mirror of
https://github.com/bewcloud/bewcloud.git
synced 2026-03-11 08:54:49 +00:00
c26cae625e
This implements a huge change, where Fresh is removed as a framework and serving files, allowing more control over importing, bundling, and serving files and components. The biggest challenge was to continue making sure that there weren't too many places to look into for import versions, and `PasswordlessPasskeyLogin.tsx` became a prototype in migrating a component to fully SSR, no need for frontend parsing (via Babel) or bundling (via a custom-script, downloading frontend dependencies from esm.sh). Still, there are too many components to migrate like that, and it's all working, so I likely won't even attempt it unless there's some bug, new feature, or security vulnerability to address that warrants a rewrite of those. This also updates all dependencies (except `@libs/xml` because that still causes some breaking in DAV endpoints), including Deno! All other advantages can be seen in the related issues, and the breaking change this (v4.0.0) introduces is related simply to `config.email.tlsMode` (which had a deprecation warning throughout v3), and because, while I tested many things exhaustively, it's not impossible something broke that I didn't see. Closes #141 Closes #132
48 lines
3 KiB
TypeScript
48 lines
3 KiB
TypeScript
import { Config, PartialDeep } from './lib/types.ts';
|
|
|
|
/** Check the Config type for all the possible options and instructions. */
|
|
const config: PartialDeep<Config> = {
|
|
auth: {
|
|
baseUrl: 'http://localhost:8000', // The base URL of the application you use to access the app, i.e. "http://localhost:8000" or "https://cloud.example.com" (note authentication won't work without https:// except for localhost; SSO redirect, if enabled, will be this + /oidc/callback, so "https://cloud.example.com/oidc/callback")
|
|
allowSignups: false, // If true, anyone can sign up for an account. Note that it's always possible to sign up for the first user, and they will be an admin
|
|
enableEmailVerification: false, // If true, email verification will be required for signups (using SMTP settings below)
|
|
enableForeverSignup: true, // If true, all signups become active for 100 years
|
|
enableMultiFactor: false, // If true, users can enable multi-factor authentication (TOTP, Passkeys, or Email if the SMTP settings below are set)
|
|
// allowedCookieDomains: ['example.com', 'example.net'], // Can be set to allow more than the baseUrl's domain for session cookies
|
|
// skipCookieDomainSecurity: true, // If true, the cookie domain will not be strictly set and checked against. This skipping slightly reduces security, but is usually necessary for reverse proxies like Cloudflare Tunnel
|
|
// enableSingleSignOn: false, // If true, single sign-on will be enabled
|
|
// singleSignOnUrl: '', // The Discovery URL (AKA Issuer) of the identity/single sign-on provider
|
|
// singleSignOnEmailAttribute: 'email', // The attribute to prefer as email of the identity/single sign-on provider
|
|
// singleSignOnScopes: ['openid', 'email'], // The scopes to request from the identity/single sign-on provider
|
|
},
|
|
// files: {
|
|
// rootPath: 'data-files',
|
|
// allowPublicSharing: false, // If true, public file sharing will be allowed (still requires a user to enable sharing for a given file or directory)
|
|
// allowDirectoryDownloads: false, // If true, directories can be downloaded as zip files
|
|
// },
|
|
// core: {
|
|
// enabledApps: ['dashboard', 'files', 'news', 'notes', 'photos', 'expenses', 'contacts', 'calendar'], // The apps to show, in order of appearance in the header. The first app will be the default one shown after logging in. At least one is required.
|
|
// },
|
|
// visuals: {
|
|
// title: 'My own cloud',
|
|
// description: 'This is my own cloud!',
|
|
// helpEmail: '',
|
|
// },
|
|
// email: {
|
|
// from: 'help@bewcloud.com',
|
|
// host: 'localhost',
|
|
// port: 465,
|
|
// tlsMode: 'auto', // "auto" means "immediate" on port 465, "starttls" otherwise.
|
|
// tlsVerify: true, // Whether to verify the TLS certificate. If a string is used the hostname will be verified using that name.
|
|
// },
|
|
// contacts: {
|
|
// enableCardDavServer: true,
|
|
// cardDavUrl: 'http://radicale:5232',
|
|
// },
|
|
// calendar: {
|
|
// enableCalDavServer: true,
|
|
// calDavUrl: 'http://radicale:5232',
|
|
// },
|
|
};
|
|
|
|
export default config;
|