; ── php-prod.ini — PHP production configuration ──────────────

; Error handling (never display errors in production)
display_errors          = Off
display_startup_errors  = Off
log_errors              = On
error_reporting         = E_ALL & ~E_DEPRECATED & ~E_STRICT
error_log               = /var/log/php/error.log

; Performance
memory_limit            = 256M
max_execution_time      = 60
max_input_time          = 60
default_socket_timeout  = 60

; File uploads
file_uploads            = On
upload_max_filesize     = 20M
max_file_uploads        = 10
post_max_size           = 25M

; Security
expose_php              = Off
allow_url_fopen         = Off
allow_url_include       = Off
disable_functions       = exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source

; Session
session.cookie_httponly = 1
session.cookie_secure   = 1
session.cookie_samesite = Lax
session.use_strict_mode = 1
session.gc_maxlifetime  = 7200

; Date
date.timezone           = UTC

; Realpath cache (performance boost for production)
realpath_cache_size     = 4096K
realpath_cache_ttl      = 600