MAIL_HOST', getenv('MAIL_HOST') ?: 'smtp.gmail.com');
define('MAIL_PORT', getenv('MAIL_PORT') ?: 587);
define('MAIL_USER', getenv('MAIL_USER'));
define('MAIL_PASS', getenv('MAIL_PASS'));
define('MAIL_FROM', 'noreply@fitness-app.com');

// Cache Configuration
define('CACHE_ENABLED', ENVIRONMENT !== 'development');
define('CACHE_DRIVER', 'redis'); // 'redis' or 'file'
define('CACHE_TTL', 3600); // seconds

// Security
define('HMAC_ALGORITHM', 'sha256');
define('TIMESTAMP_TOLERANCE', 300); // 5 minutes
define('BCRYPT_COST', 12);

// API Keys (for external services)
define('MAPBOX_API_KEY', getenv('MAPBOX_API_KEY'));
define('WEATHER_API_KEY', getenv('WEATHER_API_KEY'));

// Enable debug mode (NEVER true in production)
define('DEBUG_MODE', ENVIRONMENT === 'development');

// Timezone
date_default_timezone_set('UTC');
?>

// ============================================================================
// MOBILE CONFIGURATION (Dart/Flutter)
// ============================================================================

// File: mobile/lib/config/environment.dart

const String kEnvironment = String.fromEnvironment('ENVIRONMENT', defaultValue: 'development');

class EnvironmentConfig {
static const String apiHost = String.fromEnvironment(
'API_HOST',
defaultValue: 'https://api.fitness-app.local',
);

static const String mapTileServer = 'https://map-saas.intaleqapp.com/styles/basic-preview/style.json';

static const int locationUpdateInterval = 5; // seconds
static const int mapRefreshInterval = 2; // seconds

// API Configuration
static const Duration requestTimeout = Duration(seconds: 30);
static const int maxRetries = 3;

// Location Configuration
static const double minAccuracy = 10.0; // meters
static const double minDistance = 10.0; // meters between coordinates
static const int foregroundServicePriority = 1; // HIGH

// Database Configuration
static const String databaseName = 'fitness_app.db';
static const int databaseVersion = 1;

// Feature Flags
static const bool enableBackgroundTracking = true;
static const bool enableOfflineSync = true;
static const bool enableAnalytics = !kDebugMode;

// Get API endpoint based on environment
static String get apiEndpoint {
return '$apiHost/api/v1';
}

// Get workout submission endpoint
static String get workoutSubmissionEndpoint {
return '$apiEndpoint/workouts';
}
}

class DevEnvironment {
static const String apiHost = 'http://localhost:8080';
static const bool debugLogging = true;
}

class StagingEnvironment {
static const String apiHost = 'https://staging-api.fitness-app.com';
static const bool debugLogging = true;
}

class ProductionEnvironment {
static const String apiHost = 'https://api.fitness-app.com';
static const bool debugLogging = false;
}

// ============================================================================
// DOCKER COMPOSE CONFIGURATION
// ============================================================================

# File: docker-compose.yml

version: '3.8'

services:
mysql:
image: mysql:8.0
container_name: fitness_app_mysql
environment:
MYSQL_ROOT_PASSWORD: root_password
MYSQL_DATABASE: fitness_app
MYSQL_USER: fitness_app
MYSQL_PASSWORD: ${DB_PASSWORD}
ports: - "3306:3306"
volumes: - mysql_data:/var/lib/mysql - ./backend/schema.sql:/docker-entrypoint-initdb.d/schema.sql
networks: - fitness_network
healthcheck:
test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
timeout: 20s
retries: 10

php_api:
image: php:8.2-fpm
container_name: fitness_app_php
environment:
APP_ENV: ${APP_ENV:-development}
DB_HOST: mysql
DB_USER: fitness_app
DB_PASS: ${DB_PASSWORD}
DB_NAME: fitness_app
volumes: - ./backend:/app
depends_on:
mysql:
condition: service_healthy
networks: - fitness_network

nginx:
image: nginx:alpine
container_name: fitness_app_nginx
ports: - "80:80" - "443:443"
volumes: - ./backend:/app - ./nginx.conf:/etc/nginx/nginx.conf - ./ssl:/etc/nginx/ssl
depends_on: - php_api
networks: - fitness_network

redis:
image: redis:7-alpine
container_name: fitness_app_redis
ports: - "6379:6379"
networks: - fitness_network
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 10s
timeout: 5s
retries: 5

volumes:
mysql_data:

networks:
fitness_network:
driver: bridge

# ============================================================================

// ENVIRONMENT VARIABLES (.env file)
// ============================================================================

# File: .env.example (copy to .env for development)

# Application

APP_ENV=development
APP_DEBUG=true
TIMEZONE=UTC

# Database

DB_HOST=localhost
DB_PORT=3306
DB_USER=fitness_app
DB_PASS=your_secure_password_here
DB_NAME=fitness_app

# API Configuration

API_HOST=http://localhost:8080
API_VERSION=v1
API_RATE_LIMIT=100

# Map Tile Server

TILE_SERVER_URL=https://map-saas.intaleqapp.com/styles/basic-preview/style.json

# Email (for notifications)

MAIL_HOST=smtp.gmail.com
MAIL_PORT=587
MAIL_USER=your_email@gmail.com
MAIL_PASS=your_app_password

# External Services

MAPBOX_API_KEY=
WEATHER_API_KEY=

# Security

HMAC_ALGORITHM=sha256
BCRYPT_COST=12

# Logging

LOG_LEVEL=debug
LOG_FILE=/var/log/fitness_api.log

# Cache

CACHE_DRIVER=redis
CACHE_TTL=3600

# ============================================================================

// NGINX CONFIGURATION
// ============================================================================

# File: nginx.conf

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log warn;
pid /var/run/nginx.pid;

events {
worker_connections 1024;
}

http {
include /etc/nginx/mime.types;
default_type application/octet-stream;

    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
                    '$status $body_bytes_sent "$http_referer" '
                    '"$http_user_agent" "$http_x_forwarded_for"';

    access_log /var/log/nginx/access.log main;

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    server_tokens off;

    # Gzip compression
    gzip on;
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 6;
    gzip_types text/plain text/css text/xml text/javascript
               application/json application/javascript application/xml+rss;

    # Rate limiting
    limit_req_zone $binary_remote_addr zone=general:10m rate=10r/s;
    limit_req_zone $http_x_api_key zone=api:10m rate=100r/m;

    upstream php_backend {
        server php_api:9000;
    }

    # Redirect HTTP to HTTPS
    server {
        listen 80;
        server_name _;
        return 301 https://$host$request_uri;
    }

    # HTTPS Server
    server {
        listen 443 ssl http2;
        server_name api.fitness-app.com;

        ssl_certificate /etc/nginx/ssl/cert.crt;
        ssl_certificate_key /etc/nginx/ssl/key.key;
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers on;

        # Security headers
        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
        add_header X-Frame-Options "SAMEORIGIN" always;
        add_header X-Content-Type-Options "nosniff" always;
        add_header X-XSS-Protection "1; mode=block" always;

        root /app;

        # Rate limiting
        limit_req zone=api burst=20 nodelay;

        location / {
            try_files $uri $uri/ @rewrite;
        }

        location @rewrite {
            rewrite ^/(.*)$ /api_workouts.php?url=$1 last;
        }

        location ~ \.php$ {
            fastcgi_pass php_backend;
            fastcgi_index index.php;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include fastcgi_params;

            fastcgi_connect_timeout 60s;
            fastcgi_send_timeout 60s;
            fastcgi_read_timeout 60s;
        }

        # Deny access to sensitive files
        location ~ /\. {
            deny all;
        }

        location ~ ~$ {
            deny all;
        }
    }

}

// ============================================================================
// BUILD CONFIGURATION (Android)
// ============================================================================

# File: android/app/build.gradle

android {
compileSdkVersion 34
ndkVersion "25.1.8937393"

    defaultConfig {
        applicationId "com.fitness.tracker"
        minSdkVersion 21
        targetSdkVersion 34
        versionCode flutterVersionCode.toInteger()
        versionName flutterVersionName
    }

    buildTypes {
        debug {
            debuggable true
            signingConfig signingConfigs.debug
            buildConfigField "String", "API_HOST", '"http://192.168.1.100:8080"'
        }

        staging {
            debuggable false
            signingConfig signingConfigs.release
            buildConfigField "String", "API_HOST", '"https://staging-api.fitness-app.com"'
        }

        release {
            signingConfig signingConfigs.release
            buildConfigField "String", "API_HOST", '"https://api.fitness-app.com"'
        }
    }

}

// ============================================================================
// GIT IGNORE (.gitignore)
// ============================================================================

# File: .gitignore

# Environment

.env
.env.local
.env.\*.local

# API Credentials

api_key.txt
api_secret.txt

# Database

_.db
_.sqlite
\*.sqlite3

# Logs

\*.log
logs/

# IDE

.vscode/
.idea/
_.swp
_.swo

# Flutter

.dart_tool/
.flutter-plugins
.packages
build/

# Backend

vendor/
node_modules/

# OS

.DS_Store
Thumbs.db

# Secrets

secrets.json
credentials.json