<?php

return [
    /*
    |--------------------------------------------------------------------------
    | Compliance Frameworks
    |--------------------------------------------------------------------------
    |
    | Define the compliance frameworks your organization supports.
    |
    */
    'frameworks' => [
        'gdpr' => [
            'name' => 'GDPR',
            'description' => 'General Data Protection Regulation',
            'enabled' => env('COMPLIANCE_GDPR_ENABLED', true),
            'data_retention_days' => env('GDPR_DATA_RETENTION_DAYS', 365),
        ],
        'soc2' => [
            'name' => 'SOC 2',
            'description' => 'Service Organization Control 2',
            'enabled' => env('COMPLIANCE_SOC2_ENABLED', true),
        ],
        'hipaa' => [
            'name' => 'HIPAA',
            'description' => 'Health Insurance Portability and Accountability Act',
            'enabled' => env('COMPLIANCE_HIPAA_ENABLED', false),
            'security_officer' => env('HIPAA_SECURITY_OFFICER'),
        ],
        'pci' => [
            'name' => 'PCI DSS',
            'description' => 'Payment Card Industry Data Security Standard',
            'enabled' => env('COMPLIANCE_PCI_ENABLED', false),
        ],
    ],

    /*
    |--------------------------------------------------------------------------
    | Compliance Checks
    |--------------------------------------------------------------------------
    |
    | Configure automated compliance checks and their schedules.
    |
    */
    'checks' => [
        'enabled' => env('COMPLIANCE_CHECKS_ENABLED', true),
        'schedule' => env('COMPLIANCE_CHECK_SCHEDULE', 'daily'), // daily, weekly, hourly
        'notify_on_failure' => env('COMPLIANCE_NOTIFY_FAILURES', true),

        // Individual check settings
        'password_policy' => [
            'min_length' => env('PASSWORD_MIN_LENGTH', 12),
            'require_uppercase' => true,
            'require_lowercase' => true,
            'require_numbers' => true,
            'require_symbols' => true,
            'max_age_days' => env('PASSWORD_MAX_AGE_DAYS', 90),
        ],

        'mfa_enforcement' => [
            'require_for_admins' => true,
            'require_for_clients' => env('MFA_REQUIRED_FOR_CLIENTS', false),
        ],

        'session_timeout' => [
            'max_lifetime_minutes' => env('SESSION_MAX_LIFETIME', 120),
            'idle_timeout_minutes' => env('SESSION_IDLE_TIMEOUT', 30),
        ],

        'inactive_accounts' => [
            'warning_days' => env('INACTIVE_ACCOUNT_WARNING_DAYS', 60),
            'lockout_days' => env('INACTIVE_ACCOUNT_LOCKOUT_DAYS', 90),
        ],

        'data_retention' => [
            'audit_log_days' => env('AUDIT_LOG_RETENTION_DAYS', 365),
            'soft_delete_days' => env('SOFT_DELETE_RETENTION_DAYS', 90),
            'auto_purge' => env('DATA_AUTO_PURGE', false),
        ],
    ],

    /*
    |--------------------------------------------------------------------------
    | Compliance Reports
    |--------------------------------------------------------------------------
    |
    | Configure report generation settings.
    |
    */
    'reports' => [
        'storage_path' => env('COMPLIANCE_REPORTS_PATH', 'compliance-reports'),
        'retention_days' => env('COMPLIANCE_REPORTS_RETENTION', 365),
        'formats' => ['pdf', 'html', 'json', 'csv'],
        'default_format' => 'pdf',
        'include_evidence' => true,
    ],

    /*
    |--------------------------------------------------------------------------
    | Evidence Collection
    |--------------------------------------------------------------------------
    |
    | Configure evidence collection and storage.
    |
    */
    'evidence' => [
        'enabled' => env('COMPLIANCE_EVIDENCE_ENABLED', true),
        'storage_path' => env('COMPLIANCE_EVIDENCE_PATH', 'compliance-evidence'),
        'auto_collect' => true,
        'types' => [
            'screenshot',
            'log_export',
            'config_snapshot',
            'policy_document',
            'attestation',
        ],
    ],

    /*
    |--------------------------------------------------------------------------
    | Findings Management
    |--------------------------------------------------------------------------
    |
    | Configure how compliance findings are handled.
    |
    */
    'findings' => [
        'severity_levels' => ['critical', 'high', 'medium', 'low', 'info'],
        'statuses' => ['open', 'in_progress', 'resolved', 'accepted', 'deferred'],
        'auto_assign' => env('COMPLIANCE_AUTO_ASSIGN', false),
        'default_assignee' => env('COMPLIANCE_DEFAULT_ASSIGNEE'),
        'sla_days' => [
            'critical' => 1,
            'high' => 7,
            'medium' => 30,
            'low' => 90,
        ],
    ],

    /*
    |--------------------------------------------------------------------------
    | Notifications
    |--------------------------------------------------------------------------
    |
    | Configure compliance-related notifications.
    |
    */
    'notifications' => [
        'check_failure' => [
            'enabled' => true,
            'channels' => ['mail', 'database'],
            'recipients' => [], // Add admin emails or leave empty to use default admins
        ],
        'finding_created' => [
            'enabled' => true,
            'channels' => ['mail', 'database'],
        ],
        'report_generated' => [
            'enabled' => true,
            'channels' => ['database'],
        ],
    ],

    /*
    |--------------------------------------------------------------------------
    | Dashboard Settings
    |--------------------------------------------------------------------------
    |
    | Configure the compliance dashboard display.
    |
    */
    'dashboard' => [
        'score_thresholds' => [
            'good' => 90,
            'warning' => 70,
            'critical' => 0,
        ],
        'show_trends' => true,
        'trend_days' => 30,
        'cache_ttl' => 300, // 5 minutes
    ],
];