<?php

declare(strict_types=1);

return [
    'enabled' => true,
    'storage_path' => 'data/registration-requests.json',
    'ldif_export_dir' => 'data/registration-ldif',
    'approver_groups' => ['administrators', 'appadmin'],
    'approver_usernames' => [],
    'password_crypto_key' => getenv('REGISTRATION_PASSWORD_KEY') ?: '',
    'ldap' => [
        'enabled' => true,
        'host' => getenv('LDAP_HOST') ?: '127.0.0.1',
        'port' => (int) (getenv('LDAP_PORT') ?: 389),
        'bind_dn' => getenv('LDAP_BIND_DN') ?: '',
        'bind_password' => getenv('LDAP_BIND_PASSWORD') ?: '',
        'use_starttls' => filter_var(getenv('LDAP_USE_STARTTLS') ?: 'false', FILTER_VALIDATE_BOOL),
        'users_dn' => 'cn=users,dc=nas,dc=kusche,dc=berlin',
        'default_groups' => [
            'cn=generaluser,cn=groups,dc=nas,dc=kusche,dc=berlin',
        ],
        'group_assignment_mode' => getenv('LDAP_GROUP_ASSIGNMENT_MODE') ?: 'group_memberuid',
        'group_member_attribute' => getenv('LDAP_GROUP_MEMBER_ATTRIBUTE') ?: 'memberUid',
        'default_login_shell' => '/bin/sh',
        'home_directory_prefix' => '/home',
        'shadow_expire' => 1,
        'active_shadow_expire' => -1,
        'shadow_flag' => 0,
        'shadow_inactive' => 0,
        'shadow_max' => 99999,
        'shadow_min' => 0,
        'shadow_warning' => 7,
    ],
];