# ============================================================================
# OG Shortlink - Production Configuration
# ============================================================================
# Generated: 2025-12-23 21:47:57
# Environment: cPanel Shared Hosting
# SECURITY: chmod 600 .env after installation
# ============================================================================

# ============================================================================
# DATABASE (cPanel MySQL)
# ============================================================================
DB_DSN=mysql:host=localhost;port=3306;dbname=gradakan_gogens;charset=utf8mb4
DB_HOST=localhost
DB_NAME=gradakan_gogens
DB_USER=gradakan_gogens
DB_PASS=gradakan_gogensgradakan_gogensgradakan_gogens

# ============================================================================
# APPLICATION
# ============================================================================
APP_ENV=production
APP_DEBUG=false
APP_URL=https://go.mixue.one
PUBLIC_BASE_URL=https://go.mixue.one

# ============================================================================
# SESSION
# ============================================================================
SESSION_DRIVER=file
SESSION_LIFETIME=120

# ============================================================================
# LOGGING
# ============================================================================
LOG_LEVEL=error

# ============================================================================
# ADMIN AUTHENTICATION
# ============================================================================
ADMIN_USERNAME=admin
ADMIN_PASSWORD_HASH=$2y$10$WoL7z3/spv4F5JN07SQmUOJLxZTcbrHtdI90Oj8SynQ8bDJ5TsHSy
ADMIN_LOGIN_MAX_ATTEMPTS=6
ADMIN_LOGIN_LOCK_MINUTES=15

# ============================================================================
# API KEYS & SECRETS (Auto-generated)
# ============================================================================
# IMPORTANT: Keep these secret! Do not share or commit to git
SHORTLINK_API_KEY=36d8c8714f2a1c55a75d31a7bc9c42ac9279424341b15b698c73331fc5cca6da
ADMIN_SESSION_SECRET=c75927b7aadb6798e42b1a97aed602d6582d66063252df744c28ddec6349fbf7

# ============================================================================
# SHORTLINK CONFIGURATION
# ============================================================================
SHORTLINK_ALLOWED_HOSTS=
SHORTLINK_DENIED_HOSTS=
SHORTLINK_DENIED_TLDS=
SHORTLINK_HTTPS_ONLY=true
SHORTLINK_BLOCK_IP_LITERAL=true
SHORTLINK_BLOCK_USERINFO=true

# ============================================================================
# SHIM MODE (Bot Protection)
# ============================================================================
# Auto-generated HMAC secret for shim URL signing
SHIM_HMAC_SECRET=412abf3acf83c40694071d5f98f1a12b057f06c8c9db818e764cb4c5f868cd2a
SHIM_ALLOWED_HOSTS=
SHIM_ALLOWED_SUFFIXES=
SHIM_VERSION=v2

# ============================================================================
# URL SIGNING (Anti-Abuse)
# ============================================================================
URL_SIGN_ENABLED=false
URL_SIGN_SECRET=f1d654133de5336a5443f0983f2f23440cddac7b8e48bf2d38f5e365946985f7
URL_SIGN_TTL=3600

# ============================================================================
# IP INTELLIGENCE (Optional)
# ============================================================================
IP_INTEL_ENABLED=false
RISK_THRESHOLD=75
SHORTLINK_SAFE_URL=
SHORTLINK_FALLBACK_URL=

# API URLs (defaults)
BLACKBOX_API_URL=https://blackbox.ipinfo.app
BLACKBOX_TIMEOUT=3
IPQUERY_API_URL=https://api.ipquery.io
IPQUERY_API_KEY=
IPQUERY_TIMEOUT=3
ATLAS_API_URL=https://ip2country.ipinfo.app
ATLAS_TIMEOUT=3
IP2ASN_API_URL=https://ip2asn.ipinfo.app
IP2ASN_TIMEOUT=3
SFS_API_URL=https://sfs.ipinfo.app
SFS_TIMEOUT=5

# ============================================================================
# DNS MANAGEMENT (Optional)
# ============================================================================
# Leave empty unless using auto DNS management
CF_API_TOKEN=
CF_ZONE_ID=
CPANEL_HOST=
CPANEL_USERNAME=
CPANEL_TOKEN=

# ============================================================================
# FACEBOOK (Optional)
# ============================================================================
FB_APP_ID=115190258555800

# ============================================================================
# REDIS (Optional - usually not available on shared hosting)
# ============================================================================
REDIS_HOST=127.0.0.1
REDIS_PORT=6379
REDIS_PASSWORD=
REDIS_SOCKET=
SESSION_DRIVER=file

# ============================================================================
# PERFORMANCE
# ============================================================================
CACHE_DRIVER=apcu
HEALTH_CHECK_ENABLED=true

# ============================================================================
# POST-INSTALL TODO
# ============================================================================
# 1. Set file permissions: chmod 600 .env
# 2. Delete install.php and install-cli.php
# 3. Setup cron jobs (see QUICKSTART_CPANEL.md)
# 4. Enable SSL certificate (Let's Encrypt)
# 5. Force HTTPS in public/.htaccess
# 6. Test: https://go.mixue.one/health.php
# 7. Access admin: https://go.mixue.one/admin/
# ============================================================================
