<?php

use Monolog\Logger;
use function Symfony\Component\DependencyInjection\Loader\Configurator\env;

return [

    // Firewall configuration, the firewall works similar to fail2ban, in case a client has produced a specific number
    // of client errors, we insert a ban for this ip for a specific amount of time. This protects us from brute-force
    // attacks and other malicious requests
    'fusio_firewall_ignoreip'  => [],
    'fusio_firewall_bantime'   => 'PT5M',
    'fusio_firewall_findtime'  => 'PT2M',
    'fusio_firewall_maxretry'  => 32,
    'fusio_firewall_codes'     => [],

    // Experimental MCP server configuration, if enabled, the MCP HTTP endpoint /mcp is active. The CLI stdio MCP service
    // can always be used independent of this configuration via php bin/fusio mcp
    // The MCP server helps to access all operations through an LLM
    'fusio_mcp'                => false,
    'fusio_mcp_queue_size'     => 500,
    'fusio_mcp_timeout'        => 1800,

    // Whether the JsonRPC endpoint at /jsonrpc is enabled, it allows to invoke every operation through JsonRPC. For
    // communication with external customers we always recommend to use REST endpoints but for internal cases it can be
    // useful to use JsonRPC
    'fusio_jsonrpc'            => false,

    // Whether the GraphQL endpoint at /graphql is enabled, it allows to invoke every GET operation through GraphQL. For
    // communication with external customers we always recommend to use REST endpoints but for web apps it can be
    // useful to use GraphQL
    'fusio_graphql'            => false,

    // OAuth2 access token expiration settings. How long can you use an access token and the refresh token. After the
    // expiration a user either need to use a refresh token to extend the token or request a new token
    'fusio_expire_token'       => 'P2D',
    'fusio_expire_refresh'     => 'P3D',

    // Optional a tenant id of you Fusio instance. This can be used to run multiple clients on the same Fusio
    // installation. All database entries are separated by the provided tenant id
    'fusio_tenant_id'          => env('APP_TENANT_ID')->string(),

    // The secret key of a project. It is recommended to change this to another random value. This is used i.e. to
    // encrypt the connection credentials in the database. NOTE IF YOU CHANGE THE KEY FUSIO CAN NO LONGER READ ANY DATA
    // WHICH WAS ENCRYPTED BEFORE. BECAUSE OF THAT IT IS RECOMMENDED TO CHANGE THE KEY ONLY BEFORE THE INSTALLATION
    'fusio_project_key'        => env('APP_PROJECT_KEY')->string(),

    // Optional an array of action or connection classes which are not allowed to use
    'fusio_action_exclude'     => null,
    'fusio_connection_exclude' => null,

    // Points to the Fusio provider file which contains specific classes for the system. Please take a look at the
    // provider file for more information
    'fusio_provider'           => __DIR__ . '/provider.php',

    // Describes the default email which Fusio uses as from address
    'fusio_mail_sender'        => env('APP_MAIL_SENDER')->string(),

    // Indicates whether the user registration is enabled. If true it is possible for external users to register a new account
    'fusio_registration'       => true,

    // Indicates whether the connection endpoints are enabled. Through a connection endpoint it is possible to access and modify
    // a database or the filesystem. If false all those endpoints are disabled.
    'fusio_connection'         => true,

    // Indicates whether the marketplace is enabled. If true it is possible to download and install other apps through the backend
    'fusio_marketplace'        => true,

    // The public url to the apps folder (i.e. http://acme.com/apps or http://apps.acme.com)
    'fusio_apps_url'           => env('APP_APPS_URL')->string(),

    // Location where the apps are persisted from the marketplace. By default this is the public dir to access the apps
    // directly, but it is also possible to specify a different folder
    'fusio_apps_dir'           => __DIR__ . '/public/apps',

    // The url to the psx public folder (i.e. http://api.acme.com or http://127.0.0.1/psx/public)
    'psx_url'                  => env('APP_URL')->string(),

    // The input path 'index.php/' or '' if every request is served to the index.php file
    'psx_dispatch'             => '',

    // Defines the current environment i.e. prod or dev
    'psx_env'                  => env('APP_ENV')->string(),

    // Whether the app runs in debug mode or not. If not error reporting is set to 0, also several caches are used if
    // the debug mode is false
    'psx_debug'                => env('APP_DEBUG')->bool(),

    // Database parameters which are used for the doctrine DBAL connection
    // http://docs.doctrine-project.org/projects/doctrine-dbal/en/latest/reference/configuration.html
    'psx_connection'           => env('APP_CONNECTION')->string(),

    // Mailer connection which is used to send mails
    // https://symfony.com/doc/current/mailer.html#using-built-in-transports
    'psx_mailer'               => env('APP_MAILER')->string(),

    // Messenger transport configuration
    // https://symfony.com/doc/current/messenger.html#transports-async-queued-messages
    'psx_messenger'            => env('APP_MESSENGER')->string(),

    'psx_migration_namespace'  => 'App\\Migrations',

    // Trusted IP header i.e. X-Forwarded-For which contains the actual user ip in case the app runs behind a proxy
    'psx_trusted_ip_header'    => env('APP_TRUSTED_IP_HEADER')->string(),

    // Optional an SDKgen access token which adds support for different SDK generators
    // https://sdkgen.app/
    'sdkgen_client_id'         => env('SDKGEN_CLIENT_ID')->string(),
    'sdkgen_client_secret'     => env('SDKGEN_CLIENT_SECRET')->string(),

    'psx_log_level'            => Logger::ERROR,

    // Folder locations
    'psx_path_cache'           => __DIR__ . '/cache',
    'psx_path_log'             => __DIR__ . '/log',
    'psx_path_public'          => __DIR__ . '/public',
    'psx_path_resources'       => __DIR__ . '/resources',
    'psx_path_src'             => __DIR__ . '/src',

    // Supported writers
    'psx_supported_writer'     => [
        \PSX\Data\Writer\Json::class,
        \PSX\Data\Writer\Jsonp::class,
        \PSX\Data\Writer\Jsonx::class,
    ],

];