# =====================================================================
# A&B Hub — Environment Configuration
#
# Copy this file to `.env` (same directory) and fill in real values.
# `.env` is git-ignored and MUST NEVER be committed. On the server it
# should live outside the public web root's document tree, or at least
# be blocked by .htaccess (see public/.htaccess and the root .htaccess).
# =====================================================================

# ---- Application ----
APP_NAME="A&B Hub"
APP_ENV=production
# local | staging | production
APP_DEBUG=true
# true shows detailed error pages; MUST be false in production
APP_URL=https://hub.aandbcleaner.org
APP_TIMEZONE=America/Toronto
APP_KEY=daZ378ClKsKpwj14aarzfvgMNgGtz7vVkD9jM5oUjjw=
# 32-byte random key, base64-encoded. Generate with:
#   php bin/generate_key.php
# Used for encrypting stored credentials (email accounts, integrations,
# 2FA secrets) and as HMAC key for signed tokens.
APP_LOCALE=en
APP_DEFAULT_CURRENCY=CAD

# ---- Database (MySQL 8) ----
DB_HOST=127.0.0.1
DB_PORT=3306
DB_DATABASE=aandblbc_aandbhubdb
DB_USERNAME=aandblbc_aandbhubdb
DB_PASSWORD=b#Kp[-A.&(J_qz4~
DB_CHARSET=utf8mb4
DB_COLLATION=utf8mb4_unicode_ci

# ---- Session ----
SESSION_DRIVER=database
# database | files
SESSION_LIFETIME_MINUTES=120
SESSION_COOKIE_NAME=ab_hub_session
SESSION_SECURE_COOKIE=true
# true requires HTTPS; keep true outside of local http:// dev
SESSION_SAMESITE=Lax

# ---- Mail (PHPMailer / SMTP) ----
MAIL_MAILER=smtp
MAIL_HOST=smtp.gmail.com
MAIL_PORT=587
MAIL_ENCRYPTION=tls
MAIL_USERNAME=ibiyemi28@gmail.com
MAIL_PASSWORD=nmvejmzpuqscrqim
MAIL_FROM_ADDRESS=ibiyemi28@gmail.com
MAIL_FROM_NAME="A&B Hub"

# ---- Security ----
RATE_LIMIT_LOGIN_MAX_ATTEMPTS=5
RATE_LIMIT_LOGIN_DECAY_MINUTES=15
PASSWORD_MIN_LENGTH=10
CSRF_TOKEN_LIFETIME_MINUTES=120

# ---- Logging ----
LOG_LEVEL=error
# debug | info | warning | error | critical
LOG_CHANNEL=file