DB_HOST=localhost
DB_USER=root
DB_PASS=
DB_NAME=necta_rms
DB_CHARSET=utf8mb4

APP_NAME="Academic Performance Management System (APMS)"
APP_VERSION=1.0.0
APP_URL=http://localhost/SCHOOL

SESSION_TIMEOUT=3600

SMS_PROVIDER=beem
SMS_API_KEY=df126a9931a54934
SMS_API_SECRET=ZmRjODVjN2RkMjQ5NTZiZmUwYzMwNzA3YmYxNzEwY2FhNzgzNDExNGFhNDViMDEzNDk0MTZhOWU2NTdhZTU1MA==
SMS_API_URL=https://apisms.beem.africa/v1/send
SMS_USERNAME=your_username
SMS_SENDER_ID=APMS

# ── Email (SMTP) — Password Reset / Notifications ──
# Leave SMTP_HOST empty to use PHP mail() instead.
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_ENCRYPT=tls
SMTP_USER=buluba.sedeka.web@gmail.com
SMTP_PASS=zcnffjsilwlhhusb
SMTP_FROM=buluba.sedeka.web@gmail.com
SMTP_FROM_NAME="Academic Performance Management System (APMS)"

PDF_SCHOOL_LOGO=assets/img/school_logo.png

# ── Payment Gateway (Payment Integration) ──
# Default gateway is "mpesa" (Vodacom — M-Pesa). System runs LIVE only.
# Real gateways: mpesa | airtel_money. Keys for each network are configured
# per school in the Payment Control Panel and stored in school_gateways;
# values here serve only as fallback. Never commit real secrets to VCS.
PAYMENT_GATEWAY=mock
PAYMENT_MODE=live
PAYMENT_CURRENCY=TZS
# Free trial given to a school the FIRST time it registers (in days).
# During the trial every service is open and nothing is charged. After the trial
# only services explicitly marked PAY in the Payment Control Panel are charged;
# every other service stays free.
PAYMENT_TRIAL_DAYS=7
# Full URL that the gateway can reach to deliver server-to-server callbacks
# e.g. https://your-domain.com/payment_webhook.php (optional — polling is the
# primary confirmation path for Vodacom and Airtel)
PAYMENT_WEBHOOK_URL=
# Auto-generated secret used to sign callbacks (never share it)


# ── Vodacom — M-Pesa (Open API, Tanzania) ──
# Fill these when offering mpesa. Get the pair from the M-Pesa Open API portal
# (developer portal → credentials) — they grant sandbox access immediately.
# For LIVE payments set VODACOM_ENV=live AND VODACOM_SHORTCODE to the Lipa na
# M-Pesa shortcode registered for your school.
VODACOM_API_KEY=6zbaaaOSmEmR4tKLDaWOBNxPkWtW51AS
VODACOM_PUBLIC_KEY=MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArv9yxA69XQKBo24BaF/D+fvlqmGdYjqLQ5WtNBb5tquqGvAvG3WMFETVUSow/LizQalxj2ElMVrUmzu5mGGkxK08bWEXF7a1DEvtVJs6nppIlFJc2SnrU14AOrIrB28ogm58JjAl5BOQawOXD5dfSk7MaAA82pVHoIqEu0FxA8BOKU+RGTihRU+ptw1j4bsAJYiPbSX6i71gfPvwHPYamM0bfI4CmlsUUR3KvCG24rB6FNPcRBhM3jDuv8ae2kC33w9hEq8qNB55uw51vK7hyXoAa+U7IqP1y6nBdlN25gkxEA8yrsl1678cspeXr+3ciRyqoRgj9RD/ONbJhhxFvt1cLBh+qwK2eqISfBb06eRnNeC71oBokDm3zyCnkOtMDGl7IvnMfZfEPFCfg5QgJVk1msPpRvQxmEsrX9MQRyFVzgy2CWNIb7c+jPapyrNwoUbANlN8adU1m6yOuoX7F49x+OjiG2se0EJ6nafeKUXw/+hiJZvELUYgzKUtMAZVTNZfT8jjb58j8GVtuS+6TM2AutbejaCV84ZK58E2CRJqhmjQibEUO6KPdD7oTlEkFy52Y1uOOBXgYpqMzufNPmfdqqqSM4dU70PO8ogyKGiLAIxCetMjjm6FCMEA3Kc8K0Ig7/XtFm9By6VxTJK1Mg36TlHaZKP6VzVLXMtesJECAwEAAQ==
VODACOM_SHORTCODE=000000
VODACOM_ENV=sandbox
VODACOM_CURRENCY=TZS

# ── Airtel Money (Open API, Tanzania) ──
# Fill these when offering airtel_money. Credentials come from the Airtel Money
# Open API portal. For LIVE set AIRTEL_ENV=live.
AIRTEL_CLIENT_ID=
AIRTEL_CLIENT_SECRET=
AIRTEL_ENV=sandbox
AIRTEL_CURRENCY=TZS

# ── M-Pesa legacy (Kenya Daraja) — no longer used ──
# Kept only as a fallback source for VODACOM_SHORTCODE/VODACOM_ENV:
# MPESA_SHORTCODE and MPESA_ENV. The old Daraja consumer key/secret/passkey
# values are removed — the API they belonged to is not used anymore.
# MPESA_SHORTCODE=  # Set to your Vodacom Lipa na M-Pesa shortcode
MPESA_SHORTCODE=

ENCRYPTION_KEY=70f313a71bfde88fc1eaabe7e73801ee20ce69185a2423f73dfcbe7d820b1a1d
PAYMENT_WEBHOOK_SECRET=26c8d411fc638fc8883c6e88c5f2ad10a487569b92b0e636
