## Streamlit config — Production defaults

[server]
# Run without launching a browser
headless = true

# Listen on all interfaces (useful for containers/VMs)
address = "0.0.0.0"

# Fixed port; override with STREAMLIT_SERVER_PORT if needed
port = 8501

# Behind a reverse proxy you typically want CORS disabled
enableCORS = false

# Keep XSRF protection ON in production
enableXsrfProtection = true

# Limit uploads (MB). Excel files here are small; adjust if needed
maxUploadSize = 5

# Reduce CPU usage by disabling file watching (no auto-reload)
fileWatcherType = "none"

# Don’t auto-rerun on file save in production
runOnSave = false

# Better network performance for many clients
enableWebsocketCompression = true

# Optional: if serving behind a subpath (e.g., https://host/sgu)
# baseUrlPath = "sgu"

[browser]
# Disable Streamlit telemetry in production
gatherUsageStats = false

[client]
# Hide developer toolbar in production
toolbarMode = "viewer"

[logger]
# Use info or warning for less noise
level = "info"

## Secrets
# For production, set a strong cookie secret via environment variable:
#   STREAMLIT_SERVER_COOKIE_SECRET="<random-32-bytes-hex>"
# Don’t store secrets in this file.