<?php

return [

    /*
    |--------------------------------------------------------------------------
    | Session Security
    |--------------------------------------------------------------------------
    |
    | These options control session security features including IP checking
    | for session hijacking prevention and session regeneration intervals.
    |
    */

    'check_session_ip' => env('SECURITY_CHECK_SESSION_IP', false),

    'session_regenerate_minutes' => env('SECURITY_SESSION_REGENERATE_MINUTES', 30),

    /*
    |--------------------------------------------------------------------------
    | Two-Factor Authentication
    |--------------------------------------------------------------------------
    |
    | Configure two-factor authentication settings including the issuer name
    | that appears in authenticator apps.
    |
    */

    'two_factor' => [
        'issuer' => env('TWO_FACTOR_ISSUER', env('APP_NAME', 'Laravel')),
        'digits' => 6,
        'window' => 1, // Allow codes from 1 period before/after current
    ],

    /*
    |--------------------------------------------------------------------------
    | File Encryption
    |--------------------------------------------------------------------------
    |
    | Configure file encryption settings for sensitive file storage.
    |
    */

    'file_encryption' => [
        'cipher' => 'AES-256-CBC',
        'enabled' => env('FILE_ENCRYPTION_ENABLED', false),
    ],

    /*
    |--------------------------------------------------------------------------
    | Security Headers
    |--------------------------------------------------------------------------
    |
    | Configure security headers. These are applied by the SecurityHeaders
    | middleware to all responses.
    |
    */

    'headers' => [
        'hsts_enabled' => env('SECURITY_HSTS_ENABLED', true),
        'hsts_max_age' => env('SECURITY_HSTS_MAX_AGE', 31536000),
        'frame_options' => env('SECURITY_FRAME_OPTIONS', 'SAMEORIGIN'),
    ],

];