Initial commit - WASL Digital Wallet

Backend/docker/php/dev.ini

@@ -0,0 +1,31 @@
+; ─────────────────────────────────────────────────────────────
+; WASL — Development PHP settings
+; ─────────────────────────────────────────────────────────────
+
+display_errors = On
+display_startup_errors = On
+log_errors = On
+error_reporting = E_ALL
+
+memory_limit = 512M
+max_execution_time = 120
+upload_max_filesize = 50M
+post_max_size = 50M
+
+; OPcache (with validation for dev hot-reload)
+opcache.enable = 1
+opcache.enable_cli = 1
+opcache.memory_consumption = 128
+opcache.max_accelerated_files = 10000
+opcache.validate_timestamps = 1
+opcache.revalidate_freq = 0
+
+date.timezone = Asia/Damascus
+
+; Xdebug
+[xdebug]
+xdebug.mode = debug,develop,coverage
+xdebug.start_with_request = trigger
+xdebug.client_host = host.docker.internal
+xdebug.client_port = 9003
+xdebug.log = /dev/stderr

Backend/docker/php/production.ini

@@ -0,0 +1,55 @@
+; ─────────────────────────────────────────────────────────────
+; WASL — Production PHP settings
+; Conservative limits, security-focused, opcache optimized
+; ─────────────────────────────────────────────────────────────
+
+; Errors: NEVER display in production (financial system)
+display_errors = Off
+display_startup_errors = Off
+log_errors = On
+error_log = /dev/stderr
+error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT
+
+; Performance
+memory_limit = 512M
+max_execution_time = 30
+max_input_time = 60
+max_input_vars = 3000
+post_max_size = 20M
+upload_max_filesize = 10M
+
+; OPcache — critical for production performance
+opcache.enable = 1
+opcache.enable_cli = 1
+opcache.memory_consumption = 256
+opcache.max_accelerated_files = 20000
+opcache.validate_timestamps = 0
+opcache.revalidate_freq = 2
+opcache.interned_strings_buffer = 32
+opcache.fast_shutdown = 1
+opcache.jit = tracing
+opcache.jit_buffer_size = 64M
+
+; Realpath cache (improves file inclusion performance)
+realpath_cache_size = 4096K
+realpath_cache_ttl = 600
+
+; Session hardening
+session.cookie_httponly = 1
+session.cookie_secure = 1
+session.cookie_samesite = "Strict"
+session.use_strict_mode = 1
+session.gc_maxlifetime = 1200
+
+; Exposure
+expose_php = Off
+
+; Date
+date.timezone = Asia/Damascus
+
+; Swoole runtime config
+swoole.enable_library = On
+swoole.enable_preemptive_scheduler = On
+
+; Disable functions that could be abused
+disable_functions = exec,passthru,shell_exec,system,proc_open,popen,curl_multi_exec,parse_ini_file,show_source