<?php
/**
 * mBlog — LOCAL SECRETS (the ONE file you edit).
 *
 * Setup (once):
 *     cp config/local.php.example config/local.php
 *     # generate the admin hash:
 *     php -r 'echo password_hash("your-strong-password", PASSWORD_DEFAULT), "\n";'
 *     # paste it below and set your DB password
 *
 * This file is read by config/app.php AND the legacy web/api/config.php,
 * so it is the single source of truth for credentials. It is never included
 * in a deploy/upgrade bundle, so your values are preserved across redeploys.
 *
 * Keep it above the web root (it already is) and out of any public git repo.
 */
return [
    'db_host' => '127.0.0.1',
    'db_port' => '5432',
    'db_name' => 'mblog',
    'db_user' => 'mblog_app',
    'db_pass' => 'your-real-db-password',

    // php -r 'echo password_hash("your-strong-password", PASSWORD_DEFAULT), "\n";'
    'admin_password_hash' => '$2y$10$REPLACE_WITH_YOUR_GENERATED_HASH',
];