<?php
/**
 * Default Options: Hardening Module
 *
 * Contains default settings for security headers, recommendations, API privacy, and self-defense.
 *
 * @package UltimateSecurity
 * @since 2.0.0
 */

return [
    'salt_change' => [
        'enable_schedules' => '0',
        'schedule_type' => 'daily',
        'schedule_day' => 'Saturday',
        'schedule_time' => '08:00',
        'schedule_reminder' => '0',
        'schedule_notification' => '0',
    ],

    'api_privacy' => [
        'enable' => '0',
        'user_agent_behaviour' => 'none',
        'strip_wp_version' => '0',
        'strip_plugins' => '0',
        'strip_themes' => '0',
        'strip_core_data' => '0',
        'strip_core_headers' => '0',
        'strip_user_logins' => '0',
        'disable_https' => '0',
        'modification_count' => 0,
    ],

    'recommendations' => [
        'disable_anyone_can_register' => '0',
        'disable_file_editors' => '0',
        'prevent_code_execution_uploads_folder' => '0',
        'prevent_login_feedback' => '0',
        'disable_directory_browsing' => '0',
        'disable_user_enumeration' => '0',
        'unset_x_powered_by_header' => '0',
        'block_common_usernames' => '0',
        'change_display_name' => '0',
        'hide_front_admin_bar' => '0',
        'hide_back_admin_bar' => '0',
        'disable_XMLRPC' => '0',
        'disable_REST' => '0',
        'disable_wp_core_auto_updates' => '0',
        'disable_plugin_auto_updates' => '0',
        'disable_theme_auto_updates' => '0',
        'remove_rsd_link' => '0',
        'hide_wordpress_version' => '0',
        'remove_wlw_manifest_link' => '0',
        'remove_shortlink' => '0',
        'enable_shortcode_in_wp_widgets' => '0',
        'hide_css_file_version' => '0',
        'hide_js_file_version' => '0',
        'disable_dashicons_in_frontend' => '0',
        'disable_embeds' => '0',
        'strict_content_security_policy' => '0',
        'disable_rss_feed' => '0',
        'remove_rss_feed_links' => '0',
        'add_feature_image_to_rss_feed' => '0',
    ],

    // REMOVED: security_headers - Server-level feature (see docs/SERVER_LEVEL_FEATURES.md)
    // Configure security headers at nginx/Apache level for better performance.
    // Kept as deprecated for backward compatibility with existing settings.
    'security_headers' => [
        '_deprecated' => true,
        '_deprecated_message' => 'Security headers should be configured at server level (nginx/Apache). See docs/SERVER_LEVEL_FEATURES.md',
        'enable' => '0',
    ],

    'self_defense' => [
        'enabled' => '0',
        'require_reauth' => '0',
        'file_integrity_check' => '0',
        'alert_on_deactivation' => '0',
    ],

    'comments' => [
        'disable_comments' => 'enable_comments',
        'remove_url_field' => '0',
        'remove_url_from_comment' => '0',
        'remove_url_from_author_name' => '0',
        'disable_comments_post_types_post' => '0',
        'disable_comments_post_types_page' => '0',
        'disable_comments_post_types_attachment' => '0',
        'disable_comments_post_types_product' => '0',
    ],
];
