;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; TeamPass PHP Configuration
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

[PHP]
; Resource Limits
max_execution_time = 120
max_input_time = 60
memory_limit = 512M

; Error handling
error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT
display_errors = Off
display_startup_errors = Off
log_errors = On
error_log = /var/log/php_errors.log

; Data Handling
post_max_size = 100M
upload_max_filesize = 100M
max_file_uploads = 20
max_input_vars = 5000

; Security
expose_php = Off
allow_url_fopen = On
allow_url_include = Off
; Note: exec is intentionally NOT disabled. TeamPass requires it for its cron
; scheduler (GO\Scheduler), crontab setup during upgrade, and background-task
; triggering. It is only ever called with escapeshellarg'd internal paths,
; never with user input. The remaining shell functions stay disabled.
disable_functions = passthru,shell_exec,system,popen,parse_ini_file,show_source

; Session
session.save_handler = files
session.save_path = "/tmp"
session.use_strict_mode = 1
session.use_cookies = 1
session.use_only_cookies = 1
session.name = PHPSESSID
session.cookie_httponly = 1
session.cookie_secure = 0
session.cookie_samesite = Strict
session.gc_probability = 1
session.gc_divisor = 100
session.gc_maxlifetime = 3600

; Timezone
date.timezone = UTC

[opcache]
; OPcache configuration for production
opcache.enable = 1
opcache.enable_cli = 0
opcache.memory_consumption = 128
opcache.interned_strings_buffer = 8
opcache.max_accelerated_files = 10000
opcache.max_wasted_percentage = 5
opcache.use_cwd = 1
opcache.validate_timestamps = 1
opcache.revalidate_freq = 2
opcache.fast_shutdown = 1