<?php
/**
 * TELSPAY v2026.4 private configuration template.
 *
 * 1. Replace every empty/placeholder value.
 * 2. Save as: /home/CPANEL_USER/secure_keys/telspay_secure.php
 * 3. Set file permission 0600.
 * 4. Never place the completed file inside public_html or the application ZIP.
 */

// Database
define('TELSPAY_DB_HOST', 'localhost');
define('TELSPAY_DB_NAME', 'YOUR_DATABASE_NAME');
define('TELSPAY_DB_USER', 'YOUR_DATABASE_USER');
define('TELSPAY_DB_PASS', 'YOUR_DATABASE_PASSWORD');
define('TELSPAY_APP_URL', 'https://invest.telspay.com');

// Flutterwave: use the current production keys after rotating historical keys.
define('FLW_SECRET_KEY', '');
define('FLW_WEBHOOK_HASH', '');
define('TELSPAY_REG_FLW_SECRET_KEY', '');
define('TELSPAY_REG_FLW_WEBHOOK_HASH', '');

// Generate a different random value of at least 32 bytes for every item.
// Example shell command: openssl rand -hex 32
define('TELSPAY_TRANSFER_HMAC_KEY', '');
define('TELSPAY_PAYMENT_HMAC_KEY', '');
define('TELSPAY_RECEIPT_HMAC_KEY', '');
define('TELSPAY_LOAN_CONSENT_HMAC_KEY', '');
define('TELSPAY_DEVICE_HASH_SECRET', '');
define('TELSPAY_DATA_ENCRYPTION_KEY', '');
define('TELSPAY_REG_OTP_PEPPER', '');
define('TELSPAY_REG_AUDIT_PEPPER', '');
define('TELSPAY_REG_DATA_KEY', '');
define('TELSPAY_PIN_CHANGE_OTP_PEPPER', '');

// Private storage paths must exist outside public_html and be writable by PHP.
define('TELSPAY_REG_KYC_STORAGE_PATH', '/home/CPANEL_USER/telspay_private/kyc');
define('TELSPAY_BANK_RECEIPT_STORAGE_PATH', '/home/CPANEL_USER/telspay_private/bank-receipts');
define('TELSPAY_TESSERACT_PATH', '/usr/bin/tesseract');
define('TELSPAY_RECEIPT_OCR_MIN_CONFIDENCE', '45');

// Required VPN/proxy/hosting-network risk provider. The URL must contain %s,
// which TELSPAY replaces with the URL-encoded client IP address.
define('TELSPAY_IP_LOOKUP_URL', 'https://YOUR-APPROVED-IP-RISK-PROVIDER/%s');
define('TELSPAY_IP_LOOKUP_REQUIRED', '1');
define('TELSPAY_IP_LOOKUP_BLOCK_ON_UNAVAILABLE', '0');

// Email-only registration verification and notifications.
define('TELSPAY_REG_SMTP_HOST', '');
define('TELSPAY_REG_SMTP_USERNAME', '');
define('TELSPAY_REG_SMTP_PASSWORD', '');
define('TELSPAY_REG_SMTP_PORT', '465');
define('TELSPAY_REG_SMTP_ENCRYPTION', 'ssl');
define('TELSPAY_REG_SMTP_FROM_EMAIL', '');
define('TELSPAY_REG_SMTP_FROM_NAME', 'NFA Staff SACCO');
define('TELSPAY_REG_ADMIN_NOTIFY_EMAIL', '');
define('TELSPAY_ADMIN_NOTIFY_EMAIL', '');

// Africa's Talking is used only for guarantor/transaction notifications.
define('AT_USERNAME', '');
define('AT_API_KEY', '');
define('AT_SENDER_ID', '');
define('TELSPAY_REG_AT_USERNAME', '');
define('TELSPAY_REG_AT_API_KEY', '');
define('TELSPAY_REG_AT_SENDER_ID', '');
define('TELSPAY_REG_ADMIN_NOTIFY_PHONE', '');

// Registration policy and deployment settings.
define('TELSPAY_DATA_PROTECTION_POLICY_VERSION', 'UG-DPA-2019-v2026.4');
define('TELSPAY_REG_BASE_URL', 'https://invest.telspay.com');
define('TELSPAY_REG_REQUIRE_HTTPS', '1');
define('TELSPAY_REG_TRUST_PROXY_HEADERS', '0');
define('TELSPAY_REG_SUBSCRIPTION_VALID_DAYS', '365');
define('TELSPAY_REG_REQUIRE_ID_IMAGES', '1');
define('TELSPAY_REG_REQUIRE_CAMERA_REGISTRATION', '1');
define('TELSPAY_PIN_UPGRADE_REQUIRE_GPS', '1');
