<?php
return [
    'force_https' => true,
    'cookie_secure' => true,
    'cookie_samesite' => 'Lax',
    'csrf_ttl_seconds' => 7200,
    'rate_limit' => [
        'login' => ['limit' => 8, 'window_seconds' => 900],
        'api' => ['limit' => 120, 'window_seconds' => 60],
    ],
    'uploads' => [
        'max_bytes' => 10485760,
        'allowed_mime' => ['application/pdf','image/png','image/jpeg','application/vnd.openxmlformats-officedocument.wordprocessingml.document','application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'],
    ],
    'app_key_base64' => 'CHANGE_ME',
];