# -----------------------------------------------------------------------------
# DLSJBC Proof of Payment Portal - environment configuration
#
# This file holds the secrets (database password, SMTP password, encryption
# key). It is NEVER committed to version control and must not be reachable
# over HTTP - the .htaccess of the application root blocks direct access.
#
# Every value can also be set as a real environment variable (Apache SetEnv,
# systemd, Docker). The server environment always wins over this file.
# -----------------------------------------------------------------------------

# --- Application -------------------------------------------------------------
APP_ENV=development
APP_DEBUG=true
APP_TIMEZONE=Asia/Manila
APP_NAME=DLSJBC Payment Portal
APP_TITLE=DLSJBC Web-Based Proof of Payment and Receipt Verification Portal
APP_SHORT_NAME=Proof of Payment Portal
ORG_NAME=DLSJBC
ORG_OFFICE=DLSJBC Finance's Office
APP_CURRENCY=PHP
APP_LOCALE=en_PH

# Leave empty to detect it from the current request.
APP_BASE_URL=http://localhost/payment

# Where the notifications are sent to.
ADMIN_EMAIL=payment.system.dlsjbc@gmail.com

# --- Database ----------------------------------------------------------------
DB_HOST=localhost
DB_PORT=3306
DB_USER=root
DB_PASS=
DB_NAME=payment_portal_db
DB_CHARSET=utf8mb4
DB_SOCKET=

# --- Mail (SMTP) -------------------------------------------------------------
SMTP_ENABLED=true
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_SECURE=tls
SMTP_USER=payment.system.dlsjbc@gmail.com
SMTP_PASS=nvthvvvtwoetnwiy
SMTP_FROM=payment.system.dlsjbc@gmail.com
SMTP_FROM_NAME=DLSJBC Proof of Payment Portal
SMTP_VERIFY_PEER=false
SMTP_TIMEOUT=15
# Path to the CA bundle used to verify the mail server certificate.
# Leave empty to use the php.ini setting.
SMTP_CA_BUNDLE=
# Log the mails instead of sending them.
SMTP_SIMULATE=false

# --- Security ----------------------------------------------------------------
# Generate a new one with: php -r "echo bin2hex(random_bytes(32)), PHP_EOL;"
ENCRYPTION_KEY=b2ef3c08e60ab85f00a88f02acac7a30ba6cb1afbce2455a33934ab8c84ffc85
# Idle session timeout in seconds.
SESSION_TIMEOUT=1800
# Set to true when the portal is served over HTTPS.
SECURE_COOKIES=false
# Maximum accepted proof-of-payment file size in bytes (10 MB).
MAX_UPLOAD_SIZE=10485760

# --- Maintenance -------------------------------------------------------------
MAINTENANCE_MODE=false
MAINTENANCE_MESSAGE=The portal is temporarily unavailable. Please try again later.
