mirror of
https://github.com/bewcloud/bewcloud.git
synced 2026-03-11 08:54:49 +00:00
d547948865
* Expose new `tlsMode` and `tlsVerify` options for connecting to the mail submission agent * Make `tlsVerify` default to opportunistic StartTLS on ports other than 465 to prevent breaking change --------- Co-authored-by: Bruno Bernardino <me@brunobernardino.com>
48 lines
3.2 KiB
TypeScript
48 lines
3.2 KiB
TypeScript
import { Config, PartialDeep } from './lib/types.ts';
|
|
|
|
/** Check the Config type for all the possible options and instructions. */
|
|
const config: PartialDeep<Config> = {
|
|
auth: {
|
|
baseUrl: 'http://localhost:8000', // The base URL of the application you use to access the app, i.e. "http://localhost:8000" or "https://cloud.example.com" (note authentication won't work without https:// except for localhost; SSO redirect, if enabled, will be this + /oidc/callback, so "https://cloud.example.com/oidc/callback")
|
|
allowSignups: false, // If true, anyone can sign up for an account. Note that it's always possible to sign up for the first user, and they will be an admin
|
|
enableEmailVerification: false, // If true, email verification will be required for signups (using SMTP settings below)
|
|
enableForeverSignup: true, // If true, all signups become active for 100 years
|
|
enableMultiFactor: false, // If true, users can enable multi-factor authentication (TOTP, Passkeys, or Email if the SMTP settings below are set)
|
|
// allowedCookieDomains: ['example.com', 'example.net'], // Can be set to allow more than the baseUrl's domain for session cookies
|
|
// skipCookieDomainSecurity: true, // If true, the cookie domain will not be strictly set and checked against. This skipping slightly reduces security, but is usually necessary for reverse proxies like Cloudflare Tunnel
|
|
// enableSingleSignOn: false, // If true, single sign-on will be enabled
|
|
// singleSignOnUrl: '', // The Discovery URL (AKA Issuer) of the identity/single sign-on provider
|
|
// singleSignOnEmailAttribute: 'email', // The attribute to prefer as email of the identity/single sign-on provider
|
|
// singleSignOnScopes: ['openid', 'email'], // The scopes to request from the identity/single sign-on provider
|
|
},
|
|
// files: {
|
|
// rootPath: 'data-files',
|
|
// allowPublicSharing: false, // If true, public file sharing will be allowed (still requires a user to enable sharing for a given file or directory)
|
|
// allowDirectoryDownloads: false, // If true, directories can be downloaded as zip files
|
|
// },
|
|
// core: {
|
|
// enabledApps: ['dashboard', 'files', 'news', 'notes', 'photos', 'expenses', 'contacts', 'calendar'], // The apps to show, in order of appearance in the header. The first app will be the default one shown after logging in. At least one is required.
|
|
// },
|
|
// visuals: {
|
|
// title: 'My own cloud',
|
|
// description: 'This is my own cloud!',
|
|
// helpEmail: '',
|
|
// },
|
|
// email: {
|
|
// from: 'help@bewcloud.com',
|
|
// host: 'localhost',
|
|
// port: 465,
|
|
// tlsMode: "auto", // “auto” means “immediate” on port 465, “starttls” otherwise; `null` is legacy behaviour that will be removed in v4: on port 465 it also means “immediate”, otherwise it will use opportunistic StartTLS falling back to plain transmission
|
|
// tlsVerify: true, // Whether to verify the TLS certificate. If a string is used the hostname will be verified using that name.
|
|
// },
|
|
// contacts: {
|
|
// enableCardDavServer: true,
|
|
// cardDavUrl: 'http://radicale:5232',
|
|
// },
|
|
// calendar: {
|
|
// enableCalDavServer: true,
|
|
// calDavUrl: 'http://radicale:5232',
|
|
// },
|
|
};
|
|
|
|
export default config;
|