<?php
/**
 * TraderAlign — config.local.php TEMPLATE. Copy this file to
 * config/config.local.php (which is gitignored and never committed) and
 * fill in real values before running this app anywhere. This example file
 * itself is safe to commit — it contains no real secrets.
 *
 * Generate each secret with:
 *   php -r "echo bin2hex(random_bytes(32));"
 * Run that twice — once for CRON_SECRET, once for ACCOUNT_CREDENTIAL_KEY —
 * never reuse the same value for both, and never reuse a value across
 * environments (local dev / staging / production each need their own).
 */

// 'development' locally (turns on PHP error display); 'production'
// everywhere else (config.php's own tracked default is already
// 'production', so this line only matters for local dev machines).
define('APP_ENV', 'development');

// Database — override only if this environment's DB differs from
// config.php's XAMPP-local defaults (localhost/root/no password).
// define('DB_HOST', 'localhost');
// define('DB_PORT', '3306');
// define('DB_NAME', 'traderalign');
// define('DB_USER', 'root');
// define('DB_PASS', '');

// REQUIRED before this app is exposed to the internet — both must be a
// real, random 64-hex-character (32-byte) value, unique to this
// environment. See the header comment above for how to generate one.
define('CRON_SECRET', 'REPLACE_WITH_A_REAL_RANDOM_64_HEX_CHAR_VALUE');
define('ACCOUNT_CREDENTIAL_KEY', 'REPLACE_WITH_A_DIFFERENT_REAL_RANDOM_64_HEX_CHAR_VALUE');

// External services — uncomment and fill in as each is actually wired up.
// define('RESEND_API_KEY', '');
// define('ANTHROPIC_API_KEY', '');
// define('POSTHOG_API_KEY', '');
// define('UPSTASH_REDIS_URL', '');
// define('UPSTASH_REDIS_TOKEN', '');
// define('MPESA_CONSUMER_KEY', '');
// define('MPESA_CONSUMER_SECRET', '');
// define('MPESA_PASSKEY', '');
// define('MPESA_SHORTCODE', '');
// define('R2_ACCESS_KEY', '');
// define('R2_SECRET_KEY', '');
// define('R2_BUCKET', '');
// define('R2_ENDPOINT', '');
