- MUST NOT call
env()outsideconfig/*.php. Application code reads viaconfig('foo.bar'). - SHOULD keep custom application settings in a dedicated config file (e.g.
config/project.php). - MUST store third-party service credentials / API keys in
config/services.php.
- Provider classes (under
app/Providers/) follow{Domain}Provider(e.g.PaymentProvider,StorageProvider,EmailProvider).