<?php

return [
    'host' => env('LDAP_HOST', '10.100.1.40'),
    'port' => (int) env('LDAP_PORT', 389),
    'ssl_port' => (int) env('LDAP_SSL_PORT', 636),
    'use_ssl' => (bool) env('LDAP_USE_SSL', false),
    'base_dn' => env('LDAP_BASE_DN', 'DC=gisportal,DC=id'),
    'group_container_dn' => env('LDAP_GROUP_CONTAINER_DN', env('LDAP_BASE_DN', 'DC=gisportal,DC=id')),
    'bind_dn' => env('LDAP_BIND_DN', ''),
    'bind_password' => env('LDAP_BIND_PASSWORD', ''),
    'timeout' => (int) env('LDAP_TIMEOUT', 10),
    'tls_verify' => (bool) env('LDAP_TLS_VERIFY', false),
    'protected_users' => [
        'administrator', 'guest', 'krbtgt', 'defaultaccount',
    ],
    'admin_groups' => array_filter(array_map('trim', explode(',', env('LDAP_ADMIN_GROUPS', 'Domain Admins,Administrators,Enterprise Admins')))),
    'protected_groups' => [
        'domain admins', 'enterprise admins', 'schema admins',
        'administrators', 'group policy creator owners',
        'denied rodc password replication group',
        'domain controllers', 'read-only domain controllers',
        'cloneable domain controllers', 'protected users',
        'dnsadmins', 'cert publishers',
    ],
];