'REPLACE_WITH_SITE_KEY', 'secret_key' => 'REPLACE_WITH_SECRET_KEY', 'hostnames' => ['www.example.com', 'example.com'], 'max_attempts' => 5, 'window_seconds' => 900, // Absolute path outside public/, writable by PHP and persistent across deployments. // 'storage_path' => '/path/to/private/antispam', ];