sdkconfig.be_size.defaults

# =============================================================================
# Battery-Emulator - flash-size sdkconfig overrides (pioarduino hybrid mode)
# Reference from platformio.ini:  custom_sdkconfig = file://sdkconfig.be_size.defaults
#
# Highest precedence in the pioarduino config chain, so these win over the
# Arduino framework defaults. Tailored to this firmware's actual usage:
#   - no BLE/Bluetooth        - no on-device Ethernet
#   - no on-device TLS client - uses WiFi STA + SoftAP (config portal)
#   - MQTT via esp-mqtt       - web UI via ESPAsyncWebServer (not IDF httpd)
# Run `pio run -t clean` after editing. Measure with the .map / size report.
# =============================================================================

# -----------------------------------------------------------------------------
# TIER 1 - safe, high value. Apply and measure first.
# -----------------------------------------------------------------------------

# Optimize for size. Critical in hybrid mode: without this the from-source IDF
# libs may build at -Og and REGRESS flash vs the precompiled ones.
CONFIG_COMPILER_OPTIMIZATION_SIZE=y
# CONFIG_COMPILER_OPTIMIZATION_DEBUG is not set

# No Bluetooth anywhere in the app. Usually off already under Arduino-as-lib,
# but assert it so it can never get pulled in.
# CONFIG_BT_ENABLED is not set

# Strip IDF-component log strings (WiFi, esp-mqtt, lwIP, etc.) entirely. Your own
# logging/remote-syslog layer is separate and unaffected. Drop to _WARN instead
# of _NONE if you want to keep IDF-level warnings/errors for field diagnostics.
# NOTE: application log level only. The bootloader is deliberately NOT touched
# here (no CONFIG_BOOTLOADER_* overrides), so it stays at the framework default,
# identical to a pre-patch build.
CONFIG_LOG_DEFAULT_LEVEL_NONE=y
# CONFIG_LOG_DEFAULT_LEVEL_WARN is not set
# CONFIG_LOG_DEFAULT_LEVEL_INFO is not set

# No WPA2/WPA3-Enterprise (you use plain PSK). Drops the enterprise supplicant.
# CONFIG_ESP_WIFI_ENTERPRISE_SUPPORT is not set

# Root-CA bundle: the FULL store is ~69 KB and this firmware does NO on-device
# TLS verification (the GitHub release check runs in the browser). The feature
# CANNOT be fully disabled: arduino-esp32's NetworkClientSecure library does an
# unconditional #include "esp_crt_bundle.h" (only present when the feature is on),
# and hybrid mode compiles that unused library from source. Plain NONE also fails
# to build (empty generation -> missing x509_crt_bundle.S).
# So: keep the feature ON, select NONE, and supply a custom bundle holding a
# single self-signed placeholder CA (Software/src/lib/dummy.pem). The generated
# blob is ~162 B instead of ~69 KB FULL / ~18 KB CMN. Path is relative to the
# project root (where platformio.ini lives).
# >>> Caveat: this dummy is the ONLY trusted root, so any real on-device TLS
#     verification (secure MQTT / a TLS client) would reject everything. If you
#     ever need that, switch back to CMN/FULL or point the path at your real CA.
CONFIG_MBEDTLS_CERTIFICATE_BUNDLE=y
CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_NONE=y
# CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL is not set
# CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_CMN is not set
CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE=y
CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE_PATH="Software/src/lib/dummy.pem"

# -----------------------------------------------------------------------------
# HYBRID-MODE BUILD FIX (fallback / safety net)
# esp-modbus is now excluded via `custom_component_remove` in platformio.ini,
# so these two lines normally do nothing. They are kept as a safety net: if
# removing espressif/esp-modbus ever triggers a dependency error, drop it from
# the remove list and this pin keeps the from-source build green. The component
# ships a _Static_assert requiring
#   FMB_MASTER_MAX_API_BLOCKING_TIME_MS >= FMB_MASTER_TIMEOUT_MS_RESPOND,
# which the merged Arduino base config otherwise violates. Values are inert for
# this firmware (it uses the Arduino eModbus library, not espressif/esp-modbus).
CONFIG_FMB_MASTER_TIMEOUT_MS_RESPOND=5000
CONFIG_FMB_MASTER_MAX_API_BLOCKING_TIME_MS=6000
#   Nano printf drops %f support
CONFIG_NEWLIB_NANO_FORMAT=y

# -----------------------------------------------------------------------------
# TIER 2 - larger wins, validate the affected feature after enabling.
# -----------------------------------------------------------------------------

# mbedTLS is still linked (WiFi crypto + esp-mqtt's TLS transport), but you can
# shed protocol variants you never negotiate. TLS 1.3 + DTLS are the big ones.
# >>> Caveat: only safe if you don't use secure MQTT (port 8883). If secure MQTT
#     is a supported user option, test an 8883 broker before shipping these.
# CONFIG_MBEDTLS_SSL_PROTO_TLS1_3 is not set
# CONFIG_MBEDTLS_SSL_PROTO_DTLS is not set

# The ESP32 is never a TLS server (the web UI is plain HTTP over AsyncTCP), so
# drop the mbedTLS server-side code and keep only the client path.
# >>> Caveat: same as above - if you ever run an on-device TLS server, revert.
CONFIG_MBEDTLS_TLS_CLIENT_ONLY=y

# Remove assertion checks outright (not just the message strings). Larger flash
# win than SILENT. Trade-off: a bug that would have cleanly asserted becomes
# undefined behaviour instead. Switch back to _SILENT if you want the aborts.
# CONFIG_COMPILER_OPTIMIZATION_ASSERTIONS_DISABLE=y
# CONFIG_COMPILER_OPTIMIZATION_ASSERTIONS_SILENT is not set

# -----------------------------------------------------------------------------
# TIER 3 - measure carefully, board-by-board. May interact with AsyncTCP / mDNS.
# -----------------------------------------------------------------------------

# IPv6 off saves flash, but ESPAsyncWebServer / AsyncTCPSock and mDNS sometimes
# assume IPv6 types are present. Enable ONLY if the web UI + mDNS still build and
# work on every target. Leave commented until you've tested it.
# # CONFIG_LWIP_IPV6 is not set