#===============================================================================
# APPLICATION
#===============================================================================

APP_NAME="Scope Forged"
APP_ENV=production
APP_KEY=base64:z12SkeeVF7nzXZns8Zx7WjvkUk+ZHrpsHuCg7soIDHo=
APP_DEBUG=false
APP_URL=https://scopeforged.com

# Localization
APP_LOCALE=en
APP_FALLBACK_LOCALE=en
APP_FAKER_LOCALE=en_US

# Maintenance mode driver (file or database)
APP_MAINTENANCE_DRIVER=file

#===============================================================================
# DOMAIN CONFIGURATION (Multi-Domain Setup)
#===============================================================================

MARKETING_DOMAIN=scopeforged.com
PORTAL_DOMAIN=portal.scopeforged.com
ADMIN_DOMAIN=admin.scopeforged.com

#===============================================================================
# SECURITY
#===============================================================================

# Bcrypt hashing rounds (12 is recommended, higher = slower but more secure)
BCRYPT_ROUNDS=12

# HTTPS-only cookies in production
SESSION_SECURE_COOKIE=true

#===============================================================================
# LOGGING
#===============================================================================

LOG_CHANNEL=stack
LOG_STACK=daily
LOG_DEPRECATIONS_CHANNEL=null
LOG_LEVEL=debug

#===============================================================================
# DATABASE
#===============================================================================

DB_CONNECTION=mysql
DB_HOST=127.0.0.1
DB_PORT=3306
DB_DATABASE=client_portal
DB_USERNAME=root2
DB_PASSWORD=Avan05132020

#===============================================================================
# SESSION
#===============================================================================

SESSION_DRIVER=database
SESSION_LIFETIME=120
SESSION_ENCRYPT=false
SESSION_PATH=/

# Cookie domain for cross-subdomain session sharing
SESSION_DOMAIN=.scopeforged.com

#===============================================================================
# CACHE & QUEUE
#===============================================================================

CACHE_STORE=database
# CACHE_PREFIX=

QUEUE_CONNECTION=database
FILESYSTEM_DISK=local

#===============================================================================
# REDIS (Optional - for high-performance caching/queues)
#===============================================================================

REDIS_CLIENT=phpredis
REDIS_HOST=127.0.0.1
REDIS_PASSWORD=null
REDIS_PORT=6379

MEMCACHED_HOST=127.0.0.1

#===============================================================================
# BROADCASTING & WEBSOCKETS (Laravel Reverb)
#===============================================================================

BROADCAST_CONNECTION=reverb

# Reverb server configuration
REVERB_APP_ID=client-portal-prod
REVERB_APP_KEY=prod-reverb-key-8cc4257131a13aba
REVERB_APP_SECRET=prod-reverb-secret-45363e627d2c472c209c6fcbbb547b6c
REVERB_HOST=portal.scopeforged.com
REVERB_PORT=443
REVERB_SCHEME=https

# Vite frontend WebSocket config
VITE_REVERB_APP_KEY=prod-reverb-key-8cc4257131a13aba
VITE_REVERB_HOST=portal.scopeforged.com
VITE_REVERB_PORT=443
VITE_REVERB_SCHEME=https

#===============================================================================
# MAIL
#===============================================================================

MAIL_MAILER=resend
RESEND_API_KEY=re_VFprsHjs_KggMdBHBbJ5oB3PJfEGeb3mu
MAIL_FROM_ADDRESS=mail@notifications.scopeforged.com
MAIL_FROM_NAME="${APP_NAME}"
RESEND_WEBHOOK_SECRET="whsec_v0bQL7e1rNPvzyGtt2lTSf7WcpI3q+MK"

# MAIL_MAILER=smtp
# MAIL_SCHEME=null
# MAIL_HOST=smtp.gmail.com
# MAIL_PORT=587
# MAIL_USERNAME=admin@philiprehberger.com
# MAIL_PASSWORD="qzqo ppek wwzg jvqg"
# MAIL_ENCRYPTION=tls
# MAIL_FROM_ADDRESS=admin@scopeforged.com
# MAIL_FROM_NAME="${APP_NAME}"

#===============================================================================
# AWS (S3 Storage, SES Email, etc.)
#===============================================================================

AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_DEFAULT_REGION=us-west-2
AWS_BUCKET=
AWS_USE_PATH_STYLE_ENDPOINT=false

#===============================================================================
# STRIPE PAYMENTS
#===============================================================================

STRIPE_KEY=pk_test_51TRFxPRv48czFoQJUOaUJoKewgyVdZpmZNlXFRvBSQrcDefS1zZcDEBf39zFYBSdSNBMU8HHSRCkzvSlXPOY9S4T00FSnfZUv0
STRIPE_SECRET=sk_test_51TRFxPRv48czFoQJSHPQb2eMzDfo7db7EokeLbMe7NMqBiHm6bCNnNHi4lEnS9yDfUmkMJyL8zKICoBffwiiBwCq00yXVqUqr2
STRIPE_WEBHOOK_SECRET=

#===============================================================================
# ANALYTICS & TRACKING
#===============================================================================

# Master switch - set to false to disable all analytics
ANALYTICS_ENABLED=true

# Google Tag Manager Container ID (e.g., GTM-XXXXXXX)
GTM_CONTAINER_ID=

# Google Analytics 4 Measurement ID (e.g., G-XXXXXXXXXX)
GA4_MEASUREMENT_ID=G-M8W5X502FW

# Meta (Facebook) Pixel ID
META_PIXEL_ID=

# Hotjar Site ID for heatmaps and session recordings
HOTJAR_SITE_ID=

# Debug mode logs analytics events to browser console
ANALYTICS_DEBUG=false

#===============================================================================
# LIVE CHAT
#===============================================================================

# Enable/disable chat widget
CHAT_ENABLED=false

# Provider: crisp, intercom, or tawk
CHAT_PROVIDER=crisp

# Crisp (https://app.crisp.chat/settings/website/)
CRISP_WEBSITE_ID=

# Intercom (https://app.intercom.com/settings)
INTERCOM_APP_ID=

# Tawk.to (https://dashboard.tawk.to/)
TAWK_PROPERTY_ID=
TAWK_WIDGET_ID=

#===============================================================================
# COMPANY & MARKETING
#===============================================================================

COMPANY_NAME="Scope Forged"
COMPANY_TAGLINE="Transparent Software Development"
COMPANY_FOUNDED_YEAR=2024

# Contact page settings
MARKETING_CONTACT_EMAIL=hello@scopeforged.com
MARKETING_CONTACT_PHONE=
MARKETING_RESPONSE_TIME="4 business hours"

# Social media links
SOCIAL_LINKEDIN=
SOCIAL_TWITTER=
SOCIAL_GITHUB=

#===============================================================================
# FEATURE FLAGS
#===============================================================================

# Invoice reminder emails
INVOICE_REMINDERS_ENABLED=true

# Audit logging for compliance
AUDIT_LOGGING_ENABLED=true
AUDIT_LOG_RETENTION_DAYS=365
AUDIT_AUTO_PURGE=false

#===============================================================================
# VITE (Frontend Build)
#===============================================================================

VITE_APP_NAME="${APP_NAME}"

#===============================================================================
# DEPLOYMENT (scripts/deploy.js)
#===============================================================================

# Release-based deployment with rollback capability
SERVER_HOST=54.190.150.0
SERVER_USERNAME=ubuntu
SERVER_PRIVATE_KEY=
SERVER_BASE_PATH=/var/www/client-portal-laravel
RELEASES_TO_KEEP=5


#===============================================================================
# GOOGLE
#===============================================================================
GOOGLE_CLIENT_ID=985724262388-qgaus8ntgocsaqiea82d72s9ons6qoj1.apps.googleusercontent.com
GOOGLE_CLIENT_SECRET=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
GOOGLE_CALENDAR_REDIRECT_URI=https://admin.scopeforged.com/calendar/google/callback


#===============================================================================
# ERROR TRACKING (Sentry)
#===============================================================================

# Sentry DSN for error tracking (leave empty to disable)
SENTRY_LARAVEL_DSN=https://ef73e63a723315f555f003d2b214883b@o4510670194540544.ingest.us.sentry.io/4510892515065856

# Performance tracing sample rate (0.0 to 1.0, default 0.1 = 10%)
# SENTRY_TRACES_SAMPLE_RATE=0.1
SENTRY_RELEASE=20260621182749


#===============================================================================
# PACKAGE REGISTRIES
#===============================================================================

# .NET (NuGet)
NUGET_API_KEY=oy2pruipppec2o4b2qla6c5ltyp5lssenbx4wc5ljosoxa

# Kotlin (Maven Central via Sonatype OSSRH)
OSSRH_USERNAME=uJthYQ
OSSRH_PASSWORD=mDR7QCEaEWyCPgOuLU8yjuNurEF553VBo
GPG_PRIVATE_KEY_FILE=.scripts/gpg-private-key.asc
GPG_PASSPHRASE=liamisgreat

# PHP (Packagist)
PACKAGIST_TOKEN=b7728166325d4312d56685acd1451c74e4a17af7

# Python (PyPI)
PYPI_TOKEN=pypi-AgEIcHlwaS5vcmcCJDAyYzVlMDUzLTQ3NDItNDI4OS05YWJhLWRiM2UwZWFlZDgzMgACKlszLCJhNjk4NDgwZi1iNzI3LTQ3ZjYtOGU1Zi1lNDZmMGM5MDBhYWEiXQAABiAzI4OKjCEdlphPp5hdFi9aRWQAKTHQIwo6SK2NL3Kbbw

# Ruby (RubyGems)
RUBYGEMS_API_KEY=rubygems_eaa3eaefc5618fd0df93d378994556c6cf95854288564fa5

# Rust (crates.io)
CARGO_REGISTRY_TOKEN=cioAZjW0vTFwLpwPGBMRTzcqhlGkeieB3EX

# TypeScript (npm)
NPM_TOKEN=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

# Elixir (hex)
HEX_API_KEY=b90225d54109b18c189ca8cb73c286ec


#===============================================================================
# NEXT.JS REVALIDATION (philiprehberger.com)
#===============================================================================
NEXTJS_URL=https://philiprehberger.com
NEXTJS_REVALIDATE_TOKEN=bBE2WjgaWTJ_Nx3AFukB3mfsQKXPPHnAgJcOaXwTfn4

#===============================================================================
# GITHUB (package release notes enrichment)
#===============================================================================
# Fine-grained PAT with read-only "contents" scope on public repos is sufficient.
GITHUB_TOKEN=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

#===============================================================================
# RECAPTCHA (v3)
#===============================================================================
# Get keys at https://www.google.com/recaptcha/admin (choose v3)
# Leave blank to disable reCAPTCHA (honeypot + rate limiting still active)
RECAPTCHA_SITE_KEY=6LfPzbAsAAAAADy_dOt84aRlV7KJcBZBGZsAMEtv
RECAPTCHA_SECRET_KEY=6LfPzbAsAAAAAG4M0K-edj48HfLE45XeJvmvRbNA

#===============================================================================
# PACKAGES
#===============================================================================
# Feature flag for Plan 264 sync v2 (windowed snapshots + version history).
# When false, legacy download-count-only sync is used.
PACKAGES_SYNC_V2_ENABLED=true
# When true, windowless updateDownloadCounts calls for npm/PyPI are rejected (422).
# Default false during deprecation window; flip after 2026-07-01.
PACKAGES_REJECT_WINDOWLESS_NPM_PYPI=false


PUBLIC_STORAGE_URL=https://scopeforged.com/storage

SANCTUM_STATEFUL_DOMAINS=scopeforged.com,admin.scopeforged.com,portal.scopeforged.com

SWITCHYARD_API_KEY=swy_c804ddit_yHg1XjKqUoIB0jBz9LD6HpJWSrz3eWBACvasg6PY
WEBSITES_DOMAIN=websites.scopeforged.com