<?php
/*
 * net2ftp-PUQ config — used ONLY by _puq_sso.php and _puq_launch.php for
 * the SSO handshake. Does NOT touch net2ftp's own settings.inc.php.
 *
 * Placeholders {{HMAC_SECRET}} and {{ALLOWED_IPS}} are substituted at
 * install time by HestiaCPWebDriver::installNet2Ftp().
 */
return [
    'hmac_secret' => '{{HMAC_SECRET}}',  // 64-char hex
    'allowed_ips' => json_decode('{{ALLOWED_IPS}}', true) ?: [],  // JSON array of WHMCS outbound IPs
    'token_dir'   => __DIR__ . '/private/sso_sessions',
];
