from .base import *  # noqa: F401,F403

DEBUG = True
ALLOWED_HOSTS = list({*ALLOWED_HOSTS, "testserver", "0.0.0.0", "localhost", "127.0.0.1"})

# Local admin/frontend may be opened via localhost or a LAN IP (e.g. 192.168.x.x).
# corsheaders reflects the request Origin (not "*") when credentials are enabled.
CORS_ALLOW_ALL_ORIGINS = True

# Homepage fires many public GETs; Strict Mode doubles effects in local Next.js.
REST_FRAMEWORK = {
    **REST_FRAMEWORK,
    "DEFAULT_THROTTLE_RATES": {
        **REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"],
        "anon": "600/min",
        "user": "1200/min",
    },
}