<?php
/**
 * Copy this file to config.php and fill in your real values.
 * config.php is excluded from version control — never commit real credentials.
 */
return [
    'app' => [
        'name' => 'ERP.COM.BD Support Desk',
        'url' => 'https://support.example.com',      // no trailing slash
        'timezone' => 'Asia/Dhaka',
        'debug' => true,                              // true only on a dev/staging box
    ],

    'db' => [
        'host' => 'localhost',
        'name' => 'sts_support',
        'user' => 'root',
        'pass' => '',
        'charset' => 'utf8mb4',
    ],

    // Outbound mail (SMTP). Used for acknowledgements, replies, CSAT requests.
    'smtp' => [
        'host' => 'mail.example.com',
        'port' => 587,
        'encryption' => 'tls',                          // tls | ssl | none
        'username' => 'support@example.com',
        'password' => 'change-me',
        'from_email' => 'support@example.com',
        'from_name' => 'ERP.COM.BD Support Desk',
    ],

    // Inbound mail (IMAP) for email-to-ticket (FR-SUP-002/003/006).
    // Requires the php-imap extension to be enabled in cPanel > Select PHP Version > Extensions.
    'imap' => [
        'enabled' => false,
        'mailbox' => '{mail.example.com:993/imap/ssl}INBOX',
        'username' => 'support@example.com',
        'password' => 'change-me',
        'move_processed_to' => 'Processed',
        'move_quarantine_to' => 'Quarantine',
    ],

    'uploads' => [
        // Directory OUTSIDE the web root that stores ticket attachments.
        'path' => __DIR__ . '/../storage/attachments',
        'max_size_bytes' => 10 * 1024 * 1024, // 10 MB, matches FR-SUP-007 default
        'allowed_extensions' => ['png','jpg','jpeg','gif','pdf','doc','docx','xls','xlsx','csv','txt','log','zip'],
    ],

    'session' => [
        // Separate cookie names so an agent session and a portal session can coexist
        // in the same browser without colliding (BRD 4: two front ends, one ticket record).
        'agent_cookie' => 'std_agent_sess',
        'portal_cookie' => 'std_portal_sess',
        'portal_idle_timeout_minutes' => 30, // NFR-14
    ],

    'security' => [
        // Random 32+ char string, unique per install. Used to salt CSRF tokens.
        'app_key' => 'local-dev-only-8f3a9c2e7b1d4f60-change-in-production',
    ],
];
