<?php

global $config;

$acp_voc_options = array();
foreach (($config['vocations'] ?? array()) as $vid => $voc) {
	if ((int)$vid <= 0) continue;
	$acp_voc_options[(string)$vid] = ($voc['name'] ?? ('Vocation ' . $vid)) . ' (#' . $vid . ')';
}

$acp_town_options = array();
foreach (($config['towns'] ?? array()) as $tid => $tname) {
	$acp_town_options[(string)$tid] = $tname . ' (#' . $tid . ')';
}

return array(

		t_default('acp.sec.Site', 'Site') => array(
			'site_title' => array(
				'label' => t_default('acp.set.site_title.label', 'Site title'),
				'type'  => 'text',
				'help'  => t_default('acp.set.site_title.help', 'Shown in the browser tab, the footer and the social banners.'),
			),
			'site_title_context' => array(
				'label' => t_default('acp.set.site_title_context.label', 'Tagline'),
				'type'  => 'text',
			),
			'site_url' => array(
				'label' => t_default('acp.set.site_url.label', 'Site URL'),
				'type'  => 'text',
				'help'  => t_default('acp.set.site_url.help', 'Used in e-mails and absolute links. No trailing slash.'),
			),
		),

		t_default('acp.sec.Maintenance', 'Maintenance') => array(
			'maintenance' => array(
				'label' => t_default('acp.set.maintenance.label', 'Maintenance mode'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.maintenance.help', 'Visitors see the message below. Admins keep full access.'),
			),
			'maintenance_message' => array(
				'label' => t_default('acp.set.maintenance_message.label', 'Maintenance message'),
				'type'  => 'textarea',
			),
		),

		t_default('acp.sec.Language', 'Language') => array(
			'language' => array(
				'label'   => t_default('acp.set.language.label', 'Default language'),
				'type'    => 'select',
				'options' => array(
					'en'    => 'English',
					'pt_br' => 'Português (Brasil)',
					'es'    => 'Español',
					'pl'    => 'Polski',
					'de'    => 'Deutsch',
				),
				'help'  => t_default('acp.set.language.help', 'Used when the visitor has no saved choice and their browser asks for nothing you offer.'),
			),
			'languages_enabled' => array(
				'label'   => t_default('acp.set.languages_enabled.label', 'Offered languages'),
				'type'    => 'checklist',
				'options' => array(
					'en'    => 'English',
					'pt_br' => 'Português (Brasil)',
					'es'    => 'Español',
					'pl'    => 'Polski',
					'de'    => 'Deutsch',
				),
				'help'  => t_default('acp.set.languages_enabled.help', 'Which flags the switcher shows. The default language is always kept.'),
			),
			'language_selector' => array(
				'label' => t_default('acp.set.language_selector.label', 'Show the language switcher'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.language_selector.help', 'Adds it to every theme, top right. Turn off if your theme places it itself.'),
			),
		),

		t_default('acp.sec.Game server', 'Game server') => array(
			'server_path' => array(
				'label' => t_default('acp.set.server_path.label', 'Server data folder path'),
				'type'  => 'text',
				'help'  => t_default('acp.set.server_path.help', 'Absolute path to the server folder, no trailing slash (e.g. /home/ots or C:/tfs). Used by Server-Info and plugins that read data/monster, items.xml, etc.'),
			),
			'client' => array(
				'label' => t_default('acp.set.client.label', 'Client version'),
				'type'  => 'int',
				'help'  => t_default('acp.set.client.help', 'For example 1098 for client 10.98.'),
			),
			'port' => array(
				'label' => t_default('acp.set.port.label', 'Game server port'),
				'type'  => 'int',
			),
			'freePremium' => array(
				'label' => t_default('acp.set.freePremium.label', 'Free premium'),
				'type'  => 'bool',
			),
			'account_create_premdays' => array(
				'label' => t_default('acp.set.account_create_premdays.label', 'Premium days on account creation'),
				'type'  => 'int',
				'min'   => 0,
				'max'   => 999,
				'help'  => t_default('acp.set.account_create_premdays.help', '0 disables it. New accounts only; existing accounts are not changed.'),
			),
			'website_char' => array(
				'label' => t_default('acp.set.website_char.label', 'Website ban character'),
				'type'  => 'text',
				'help'  => t_default('acp.set.website_char.help', 'An existing character name that represents website bans. Bans from the panel need this.'),
			),
			'htwrite' => array(
				'label' => t_default('acp.set.htwrite.label', 'Friendly URLs'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.htwrite.help', 'Needs mod_rewrite and the shipped .htaccess.'),
			),
			'ping' => array(
				'label' => t_default('acp.set.ping.label', 'In-game ping measurement'),
				'type'  => 'bool',
			),
		),

		t_default('acp.sec.Characters', 'Characters') => array(
			'max_characters' => array(
				'label' => t_default('acp.set.max_characters.label', 'Characters per account'),
				'type'  => 'int',
			),
			'minL' => array(
				'label' => t_default('acp.set.minL.label', 'Minimum name length'),
				'type'  => 'int',
			),
			'maxL' => array(
				'label' => t_default('acp.set.maxL.label', 'Maximum name length'),
				'type'  => 'int',
			),
			'maxW' => array(
				'label' => t_default('acp.set.maxW.label', 'Maximum words in a name'),
				'type'  => 'int',
			),
			'create_guild_level' => array(
				'label' => t_default('acp.set.create_guild_level.label', 'Level required to create a guild'),
				'type'  => 'int',
			),
			'free_sex_change' => array(
				'label' => t_default('acp.set.free_sex_change.label', 'Free sex change'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.free_sex_change.help', 'Let players switch their character sex for free from My Account.'),
			),
			'delete_character_interval' => array(
				'label' => t_default('acp.set.delete_character_interval.label', 'Character deletion delay'),
				'type'  => 'text',
				'help'  => t_default('acp.set.delete_character_interval.help', 'MySQL interval before a deletion request runs, e.g. "3 DAY", "1 HOUR", "2 MONTH".'),
			),
		),

		t_default('acp.sec.Character creation', 'Character creation') => array(
			'available_vocations' => array(
				'label'      => t_default('acp.set.available_vocations.label', 'Vocations players can pick'),
				'type'       => 'checklist',
				'options'    => $acp_voc_options,
				'int_values' => true,
				'help'       => t_default('acp.set.available_vocations.help', 'Shown on the create-character page. Options come from the vocations list below.'),
			),
			'available_towns' => array(
				'label'      => t_default('acp.set.available_towns.label', 'Starting towns players can pick'),
				'type'       => 'checklist',
				'options'    => $acp_town_options,
				'int_values' => true,
				'help'       => t_default('acp.set.available_towns.help', 'Options come from the towns list below.'),
			),
			'towns' => array(
				'label'   => t_default('acp.set.towns.label', 'Towns'),
				'type'    => 'table',
				'row_key' => 'id',
				'value_column' => 'name',
				'columns' => array(
					'id'   => array('label' => t_default('acp.set.towns.col_id', 'ID'), 'type' => 'int'),
					'name' => array('label' => t_default('acp.set.towns.col_name', 'Name'), 'type' => 'text'),
				),
				'help' => t_default('acp.set.towns.help', 'One row per town. In RME press CTRL+T to see ids.'),
			),
			'vocations' => array(
				'label'   => t_default('acp.set.vocations.label', 'Vocations'),
				'type'    => 'table',
				'row_key' => 'id',
				'columns' => array(
					'id'      => array('label' => t_default('acp.set.vocations.col_id', 'ID'), 'type' => 'int'),
					'name'    => array('label' => t_default('acp.set.vocations.col_name', 'Name'), 'type' => 'text'),
					'fromVoc' => array('label' => t_default('acp.set.vocations.col_fromvoc', 'Base vocation ID (blank = base)'), 'type' => 'nullable_int'),
				),
				'help' => t_default('acp.set.vocations.help', 'One row per vocation. fromVoc is the base vocation id this one promotes from, leave blank for a base vocation.'),
			),
			'vocations_gain' => array(
				'label'   => t_default('acp.set.vocations_gain.label', 'Per-level stat gains'),
				'type'    => 'table',
				'row_key' => 'id',
				'columns' => array(
					'id'  => array('label' => t_default('acp.set.vocations_gain.col_id', 'Vocation ID'), 'type' => 'int'),
					'hp'  => array('label' => t_default('acp.set.vocations_gain.col_hp', 'HP per level'), 'type' => 'int'),
					'mp'  => array('label' => t_default('acp.set.vocations_gain.col_mp', 'MP per level'), 'type' => 'int'),
					'cap' => array('label' => t_default('acp.set.vocations_gain.col_cap', 'Capacity per level'), 'type' => 'int'),
				),
				'help' => t_default('acp.set.vocations_gain.help', 'One row per vocation id. Used to compute starting health/mana/cap.'),
			),
			'player.base.level' => array(
				'label' => t_default('acp.set.player.base.level.label', 'Base level'),
				'type'  => 'int',
				'help'  => t_default('acp.set.player.base.level.help', 'Used with vocation stat gains to calculate health/mana/cap at any level.'),
			),
			'player.base.health' => array(
				'label' => t_default('acp.set.player.base.health.label', 'Base health'),
				'type'  => 'int',
			),
			'player.base.mana' => array(
				'label' => t_default('acp.set.player.base.mana.label', 'Base mana'),
				'type'  => 'int',
			),
			'player.base.cap' => array(
				'label' => t_default('acp.set.player.base.cap.label', 'Base capacity'),
				'type'  => 'int',
			),
			'player.base.soul' => array(
				'label' => t_default('acp.set.player.base.soul.label', 'Base soul'),
				'type'  => 'int',
			),
			'player.create.level' => array(
				'label' => t_default('acp.set.player.create.level.label', 'Starting level (new character)'),
				'type'  => 'int',
			),
			'player.create.novocation.level' => array(
				'label' => t_default('acp.set.player.create.novocation.level.label', 'No-vocation starting level'),
				'type'  => 'int',
				'help'  => t_default('acp.set.player.create.novocation.help', 'Special-case settings for vocation id 0 (No vocation).'),
			),
			'player.create.novocation.forceTown' => array(
				'label' => t_default('acp.set.player.create.novocation.forcetown.label', 'Force no-vocation town'),
				'type'  => 'bool',
			),
			'player.create.novocation.townId' => array(
				'label' => t_default('acp.set.player.create.novocation.townid.label', 'No-vocation town ID'),
				'type'  => 'int',
			),
			'player.create.skills' => array(
				'label'   => t_default('acp.set.player.create.skills.label', 'Starting skills per vocation'),
				'type'    => 'table',
				'row_key' => 'id',
				'columns' => array(
					'id'      => array('label' => t_default('acp.set.player.create.skills.col_id', 'Vocation ID'), 'type' => 'int'),
					'magic'   => array('label' => t_default('acp.set.player.create.skills.col_magic', 'Magic'), 'type' => 'int'),
					'fist'    => array('label' => t_default('acp.set.player.create.skills.col_fist', 'Fist'), 'type' => 'int'),
					'club'    => array('label' => t_default('acp.set.player.create.skills.col_club', 'Club'), 'type' => 'int'),
					'sword'   => array('label' => t_default('acp.set.player.create.skills.col_sword', 'Sword'), 'type' => 'int'),
					'axe'     => array('label' => t_default('acp.set.player.create.skills.col_axe', 'Axe'), 'type' => 'int'),
					'dist'    => array('label' => t_default('acp.set.player.create.skills.col_dist', 'Distance'), 'type' => 'int'),
					'shield'  => array('label' => t_default('acp.set.player.create.skills.col_shield', 'Shielding'), 'type' => 'int'),
					'fishing' => array('label' => t_default('acp.set.player.create.skills.col_fishing', 'Fishing'), 'type' => 'int'),
				),
				'help' => t_default('acp.set.player.create.skills.help', 'One row per vocation id: 0 = No vocation, 1 = Sorcerer, 2 = Druid, 3 = Paladin, 4 = Knight. Extra ids such as 9 are custom/other vocations from the Vocations table above.'),
			),
			'player.create.male_outfit.id' => array(
				'label' => t_default('acp.set.player.create.male_outfit.id.label', 'Male outfit - looktype ID'),
				'type'  => 'int',
			),
			'player.create.male_outfit.head' => array(
				'label' => t_default('acp.set.player.create.male_outfit.head.label', 'Male outfit - head color'),
				'type'  => 'int',
			),
			'player.create.male_outfit.body' => array(
				'label' => t_default('acp.set.player.create.male_outfit.body.label', 'Male outfit - body color'),
				'type'  => 'int',
			),
			'player.create.male_outfit.legs' => array(
				'label' => t_default('acp.set.player.create.male_outfit.legs.label', 'Male outfit - legs color'),
				'type'  => 'int',
			),
			'player.create.male_outfit.feet' => array(
				'label' => t_default('acp.set.player.create.male_outfit.feet.label', 'Male outfit - feet color'),
				'type'  => 'int',
			),
			'player.create.female_outfit.id' => array(
				'label' => t_default('acp.set.player.create.female_outfit.id.label', 'Female outfit - looktype ID'),
				'type'  => 'int',
			),
			'player.create.female_outfit.head' => array(
				'label' => t_default('acp.set.player.create.female_outfit.head.label', 'Female outfit - head color'),
				'type'  => 'int',
			),
			'player.create.female_outfit.body' => array(
				'label' => t_default('acp.set.player.create.female_outfit.body.label', 'Female outfit - body color'),
				'type'  => 'int',
			),
			'player.create.female_outfit.legs' => array(
				'label' => t_default('acp.set.player.create.female_outfit.legs.label', 'Female outfit - legs color'),
				'type'  => 'int',
			),
			'player.create.female_outfit.feet' => array(
				'label' => t_default('acp.set.player.create.female_outfit.feet.label', 'Female outfit - feet color'),
				'type'  => 'int',
			),
		),

		t_default('acp.sec.Content', 'Content') => array(
			'news_per_page' => array(
				'label' => t_default('acp.set.news_per_page.label', 'News articles per page'),
				'type'  => 'int',
			),
			'UseChangelogTicker' => array(
				'label' => t_default('acp.set.UseChangelogTicker.label', 'Changelog ticker on the front page'),
				'type'  => 'bool',
			),
			'credits_enabled' => array(
				'label' => t_default('acp.set.credits_enabled.label', 'Credits page'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.credits_enabled.help', 'Off hides credits.php and its menu link.'),
			),
			'Ach' => array(
				'label' => t_default('acp.set.Ach.label', 'Achievements page'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.Ach.help', 'Shows achievements.php, its menu link and the achievement block on character profiles. Needs the achievements configured in config.php.'),
			),
			'items' => array(
				'label' => t_default('acp.set.items.label', 'Items page'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.items.help', 'Shows items.php and its menu link.'),
			),
			'queststatus_enabled' => array(
				'label' => t_default('acp.set.queststatus_enabled.label', 'Quest Status page'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.queststatus_enabled.help', 'Shows queststatus.php and its menu link. Off by default; edit the quest list in queststatus.php.'),
			),
			'EnableQuests' => array(
				'label' => t_default('acp.set.EnableQuests.label', 'Quest points block on profiles'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.EnableQuests.help', 'Shows the quest progress block on character profiles. Needs the quest storages configured in config.php.'),
			),
			'allowSubPages' => array(
				'label' => t_default('acp.set.allowSubPages.label', 'Allow theme sub pages'),
				'type'  => 'bool',
			),
			'contact_info' => array(
				'label' => t_default('acp.set.contact_info.label', 'Contact page text'),
				'type'  => 'textarea',
				'help'  => t_default('acp.set.contact_info.help', 'Shown on contact.php. Plain text, line breaks are kept. Leave empty to use the translation default.'),
			),
			'faq.entries' => array(
				'label'      => t_default('acp.set.faq.entries.label', 'FAQ questions'),
				'type'       => 'table',
				'json_shape' => 'list',
				'columns'    => array(
					'question' => array('label' => t_default('acp.set.faq.entries.col_question', 'Question'), 'type' => 'text'),
					'answer'   => array('label' => t_default('acp.set.faq.entries.col_answer', 'Answer'), 'type' => 'textarea'),
				),
				'help' => t_default('acp.set.faq.entries.help', 'Shown on faq.php as an accordion, in this order. Add, remove or reorder rows freely. Add faq.php as a menu link (Admin Panel > Menus) to point visitors at it, e.g. from Support.'),
			),
		),

		t_default('acp.sec.Privacy', 'Privacy') => array(
			'log_ip' => array(
				'label' => t_default('acp.set.log_ip.label', 'Log visitor IPs'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.log_ip.help', 'Feeds the Visitors page. Turning it off stops the collection entirely.'),
			),
			'flush_ip_logs' => array(
				'label' => t_default('acp.set.flush_ip_logs.label', 'IP log retention (rows)'),
				'type'  => 'int',
				'help'  => t_default('acp.set.flush_ip_logs.help', 'Old visitor-IP rows past this count are trimmed.'),
			),
		),

		t_default('acp.sec.Shop', 'Shop') => array(
			'shop.enabled' => array(
				'label' => t_default('acp.set.shop.enabled.label', 'Shop enabled'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.shop.enabled.help', 'Turns off the shop page and its menu entry.'),
			),
			'shop.loginToView' => array(
				'label' => t_default('acp.set.shop.loginToView.label', 'Require login to view the shop'),
				'type'  => 'bool',
			),
			'shop.enableShopConfirmation' => array(
				'label' => t_default('acp.set.shop.enableShopConfirmation.label', 'Ask for confirmation before buying'),
				'type'  => 'bool',
			),
			'shop.showImage' => array(
				'label' => t_default('acp.set.shop.showImage.label', 'Show item images'),
				'type'  => 'bool',
			),
			'shop.imageServer' => array(
				'label' => t_default('acp.set.shop.imageServer.label', 'Item image server'),
				'type'  => 'text',
				'help'  => t_default('acp.set.shop.imageServer.help', 'An http(s):// URL, "/items" for a folder in this website, or a disk folder path (e.g. F:/server/items) served straight from PHP. Used by the shop, market, character equipment and plugins.'),
			),
			'shop.imageType' => array(
				'label' => t_default('acp.set.shop.imageType.label', 'Item image extension'),
				'type'  => 'text',
				'help'  => t_default('acp.set.shop.imageType.help', 'gif or png, depending on the image server.'),
			),
			'buypoints_enabled' => array(
				'label' => t_default('acp.set.buypoints_enabled.label', 'Buy points page'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.buypoints_enabled.help', 'Off hides buypoints.php whichever gateways are configured. Gateways themselves are on the Payments page.'),
			),
		),

		t_default('acp.sec.Outfit images', 'Outfit images') => array(
			'show_outfits.imageServer' => array(
				'label' => t_default('acp.set.show_outfits.imageServer.label', 'Outfit image server'),
				'type'  => 'text',
				'help'  => t_default('acp.set.show_outfits.imageServer.help', 'The script that renders outfits, e.g. https://outfit-images.ots.me/1285/animoutfit.php'),
			),
			'show_outfits.shop' => array(
				'label' => t_default('acp.set.show_outfits.shop.label', 'Outfits in the shop'),
				'type'  => 'bool',
			),
			'show_outfits.highscores' => array(
				'label' => t_default('acp.set.show_outfits.highscores.label', 'Outfits in the highscores'),
				'type'  => 'bool',
			),
			'show_outfits.characterprofile' => array(
				'label' => t_default('acp.set.show_outfits.characterprofile.label', 'Outfits on character profiles'),
				'type'  => 'bool',
			),
			'show_outfits.onlinelist' => array(
				'label' => t_default('acp.set.show_outfits.onlinelist.label', 'Outfits in the online list'),
				'type'  => 'bool',
			),
		),

		t_default('acp.sec.Character auction', 'Character auction') => array(
			'shop_auction.characterAuction' => array(
				'label' => t_default('acp.set.shop_auction.characterAuction.label', 'Character auction enabled'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.shop_auction.characterAuction.help', 'Lets players sell and bid on characters for shop points.'),
			),
			'shop_auction.storage_account_id' => array(
				'label' => t_default('acp.set.shop_auction.storage_account_id.label', 'Storage account ID'),
				'type'  => 'int',
				'help'  => t_default('acp.set.shop_auction.storage_account_id.help', 'Holds characters while they are listed. Use a separate, secure account - not your god account.'),
			),
			'shop_auction.lowestLevel' => array(
				'label' => t_default('acp.set.shop_auction.lowestLevel.label', 'Minimum level to sell'),
				'type'  => 'int',
			),
			'shop_auction.lowestPrice' => array(
				'label' => t_default('acp.set.shop_auction.lowestPrice.label', 'Minimum price in points'),
				'type'  => 'int',
			),
			'shop_auction.step' => array(
				'label' => t_default('acp.set.shop_auction.step.label', 'Minimum bid increase'),
				'type'  => 'int',
			),
			'shop_auction.deposit' => array(
				'label' => t_default('acp.set.shop_auction.deposit.label', 'Seller deposit (%)'),
				'type'  => 'int',
			),
		),

		t_default('acp.sec.Forum', 'Forum') => array(
			'forum.enabled' => array(
				'label' => t_default('acp.set.forum.enabled.label', 'Forum enabled'),
				'type'  => 'bool',
			),
			'forum.level' => array(
				'label' => t_default('acp.set.forum.level.label', 'Level required to post'),
				'type'  => 'int',
			),
			'forum.maxImagesPerPost' => array(
				'label' => t_default('acp.set.forum.maxImagesPerPost.label', 'Images allowed per post'),
				'type'  => 'int',
				'help'  => t_default('acp.set.forum.maxImagesPerPost.help', '0 blocks images entirely.'),
			),
			'forum.guildboard' => array(
				'label' => t_default('acp.set.forum.guildboard.label', 'Guild boards'),
				'type'  => 'bool',
			),
			'forum.outfit_avatars' => array(
				'label' => t_default('acp.set.forum.outfit_avatars.label', 'Show outfits as avatars'),
				'type'  => 'bool',
			),
			'forum.newPostsBumpThreads' => array(
				'label' => t_default('acp.set.forum.newPostsBumpThreads.label', 'New posts bump threads'),
				'type'  => 'bool',
			),
		),

		t_default('acp.sec.Guilds', 'Guilds') => array(
			'use_guild_logos' => array(
				'label' => t_default('acp.set.use_guild_logos.label', 'Guild logo uploads'),
				'type'  => 'bool',
			),
			'guild_require_premium' => array(
				'label' => t_default('acp.set.guild_require_premium.label', 'Premium required to create a guild'),
				'type'  => 'bool',
			),
			'guild_allow_nicknames' => array(
				'label' => t_default('acp.set.guild_allow_nicknames.label', 'Allow guild nicknames'),
				'type'  => 'bool',
			),
			'guildwar_enabled' => array(
				'label' => t_default('acp.set.guildwar_enabled.label', 'Guild wars'),
				'type'  => 'bool',
			),
			'require_login.guilds' => array(
				'label' => t_default('acp.set.require_login.guilds.label', 'Require login to view guilds'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.require_login.guilds.help', 'Eases database load on large servers.'),
			),
			'require_login.guildwars' => array(
				'label' => t_default('acp.set.require_login.guildwars.label', 'Require login to view guild wars'),
				'type'  => 'bool',
			),
		),

		t_default('acp.sec.Highscores & lists', 'Highscores & lists') => array(
			'highscore.rows' => array(
				'label' => t_default('acp.set.highscore.rows.label', 'Highscore entries'),
				'type'  => 'int',
			),
			'highscore.rowsPerPage' => array(
				'label' => t_default('acp.set.highscore.rowsPerPage.label', 'Highscore rows per page'),
				'type'  => 'int',
			),
			'highscore.ignoreGroupId' => array(
				'label' => t_default('acp.set.highscore.ignoreGroupId.label', 'Hide group ID and above'),
				'type'  => 'int',
				'help'  => t_default('acp.set.highscore.ignoreGroupId.help', 'Keeps staff out of the highscores. 2 hides gamemasters upward.'),
			),
			'powergamers.enabled' => array(
				'label' => t_default('acp.set.powergamers.enabled.label', 'Powergamers page'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.powergamers.enabled.help', 'Needs the Lua script and the extra SQL columns.'),
			),
			'powergamers.limit' => array(
				'label' => t_default('acp.set.powergamers.limit.label', 'Powergamers shown'),
				'type'  => 'int',
			),
			'toponline.enabled' => array(
				'label' => t_default('acp.set.toponline.enabled.label', 'Top online page'),
				'type'  => 'bool',
			),
			'toponline.limit' => array(
				'label' => t_default('acp.set.toponline.limit.label', 'Top online shown'),
				'type'  => 'int',
			),
		),

		t_default('acp.sec.Houses', 'Houses') => array(
			'houseConfig.HouseListDefaultTown' => array(
				'label' => t_default('acp.set.houseConfig.HouseListDefaultTown.label', 'Default town on the house list'),
				'type'  => 'int',
			),
			'houseConfig.minimumBidSQM' => array(
				'label' => t_default('acp.set.houseConfig.minimumBidSQM.label', 'Minimum bid per SQM'),
				'type'  => 'int',
			),
			'houseConfig.housesPerPlayer' => array(
				'label' => t_default('acp.set.houseConfig.housesPerPlayer.label', 'Houses per player'),
				'type'  => 'int',
			),
			'houseConfig.levelToBuyHouse' => array(
				'label' => t_default('acp.set.houseConfig.levelToBuyHouse.label', 'Level required to buy a house'),
				'type'  => 'int',
			),
			'houseConfig.requirePremium' => array(
				'label' => t_default('acp.set.houseConfig.requirePremium.label', 'Premium required'),
				'type'  => 'bool',
			),
			'houseConfig.shopPoints.enabled' => array(
				'label' => t_default('acp.set.houseConfig.shopPoints.enabled.label', 'Instant buy with shop points'),
				'type'  => 'bool',
			),
		),

		t_default('acp.sec.Server status', 'Server status') => array(
			'status.status_check' => array(
				'label' => t_default('acp.set.status.status_check.label', 'Query the game server for status'),
				'type'  => 'bool',
			),
			'status.status_ip' => array(
				'label' => t_default('acp.set.status.status_ip.label', 'Status IP'),
				'type'  => 'text',
			),
			'status.status_port' => array(
				'label' => t_default('acp.set.status.status_port.label', 'Status port'),
				'type'  => 'text',
			),
			'login_web_service' => array(
				'label' => t_default('acp.set.login_web_service.label', 'Client login web service'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.login_web_service.help', 'Required by client 11 and newer.'),
			),
			'login_protocol' => array(
				'label'   => t_default('acp.set.login_protocol.label', 'Login protocol'),
				'type'    => 'select',
				'options' => array(
					'auto' => 'Auto (follow client version)',
					'11'   => 'Client 11',
					'12'   => 'Client 12 / Canary 12.x',
					'13'   => 'Client 13 / Canary 13.x',
					'15'   => 'Client 15 / Canary 15.x',
				),
				'help'  => t_default('acp.set.login_protocol.help', 'Shape of the character list the client is sent. Auto follows the client version above.'),
			),
			'login_auth_type' => array(
				'label'   => t_default('acp.set.login_auth_type.label', 'Canary auth type'),
				'type'    => 'select',
				'options' => array(
					'password' => 'Password (Canary default)',
					'session'  => 'Session (writes account_sessions)',
				),
				'help'  => t_default('acp.set.login_auth_type.help', 'Must match authType in your Canary config.lua, or nobody can enter the world.'),
			),
			'login_session_ttl' => array(
				'label' => t_default('acp.set.login_session_ttl.label', 'Session lifetime'),
				'type'  => 'int',
				'help'  => t_default('acp.set.login_session_ttl.help', 'Seconds a session auth row stays valid. Ignored on password auth.'),
			),
			'gameserver.ip' => array(
				'label' => t_default('acp.set.gameserver.ip.label', 'Game server IP'),
				'type'  => 'text',
			),
			'gameserver.port' => array(
				'label' => t_default('acp.set.gameserver.port.label', 'Login web service port'),
				'type'  => 'int',
			),
			'gameserver.name' => array(
				'label' => t_default('acp.set.gameserver.name.label', 'World name'),
				'type'  => 'text',
			),
		),

		t_default('acp.sec.Downloads', 'Downloads') => array(
			'client_download' => array(
				'label' => t_default('acp.set.client_download.label', 'Windows client URL'),
				'type'  => 'text',
			),
			'client_download_linux' => array(
				'label' => t_default('acp.set.client_download_linux.label', 'Linux client URL'),
				'type'  => 'text',
			),
			'downloads.entries' => array(
				'label'      => t_default('acp.set.downloads.entries.label', 'Download entries'),
				'type'       => 'table',
				'json_shape' => 'list',
				'columns'    => array(
					'key'         => array('label' => t_default('acp.set.downloads.entries.col_key', 'Key'), 'type' => 'text'),
					'label'       => array('label' => t_default('acp.set.downloads.entries.col_label', 'Label'), 'type' => 'text'),
					'section'     => array('label' => t_default('acp.set.downloads.entries.col_section', 'Section'), 'type' => 'select', 'options' => array(
						'official'     => t_default('acp.set.downloads.entries.sec_official', 'Official'),
						'unsupported'  => t_default('acp.set.downloads.entries.sec_unsupported', 'Unsupported'),
						'tools'        => t_default('acp.set.downloads.entries.sec_tools', 'Tools'),
						'custom'       => t_default('acp.set.downloads.entries.sec_custom', 'Custom'),
					)),
					'enabled'     => array('label' => t_default('acp.set.downloads.entries.col_enabled', 'Enabled'), 'type' => 'bool'),
					'url'         => array('label' => t_default('acp.set.downloads.entries.col_url', 'URL'), 'type' => 'text'),
					'image'       => array('label' => t_default('acp.set.downloads.entries.col_image', 'Image'), 'type' => 'text'),
					'description' => array('label' => t_default('acp.set.downloads.entries.col_description', 'Description'), 'type' => 'text'),
				),
				'help' => t_default('acp.set.downloads.entries.help', 'Enable, disable, reorder or add download rows. Windows and Linux keep using the URL fields above.'),
			),
		),

		t_default('acp.sec.Permissions', 'Permissions') => array(
			'admin_access' => array(
				'label' => t_default('acp.set.admin_access.label', 'Admin panel access'),
				'type'  => 'permissions',
				'help'  => t_default('acp.set.admin_access.help', 'Owners see and change everything. A scoped account only sees the categories its roles allow - everything else is hidden from the sidebar and refused if opened directly.'),
			),
		),

		t_default('acp.sec.Login Protection', 'Login Protection') => array(
			'login_guard.enabled' => array(
				'label' => t_default('acp.set.login_guard.enabled.label', 'Lock out an IP after too many failed logins'),
				'type'  => 'bool',
			),
			'login_guard.threshold' => array(
				'label' => t_default('acp.set.login_guard.threshold.label', 'Failed attempts allowed'),
				'type'  => 'int',
				'min'   => 1,
				'max'   => 100,
			),
			'login_guard.window_minutes' => array(
				'label' => t_default('acp.set.login_guard.window_minutes.label', 'Counting window (minutes)'),
				'type'  => 'int',
				'min'   => 1,
				'max'   => 1440,
				'help'  => t_default('acp.set.login_guard.window_minutes.help', 'Failed attempts older than this many minutes no longer count toward the lockout.'),
			),
			'login_guard.lockout_minutes' => array(
				'label' => t_default('acp.set.login_guard.lockout_minutes.label', 'Lockout duration (minutes)'),
				'type'  => 'int',
				'min'   => 1,
				'max'   => 1440,
			),
		),

		t_default('acp.sec.Security', 'Security') => array(
			'use_token' => array(
				'label' => t_default('acp.set.use_token.label', 'CSRF tokens on forms'),
				'type'  => 'bool',
			),
			'use_captcha' => array(
				'label' => t_default('acp.set.use_captcha.label', 'reCaptcha'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.use_captcha.help', 'Needs the site and secret keys below, and the cURL extension.'),
			),
			'captcha_site_key' => array(
				'label' => t_default('acp.set.captcha_site_key.label', 'reCaptcha site key'),
				'type'  => 'text',
			),
			'captcha_secret_key' => array(
				'label' => t_default('acp.set.captcha_secret_key.label', 'reCaptcha secret key'),
				'type'  => 'text',
			),
			'captcha_use_curl' => array(
				'label' => t_default('acp.set.captcha_use_curl.label', 'Verify reCaptcha with cURL'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.captcha_use_curl.help', 'On if the cURL extension is available, off to use file_get_contents.'),
			),
			'twoFactorAuthenticator' => array(
				'label' => t_default('acp.set.twoFactorAuthenticator.label', 'Two-factor authentication'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.twoFactorAuthenticator.help', 'TFS 1.2+ only. Unavailable on Canary.'),
			),
			'validate_IP' => array(
				'label' => t_default('acp.set.validate_IP.label', 'Tie sessions to the visitor IP'),
				'type'  => 'bool',
			),
		),

		t_default('acp.sec.Two-factor authentication (v2)', 'Two-factor authentication (v2)') => array(
			'twoFactorV2.enabled' => array(
				'label' => t_default('acp.set.twoFactorV2.enabled.label', 'Enable website 2FA v2'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.twoFactorV2.enabled.help', 'Independent of the game engine - works on TFS, Canary, otHire or BlackTek alike. Players manage it from twofa.php.'),
			),
			'twoFactorV2.email_otp_enabled' => array(
				'label' => t_default('acp.set.twoFactorV2.email_otp_enabled.label', 'Allow e-mail codes'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.twoFactorV2.email_otp_enabled.help', 'Lets a player receive a one-time code by e-mail instead of using an authenticator app. Requires the mail server to be configured.'),
			),
			'twoFactorV2.force_admins' => array(
				'label' => t_default('acp.set.twoFactorV2.force_admins.label', 'Require it for admin panel access'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.twoFactorV2.force_admins.help', 'Any account with an admin panel role is sent to set up 2FA v2 before it can use the panel.'),
			),
			'twoFactorV2.recovery_codes_count' => array(
				'label' => t_default('acp.set.twoFactorV2.recovery_codes_count.label', 'Recovery codes generated at a time'),
				'type'  => 'int',
				'min'   => 1,
				'max'   => 20,
			),
			'twoFactorV2.trusted_device_days' => array(
				'label' => t_default('acp.set.twoFactorV2.trusted_device_days.label', '"Remember this device" duration (days)'),
				'type'  => 'int',
				'min'   => 0,
				'max'   => 365,
				'help'  => t_default('acp.set.twoFactorV2.trusted_device_days.help', '0 removes the option from the login form.'),
			),
		),

		t_default('acp.sec.Security headers', 'Security headers') => array(
			'security.headers_enabled' => array(
				'label' => t_default('acp.set.security.headers_enabled.label', 'Send HTTP security headers'),
				'type'  => 'bool',
				'default' => true,
				'help'  => t_default('acp.set.security.headers_enabled.help', 'Adds browser hardening headers on public and admin pages.'),
			),
			'security.content_type_options' => array(
				'label' => t_default('acp.set.security.content_type_options.label', 'Block MIME sniffing'),
				'type'  => 'bool',
				'default' => true,
				'help'  => t_default('acp.set.security.content_type_options.help', 'Sends X-Content-Type-Options: nosniff.'),
			),
			'security.frame_options' => array(
				'label'   => t_default('acp.set.security.frame_options.label', 'Frame policy'),
				'type'    => 'select',
				'default' => 'SAMEORIGIN',
				'options' => array(
					'SAMEORIGIN' => 'SAMEORIGIN',
					'DENY'       => 'DENY',
					''           => t_default('acp.opt.disabled', 'Disabled'),
				),
				'help'  => t_default('acp.set.security.frame_options.help', 'Controls whether the site can be embedded in an iframe. SAMEORIGIN is the safest default for admin pages.'),
			),
			'security.referrer_policy' => array(
				'label'   => t_default('acp.set.security.referrer_policy.label', 'Referrer policy'),
				'type'    => 'select',
				'default' => 'strict-origin-when-cross-origin',
				'options' => array(
					'strict-origin-when-cross-origin' => 'strict-origin-when-cross-origin',
					'no-referrer'                     => 'no-referrer',
					'same-origin'                     => 'same-origin',
					'origin-when-cross-origin'        => 'origin-when-cross-origin',
					'strict-origin'                   => 'strict-origin',
					'unsafe-url'                      => 'unsafe-url',
					''                                => t_default('acp.opt.disabled', 'Disabled'),
				),
				'help'  => t_default('acp.set.security.referrer_policy.help', 'Limits how much URL information is sent to external sites.'),
			),
			'security.permissions_policy' => array(
				'label' => t_default('acp.set.security.permissions_policy.label', 'Permissions policy'),
				'type'  => 'textarea',
				'default' => 'camera=(), microphone=(), geolocation=(), browsing-topics=()',
				'help'  => t_default('acp.set.security.permissions_policy.help', 'Example: camera=(), microphone=(), geolocation=(). Empty disables this header.'),
			),
			'security.content_security_policy' => array(
				'label' => t_default('acp.set.security.content_security_policy.label', 'Content Security Policy'),
				'type'  => 'textarea',
				'default' => "frame-ancestors 'self'; object-src 'none'; base-uri 'self'",
				'help'  => t_default('acp.set.security.content_security_policy.help', 'Default protects framing and plugins without blocking existing theme scripts. Empty disables this header.'),
			),
			'security.cross_domain_policy' => array(
				'label' => t_default('acp.set.security.cross_domain_policy.label', 'Block Adobe cross-domain policies'),
				'type'  => 'bool',
				'default' => true,
				'help'  => t_default('acp.set.security.cross_domain_policy.help', 'Sends X-Permitted-Cross-Domain-Policies: none.'),
			),
			'security.hsts' => array(
				'label' => t_default('acp.set.security.hsts.label', 'Force HTTPS with HSTS'),
				'type'  => 'bool',
				'default' => false,
				'help'  => t_default('acp.set.security.hsts.help', 'Enable only when the public domain is permanently available over HTTPS. Browsers remember this choice.'),
			),
			'security.hsts_max_age' => array(
				'label' => t_default('acp.set.security.hsts_max_age.label', 'HSTS max age'),
				'type'  => 'int',
				'default' => 31536000,
				'help'  => t_default('acp.set.security.hsts_max_age.help', 'Seconds. 31536000 = one year.'),
			),
			'security.hsts_include_subdomains' => array(
				'label' => t_default('acp.set.security.hsts_include_subdomains.label', 'HSTS include subdomains'),
				'type'  => 'bool',
				'default' => false,
				'help'  => t_default('acp.set.security.hsts_include_subdomains.help', 'Only enable if every subdomain also supports HTTPS.'),
			),
		),

		t_default('acp.sec.Cache', 'Cache') => array(
			'cache.prefix' => array(
				'label' => t_default('acp.set.cache.prefix.label', 'Cache namespace'),
				'type'  => 'text',
				'help'  => t_default('acp.set.cache.prefix.help', 'Use a unique value for each ZnoteX installation sharing the same APCu server.'),
			),
			'cache.lifespan' => array(
				'label' => t_default('acp.set.cache.lifespan.label', 'Cache lifetime (seconds)'),
				'type'  => 'int',
				'min'   => 0,
				'max'   => 2147483647,
				'help'  => t_default('acp.set.cache.lifespan.help', '0 keeps entries until they are explicitly cleared.'),
			),
			'cache.memory' => array(
				'label' => t_default('acp.set.cache.memory.label', 'Keep cache in memory (APCu)'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.cache.memory.help', 'Uses APCu when available and automatically falls back to files in engine/cache/.'),
			),
		),

		t_default('acp.sec.E-mail', 'E-mail') => array(
			'mailserver.register' => array(
				'label' => t_default('acp.set.mailserver.register.label', 'Send activation mail on register'),
				'type'  => 'bool',
			),
			'mailserver.accountRecovery' => array(
				'label' => t_default('acp.set.mailserver.accountRecovery.label', 'Allow account recovery by mail'),
				'type'  => 'bool',
				'help'  => t_default('acp.set.mailserver.accountRecovery.help', 'Enables the Lost Account page for recovering usernames, passwords and legacy 2FA by e-mail.'),
			),
			'mailserver.myaccount_verify_email' => array(
				'label' => t_default('acp.set.mailserver.myaccount_verify_email.label', 'Let players verify their e-mail'),
				'type'  => 'bool',
			),
			'mailserver.verify_email_points' => array(
				'label' => t_default('acp.set.mailserver.verify_email_points.label', 'Points for verifying e-mail'),
				'type'  => 'int',
				'help'  => t_default('acp.set.mailserver.verify_email_points.help', '0 disables the reward.'),
			),
			'mailserver.host' => array(
				'label' => t_default('acp.set.mailserver.host.label', 'SMTP host'),
				'type'  => 'text',
			),
			'mailserver.port' => array(
				'label' => t_default('acp.set.mailserver.port.label', 'SMTP port'),
				'type'  => 'int',
				'help'  => t_default('acp.set.mailserver.port.help', '465 for SSL, 587 for TLS.'),
			),
			'mailserver.securityType' => array(
				'label' => t_default('acp.set.mailserver.securityType.label', 'SMTP security'),
				'type'  => 'text',
				'help'  => t_default('acp.set.mailserver.securityType.help', 'ssl or tls.'),
			),
			'mailserver.email' => array(
				'label' => t_default('acp.set.mailserver.email.label', 'From address'),
				'type'  => 'text',
			),
			'mailserver.username' => array(
				'label' => t_default('acp.set.mailserver.username.label', 'SMTP username'),
				'type'  => 'text',
			),
			'mailserver.password' => array(
				'label' => t_default('acp.set.mailserver.password.label', 'SMTP password'),
				'type'  => 'text',
			),
		),
	);