config.example.php

<?php
// Copy this file to config.php and fill in your values.
// config.php is gitignored and must NOT be committed (it holds secrets).
return [
    // Cloudflare Turnstile keys (https://dash.cloudflare.com -> Turnstile).
    // The sitekey is public; the secret must stay private.
    'turnstile_secret'  => 'YOUR_TURNSTILE_SECRET',
    'turnstile_sitekey' => 'YOUR_TURNSTILE_SITEKEY',

    // monero-wallet-rpc credentials (--rpc-login user:pass). Leave blank if the
    // wallet runs with --disable-rpc-login bound to 127.0.0.1.
    'rpc_user' => '',
    'rpc_pass' => '',

    // Public link to your source, shown in the footer to satisfy AGPL section 13.
    'source_url' => 'https://github.com/youruser/cypherfaucet',

    // Per-net "return unused coins" addresses, shown in the donate card and the
    // out-of-coins message. Leave blank to hide the card.
    'donate_stagenet' => '',
    'donate_testnet'  => '',

    // Optional: a mainnet XMR address enables a low-key "support the faucet"
    // entry in the FAQ. Leave blank to keep donations off.
    'mainnet_donate' => '',
];