<?php
// /plata/config/stripe.php
if (isset($_SERVER['SCRIPT_FILENAME']) && realpath(__FILE__) === realpath($_SERVER['SCRIPT_FILENAME'])) {
    http_response_code(403);exit('Forbidden');
}

/**
 * Mets tes 2 paires de clés (test et live).
 * N'utilise JAMAIS la clé secrète côté client.
 */
return [
    'mode'     => 'live', // 'live' en prod

    'test'     => [
        'secret_key'      => getenv('TEST_STRIPE_SECRET_KEY') ?: '',
        'publishable_key' => getenv('TEST_STRIPE_PUBLISHABLE_KEY') ?: '',
        'webhook_secret'  => getenv('TEST_STRIPE_WEBHOOK_SECRET') ?: '',
    ],
    'live'     => [
        'secret_key'      => getenv('LIVE_STRIPE_SECRET_KEY') ?: '',
        'publishable_key' => getenv('LIVE_STRIPE_PUBLISHABLE_KEY') ?: '',
        'webhook_secret'  => getenv('LIVE_STRIPE_WEBHOOK') ?: '',
    ],

    'currency' => 'eur',
];