# Database Connection - Single Source of Truth Bootstrap
# System Settings manages editable app behavior. Integration credentials and endpoints live here.
DB_HOST=localhost
DB_PORT=3306
DB_DATABASE=milieuso_users
DB_USERNAME=milieuso
DB_PASSWORD=@@MILI1q2w3e
GEMINI_API_KEY="AQ.Ab8RN6I2JDlYfBvQeoKIDBjChE4-bAvRlzNNq2D--cp7AD2oHw"
# Optional: override the Gemini model (defaults to LeadIntelligenceService::DEFAULT_MODEL = gemini-3.1-flash-lite when unset/empty)
# GEMINI_MODEL=gemini-3.1-flash-lite

GOOGLE_MAPS_API_KEY=AIzaSyDS_Ye5h6vZwEz4DEOLJM3sYkxxmsKV9Ms
GOOGLE_MAPS_MAP_ID=c2339c69b7747fd84ebd3361

TURNSTILE_SITE_KEY=0x4AAAAAACGsMQ7JCUVDJl7y
TURNSTILE_SECRET_KEY=0x4AAAAAACGsMfrdODwIgh2Z2ZwdHZmnrfE
TURNSTILE_CLIENT_SCRIPT=https://challenges.cloudflare.com/turnstile/v0/api.js

MICROSOFT_CLIENT_ID=ef388a6b-c420-4194-aa41-75812f474c31
MICROSOFT_TENANT_ID=58d55c19-9c68-471a-8af2-cd72c5c8c33a
MICROSOFT_CLIENT_SECRET=USf8Q~Sq8S4DyHRKHBZtqACmejC6KJSZAsQpjaE1
MICROSOFT_GRAPH_SCOPE=https://graph.microsoft.com/.default
MICROSOFT_GRAPH_BASE=https://graph.microsoft.com/v1.0
SHAREPOINT_HOSTNAME=milieusolar.sharepoint.com
SHAREPOINT_SITE_PATH=/sites/MilieuSolar
SHAREPOINT_LIBRARY_NAME=MILIEU
SHAREPOINT_ALLOWED_ROOT_PATHS=/J-TECHNOLOGY/TESTING,/L-BRANDING/TESTING

SYNOLOGY_BASE_URL=https://milieu.synology.me:7001
SYNOLOGY_SESSION=FileStation
SYNOLOGY_ACCOUNT=milieutest
SYNOLOGY_PASSWORD=Milieutest123.
SYNOLOGY_ALLOWED_ROOT_PATHS=/MILIEU/J-TECHNOLOGY/TESTING,/MILIEU/L-BRANDING/TESTING
SYNOLOGY_VERIFY_SSL=true

# --- Cloud: SharePoint (spec QUICKACCESS 1a) ---
SHAREPOINT_ENABLED=true
SHAREPOINT_UPLOAD_ALLOWED_EXTENSIONS=jpg,jpeg,png,gif,webp,pdf,mp4,zip,csv,txt,doc,docx,xls,xlsx

# --- Cloud: Synology File Station (spec QUICKACCESS 1b) ---
# Explicit spec SSOT keys; the service falls back to the legacy SYNOLOGY_* keys above.
SYNOLOGY_FILESTATION_ENABLED=true
SYNOLOGY_FILESTATION_BASE_URL=https://milieu.synology.me:7001
SYNOLOGY_FILESTATION_SESSION=FileStation
SYNOLOGY_FILESTATION_ALLOWED_ROOT_PATHS=/MILIEU/J-TECHNOLOGY/TESTING,/MILIEU/L-BRANDING/TESTING

# --- Cloud: Synology Photos Shared Space (spec QUICKACCESS 1c) ---
# Live-confirmed: this account authenticates ONLY with session=FileStation on :7001.
# Fotos therefore rides the SAME FileStation connection/SID as File Station. The spec's
# :9443/FotoTeam login is permission-blocked (402) for this account; base_url/session are
# configurable here if that is later unblocked.
SYNOLOGY_PHOTOS_ENABLED=true
SYNOLOGY_PHOTOS_BASE_URL=https://milieu.synology.me:7001
SYNOLOGY_PHOTOS_SESSION=FileStation
SYNOLOGY_PHOTOS_API_ALIAS=/photo
SYNOLOGY_PHOTOS_API_NAMESPACE=SYNO.FotoTeam
SYNOLOGY_PHOTOS_DISPLAY_ROOT=Shared Space > All Photos > TESTING
SYNOLOGY_PHOTOS_ALLOWED_ROOT_PATHS=/photo/TESTING
