# ─── Environment ────────────────────────────────────────────────────────────
# 'dev' enables error display. 'prod' is silent.
APP_ENV=dev

# Public base URL used by base_url() helpers and email links.
APP_BASE_URL=https://fitme3070.pt/

# ─── Branding ───────────────────────────────────────────────────────────────
# Selects assets/css/branding-<BRAND>.css for both the backoffice header and
# the public site head. Files are committed; falls back to `fitme3070`.
BRAND=fitme3070

# ─── Database (local fitme3070) ─────────────────────────────────────────────
DB_HOST=127.0.0.1
DB_PORT=3306
DB_NAME=fitme3070
DB_USER=root
DB_PASS=

# ─── Notifications (email + SMS) ─────────────────────────────────────────────
# Delivery is centralized at id.andmore.pt (/notify). This app does not send
# mail/SMS itself. Auth + endpoint are ANDMORE_ID_URL + NOTIFY_API_KEY below.

# ─── Backup ─────────────────────────────────────────────────────────────────
BACKUP_TOKEN=replace_me
BACKUP_KEEP_DAYS=7

# ─── Identity / Andmore ID ─────────────────────────────────────────────────────
# federated — auth is delegated to id.andmore.pt; the am_sso cookie + central
# sso_sessions/users tables drive login. This site is part of the ecosystem, so
# federated is the expected mode (standalone disables all SSO traffic).
IDENTITY_MODE=federated

# Slug identifying this install on andmore_id.linked_platforms.
PLATFORM_SLUG=fitme3070

# When true (federated): a register/login fails loudly if the central DB is
# unreachable, instead of creating an orphan local row. True on prod.
IDENTITY_REQUIRE_UPSTREAM=false

# Andmore ID central service URL.
ANDMORE_ID_URL=https://id.andmore.pt/

# Direct DB credentials for the central Andmore ID database (federated mode).
SSO_DB_HOST=
SSO_DB_PORT=
SSO_DB_NAME=andmore_id
SSO_DB_USER=
SSO_DB_PASS=

# Parent domain the am_sso cookie is scoped to. Must match id.andmore.pt.
SSO_COOKIE_DOMAIN=.andmore.pt
# Override per environment (e.g. am_sso_dev on dev) so prod/dev cookies on the
# shared parent domain don't clobber each other.
SSO_COOKIE_NAME=am_sso
SSO_SESSION_TTL_DAYS=30

# When true (federated): unauthenticated users are sent straight to
# id.andmore.pt. Leave false during the member migration, flip true after.
SSO_REQUIRED=false

# ─── Notificações centralizadas (id.andmore.pt /notify) ──────────────────────
# App key for POST {ANDMORE_ID_URL}notify/send. Minted on id.andmore.pt →
# Notificações → Chaves de app.
NOTIFY_API_KEY=

# ─── Hub social content endpoint (api/hub-content.php) ─────────────────────────
# Shared secret the hub social-post generator signs its pull requests with.
# Generated on id.andmore.pt → Plataformas → fitme3070 → "Gerar segredo de
# conteúdo", and registered there as this platform's content_secret with the
# content_endpoint pointing at {APP_BASE_URL}api/hub-content.php. Empty disables
# the endpoint (503).
HUB_CONTENT_SECRET=

# ─── Git HTTP authentication (views/sysadmin/platform_update.php) ──────────────
GIT_HTTP_USERNAME=
GIT_HTTP_TOKEN=