<?php
/**
 * Nexora security defaults.
 * Keep secrets in environment variables or includes/config/nexora.local.php.
 */
return array(
    'csrf_enabled' => true,
    'security_headers' => true,
    'trust_proxy_headers' => false,
    'trusted_proxies' => array(),
    'password_reset_ttl_minutes' => 20,
    'password_reset_max_requests_per_hour' => 5,
    'cron_allow_query_key' => false,
    'platform_enabled' => false,
    'platform_database' => 'nexora_platform',
);
