Cut over-engineering found by a repo-wide audit

- Config: auth, services, logging, queue and database only repeated the
  framework's own files and are gone; the others keep only the keys that
  differ (app version, cache serializable_classes, session cookie name,
  Markdown mail theme, the shares disk, three Octane values, Livewire's
  pagination theme and payload guards).
- Email verification is removed: User never implemented MustVerifyEmail,
  so it was never enforced, and SealShare has a single admin and no
  registration. CreateNewUser goes with it.
- FileEncryptionService::encryptFile() and generateSalt() were only used
  by tests; tests build files with encryptTestFile() in tests/Pest.php.
- The expiration options are defined once, as Share::EXPIRATIONS. "30 Days"
  now lasts 30 days instead of a calendar month, and Admin settings only
  save a default expiration that is one of the options.
- One-caller helpers are inlined, the uploader reads chunk responses with
  XHR's responseType, and starter-kit leftovers are removed.
- Docker: PHP reads the PHP_* limits from the environment itself
  (${VAR:-default} in uploads.ini); both entrypoints stop writing the ini.
  docker-compose.yml shares the app and scheduler variables through one
  anchor. The dev image installs gd for the screenshot publisher and fake
  test images.
- Development runs in Docker only: the composer dev script, concurrently,
  laravel/pail, laravel/sail, autoprefixer and the shell-quote override
  are gone.
- phpunit.xml forces the test environment with <server> entries, so tests
  run in the dev container no longer use its real database.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

app/Livewire/Admin/AdminSettings.php

@@ -3,6 +3,7 @@
 namespace App\Livewire\Admin;
 
 use App\Models\Setting;
+use App\Models\Share;
 use App\Services\PasswordGeneratorService;
 use Illuminate\Support\Facades\Hash;
 use Illuminate\Support\Facades\Storage;
@@ -92,6 +93,7 @@ class AdminSettings extends Component
     {
         $validated = $this->validate([
             'colorProfile' => ['required', 'string', Rule::in(array_keys(Scheme::profiles()))],
+            'defaultExpiration' => ['nullable', 'string', Rule::in(array_keys(Share::EXPIRATIONS))],
             'maxFileSize' => ['required', 'integer', 'min:1'],
             'maxStorageQuota' => ['required', 'integer', 'min:1'],
             'maxFilesPerShare' => ['required', 'integer', 'min:1'],
@@ -101,7 +103,7 @@ class AdminSettings extends Component
             'siteLogo' => ['nullable', 'file', 'mimes:png,jpg,jpeg,gif,webp', 'max:2048'],
             ...$this->passwordGeneratorRules(),
         ], [
-            ...$this->passwordGeneratorMessages(),
+            'passwordCharacterSets.required' => __('Choose at least one kind of character.'),
         ]);
 
         if ($this->systemPassword) {
@@ -160,16 +162,6 @@ class AdminSettings extends Component
         ];
     }
 
-    /**
-     * @return array<string, string>
-     */
-    protected function passwordGeneratorMessages(): array
-    {
-        return [
-            'passwordCharacterSets.required' => __('Choose at least one kind of character.'),
-        ];
-    }
-
     /**
      * Store the generator settings that passed validation; excluded ones keep their saved value.
      *

app/Livewire/FileUploader.php

@@ -6,8 +6,10 @@ use App\Models\Setting;
 use App\Models\Share;
 use App\Services\PasswordGeneratorService;
 use App\Services\ShareService;
+use Carbon\CarbonInterval;
 use Illuminate\Support\Facades\Crypt;
 use Illuminate\Support\Str;
+use Illuminate\Validation\Rule;
 use Illuminate\Validation\ValidationException;
 use Livewire\Attributes\Layout;
 use Livewire\Attributes\Locked;
@@ -135,7 +137,7 @@ class FileUploader extends Component
         $rules = [];
 
         if (! Setting::get('allow_never_expire', false)) {
-            $rules['expiration'] = ['required', 'string', 'in:1h,24h,48h,7d,14d,30d'];
+            $rules['expiration'] = ['required', 'string', Rule::in(array_keys(Share::EXPIRATIONS))];
         }
 
         if ($this->usePassword) {
@@ -158,15 +160,9 @@ class FileUploader extends Component
 
         $share = $shareService->completeShare($pendingShare, [
             'password' => $this->usePassword ? $this->password : null,
-            'expires_at' => match ($this->expiration) {
-                '1h' => now()->addHour(),
-                '24h' => now()->addDay(),
-                '48h' => now()->addDays(2),
-                '7d' => now()->addWeek(),
-                '14d' => now()->addDays(14),
-                '30d' => now()->addMonth(),
-                default => null,
-            },
+            'expires_at' => isset(Share::EXPIRATIONS[$this->expiration])
+                ? now()->add(CarbonInterval::make(Share::EXPIRATIONS[$this->expiration]['interval']))
+                : null,
             'max_downloads' => $this->maxDownloads ?: null,
         ]);
 

app/Livewire/SetupWizard.php

@@ -2,7 +2,6 @@
 
 namespace App\Livewire;
 
-use App\Models\Setting;
 use App\Models\User;
 use Illuminate\Support\Facades\Auth;
 use Illuminate\Support\Facades\Hash;
@@ -45,14 +44,11 @@ class SetupWizard extends Component
             'name' => $this->name,
             'email' => $this->email,
             'password' => Hash::make($this->password),
-            'email_verified_at' => now(),
         ]);
 
         $user->is_admin = true;
         $user->save();
 
-        Setting::set('setup_complete', 'true');
-
         Auth::login($user);
 
         $this->redirect(route('admin.dashboard'), navigate: true);

app/Livewire/ShareDownload.php

@@ -30,13 +30,7 @@ class ShareDownload extends Component
             abort(404);
         }
 
-        if (! $share->isPasswordProtected()) {
-            $this->authenticated = true;
-        }
-
-        if ($share->isPasswordProtected() && session('share_key_'.$share->token)) {
-            $this->authenticated = true;
-        }
+        $this->authenticated = ! $share->isPasswordProtected() || (bool) session('share_key_'.$share->token);
     }
 
     public function verifyPassword(ShareService $shareService): void