config.sample.php 72 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321
  1. <?php
  2. /**
  3. * This configuration file is only provided to document the different
  4. * configuration options and their usage.
  5. *
  6. * DO NOT COMPLETELY BASE YOUR CONFIGURATION FILE ON THIS SAMPLE. THIS MAY BREAK
  7. * YOUR INSTANCE. Instead, manually copy configuration switches that you
  8. * consider important for your instance to your working ``config.php``, and
  9. * apply configuration options that are pertinent for your instance.
  10. *
  11. * This file is used to generate the configuration documentation.
  12. * Please consider following requirements of the current parser:
  13. * * all comments need to start with `/**` and end with ` *\/` - each on their
  14. * own line
  15. * * add a `@see CONFIG_INDEX` to copy a previously described config option
  16. * also to this line
  17. * * everything between the ` *\/` and the next `/**` will be treated as the
  18. * config option
  19. * * use RST syntax
  20. */
  21. $CONFIG = [
  22. /**
  23. * Default Parameters
  24. *
  25. * These parameters are configured by the Nextcloud installer, and are required
  26. * for your Nextcloud server to operate.
  27. */
  28. /**
  29. * This is a unique identifier for your Nextcloud installation, created
  30. * automatically by the installer. This example is for documentation only,
  31. * and you should never use it because it will not work. A valid ``instanceid``
  32. * is created when you install Nextcloud.
  33. *
  34. * 'instanceid' => 'd3c944a9a',
  35. */
  36. 'instanceid' => '',
  37. /**
  38. * The salt used to hash all passwords, auto-generated by the Nextcloud
  39. * installer. (There are also per-user salts.) If you lose this salt you lose
  40. * all your passwords. This example is for documentation only, and you should
  41. * never use it.
  42. *
  43. * @deprecated This salt is deprecated and only used for legacy-compatibility,
  44. * developers should *NOT* use this value for anything nowadays.
  45. *
  46. * 'passwordsalt' => 'd3c944a9af095aa08f',
  47. */
  48. 'passwordsalt' => '',
  49. /**
  50. * Your list of trusted domains that users can log into. Specifying trusted
  51. * domains prevents host header poisoning. Do not remove this, as it performs
  52. * necessary security checks.
  53. * You can specify:
  54. *
  55. * - the exact hostname of your host or virtual host, e.g. demo.example.org.
  56. * - the exact hostname with permitted port, e.g. demo.example.org:443.
  57. * This disallows all other ports on this host
  58. * - use * as a wildcard, e.g. ubos-raspberry-pi*.local will allow
  59. * ubos-raspberry-pi.local and ubos-raspberry-pi-2.local
  60. * - the IP address with or without permitted port, e.g. [2001:db8::1]:8080
  61. * Using TLS certificates where commonName=<IP address> is deprecated
  62. */
  63. 'trusted_domains' =>
  64. [
  65. 'demo.example.org',
  66. 'otherdomain.example.org',
  67. '10.111.112.113',
  68. '[2001:db8::1]'
  69. ],
  70. /**
  71. * Where user files are stored. The SQLite database is also stored here, when
  72. * you use SQLite.
  73. *
  74. * Default to ``data/`` in the Nextcloud directory.
  75. */
  76. 'datadirectory' => '/var/www/nextcloud/data',
  77. /**
  78. * The current version number of your Nextcloud installation. This is set up
  79. * during installation and update, so you shouldn't need to change it.
  80. */
  81. 'version' => '',
  82. /**
  83. * Identifies the database used with this installation. See also config option
  84. * ``supportedDatabases``
  85. *
  86. * Available:
  87. * - sqlite3 (SQLite3)
  88. * - mysql (MySQL/MariaDB)
  89. * - pgsql (PostgreSQL)
  90. *
  91. * Defaults to ``sqlite3``
  92. */
  93. 'dbtype' => 'sqlite3',
  94. /**
  95. * Your host server name, for example ``localhost``, ``hostname``,
  96. * ``hostname.example.com``, or the IP address. To specify a port use
  97. * ``hostname:####``; to specify a Unix socket use
  98. * ``/path/to/directory/containing/socket`` e.g. ``/run/postgresql/``.
  99. */
  100. 'dbhost' => '',
  101. /**
  102. * The name of the Nextcloud database, which is set during installation. You
  103. * should not need to change this.
  104. */
  105. 'dbname' => 'nextcloud',
  106. /**
  107. * The user that Nextcloud uses to write to the database. This must be unique
  108. * across Nextcloud instances using the same SQL database. This is set up during
  109. * installation, so you shouldn't need to change it.
  110. */
  111. 'dbuser' => '',
  112. /**
  113. * The password for the database user. This is set up during installation, so
  114. * you shouldn't need to change it.
  115. */
  116. 'dbpassword' => '',
  117. /**
  118. * Prefix for the Nextcloud tables in the database.
  119. *
  120. * Default to ``oc_``
  121. */
  122. 'dbtableprefix' => '',
  123. /**
  124. * Enable persistent connexions to the database.
  125. * This setting uses the "persistent" option from doctrine dbal, which in turn
  126. * uses the PDO::ATTR_PERSISTENT option from de pdo driver.
  127. */
  128. 'dbpersistent' => '',
  129. /**
  130. * Indicates whether the Nextcloud instance was installed successfully; ``true``
  131. * indicates a successful installation, and ``false`` indicates an unsuccessful
  132. * installation.
  133. *
  134. * Defaults to ``false``
  135. */
  136. 'installed' => false,
  137. /**
  138. * User Experience
  139. *
  140. * These optional parameters control some aspects of the user interface. Default
  141. * values, where present, are shown.
  142. */
  143. /**
  144. * This sets the default language on your Nextcloud server, using ISO_639-1
  145. * language codes such as ``en`` for English, ``de`` for German, and ``fr`` for
  146. * French. It overrides automatic language detection on public pages like login
  147. * or shared items. User's language preferences configured under "personal ->
  148. * language" override this setting after they have logged in. Nextcloud has two
  149. * distinguished language codes for German, 'de' and 'de_DE'. 'de' is used for
  150. * informal German and 'de_DE' for formal German. By setting this value to 'de_DE'
  151. * you can enforce the formal version of German unless the user has chosen
  152. * something different explicitly.
  153. *
  154. * Defaults to ``en``
  155. */
  156. 'default_language' => 'en',
  157. /**
  158. * With this setting a language can be forced for all users. If a language is
  159. * forced, the users are also unable to change their language in the personal
  160. * settings. If users shall be unable to change their language, but users have
  161. * different languages, this value can be set to ``true`` instead of a language
  162. * code.
  163. *
  164. * Defaults to ``false``
  165. */
  166. 'force_language' => 'en',
  167. /**
  168. * This sets the default locale on your Nextcloud server, using ISO_639
  169. * language codes such as ``en`` for English, ``de`` for German, and ``fr`` for
  170. * French, and ISO-3166 country codes such as ``GB``, ``US``, ``CA``, as defined
  171. * in RFC 5646. It overrides automatic locale detection on public pages like
  172. * login or shared items. User's locale preferences configured under "personal
  173. * -> locale" override this setting after they have logged in.
  174. *
  175. * Defaults to ``en``
  176. */
  177. 'default_locale' => 'en_US',
  178. /**
  179. * This sets the default region for phone numbers on your Nextcloud server,
  180. * using ISO 3166-1 country codes such as ``DE`` for Germany, ``FR`` for France, …
  181. * It is required to allow inserting phone numbers in the user profiles starting
  182. * without the country code (e.g. +49 for Germany).
  183. *
  184. * No default value!
  185. */
  186. 'default_phone_region' => 'GB',
  187. /**
  188. * With this setting a locale can be forced for all users. If a locale is
  189. * forced, the users are also unable to change their locale in the personal
  190. * settings. If users shall be unable to change their locale, but users have
  191. * different languages, this value can be set to ``true`` instead of a locale
  192. * code.
  193. *
  194. * Defaults to ``false``
  195. */
  196. 'force_locale' => 'en_US',
  197. /**
  198. * Set the default app to open on login. Use the app names as they appear in the
  199. * URL after clicking them in the Apps menu, such as documents, calendar, and
  200. * gallery. You can use a comma-separated list of app names, so if the first
  201. * app is not enabled for a user then Nextcloud will try the second one, and so
  202. * on. If no enabled apps are found it defaults to the dashboard app.
  203. *
  204. * Defaults to ``dashboard,files``
  205. */
  206. 'defaultapp' => 'dashboard,files',
  207. /**
  208. * ``true`` enables the Help menu item in the user menu (top right of the
  209. * Nextcloud Web interface). ``false`` removes the Help item.
  210. */
  211. 'knowledgebaseenabled' => true,
  212. /**
  213. * ``true`` allows users to change their display names (on their Personal
  214. * pages), and ``false`` prevents them from changing their display names.
  215. */
  216. 'allow_user_to_change_display_name' => true,
  217. /**
  218. * Lifetime of the remember login cookie. This should be larger than the
  219. * session_lifetime. If it is set to 0 remember me is disabled.
  220. *
  221. * Defaults to ``60*60*24*15`` seconds (15 days)
  222. */
  223. 'remember_login_cookie_lifetime' => 60*60*24*15,
  224. /**
  225. * The lifetime of a session after inactivity.
  226. *
  227. * The maximum possible time is limited by the session.gc_maxlifetime php.ini setting
  228. * which would overwrite this option if it is less than the value in the config.php
  229. *
  230. * Defaults to ``60*60*24`` seconds (24 hours)
  231. */
  232. 'session_lifetime' => 60 * 60 * 24,
  233. /**
  234. * `true` enabled a relaxed session timeout, where the session timeout would no longer be
  235. * handled by Nextcloud but by either the PHP garbage collection or the expiration of
  236. * potential other session backends like redis.
  237. *
  238. * This may lead to sessions being available for longer than what session_lifetime uses but
  239. * comes with performance benefits as sessions are no longer a locking operation for concurrent
  240. * requests.
  241. */
  242. 'session_relaxed_expiry' => false,
  243. /**
  244. * Enable or disable session keep-alive when a user is logged in to the Web UI.
  245. * Enabling this sends a "heartbeat" to the server to keep it from timing out.
  246. *
  247. * Defaults to ``true``
  248. */
  249. 'session_keepalive' => true,
  250. /**
  251. * Enable or disable the automatic logout after session_lifetime, even if session
  252. * keepalive is enabled. This will make sure that an inactive browser will be logged out
  253. * even if requests to the server might extend the session lifetime.
  254. *
  255. * Defaults to ``false``
  256. */
  257. 'auto_logout' => false,
  258. /**
  259. * Enforce token authentication for clients, which blocks requests using the user
  260. * password for enhanced security. Users need to generate tokens in personal settings
  261. * which can be used as passwords on their clients.
  262. *
  263. * Defaults to ``false``
  264. */
  265. 'token_auth_enforced' => false,
  266. /**
  267. * The interval at which token activity should be updated.
  268. * Increasing this value means that the last activty on the security page gets
  269. * more outdated.
  270. *
  271. * Tokens are still checked every 5 minutes for validity
  272. * max value: 300
  273. *
  274. * Defaults to ``300``
  275. */
  276. 'token_auth_activity_update' => 60,
  277. /**
  278. * Whether the bruteforce protection shipped with Nextcloud should be enabled or not.
  279. *
  280. * Disabling this is discouraged for security reasons.
  281. *
  282. * Defaults to ``true``
  283. */
  284. 'auth.bruteforce.protection.enabled' => true,
  285. /**
  286. * By default, WebAuthn is available, but it can be explicitly disabled by admins
  287. */
  288. 'auth.webauthn.enabled' => true,
  289. /**
  290. * Whether encrypted password should be stored in the database
  291. *
  292. * The passwords are only decrypted using the login token stored uniquely in the
  293. * clients and allow to connect to external storages, autoconfigure mail account in
  294. * the mail app and periodically check if the password it still valid.
  295. *
  296. * This might be desirable to disable this functionality when using one time
  297. * passwords or when having a password policy enforcing long passwords (> 300
  298. * characters).
  299. *
  300. * By default, the passwords are stored encrypted in the database.
  301. */
  302. 'auth.storeCryptedPassword' => true,
  303. /**
  304. * By default, the login form is always available. There are cases (SSO) where an
  305. * admin wants to avoid users entering their credentials to the system if the SSO
  306. * app is unavailable.
  307. *
  308. * This will show an error. But the direct login still works with adding ?direct=1
  309. */
  310. 'hide_login_form' => false,
  311. /**
  312. * The directory where the skeleton files are located. These files will be
  313. * copied to the data directory of new users. Leave empty to not copy any
  314. * skeleton files.
  315. * ``{lang}`` can be used as a placeholder for the language of the user.
  316. * If the directory does not exist, it falls back to non dialect (from ``de_DE``
  317. * to ``de``). If that does not exist either, it falls back to ``default``
  318. *
  319. * Defaults to ``core/skeleton`` in the Nextcloud directory.
  320. */
  321. 'skeletondirectory' => '/path/to/nextcloud/core/skeleton',
  322. /**
  323. * The directory where the template files are located. These files will be
  324. * copied to the template directory of new users. Leave empty to not copy any
  325. * template files.
  326. * ``{lang}`` can be used as a placeholder for the language of the user.
  327. * If the directory does not exist, it falls back to non dialect (from ``de_DE``
  328. * to ``de``). If that does not exist either, it falls back to ``default``
  329. *
  330. * If this is not set creating a template directory will only happen if no custom
  331. * ``skeletondirectory`` is defined, otherwise the shipped templates will be used
  332. * to create a template directory for the user.
  333. */
  334. 'templatedirectory' => '/path/to/nextcloud/templates',
  335. /**
  336. * If your user backend does not allow password resets (e.g. when it's a
  337. * read-only user backend like LDAP), you can specify a custom link, where the
  338. * user is redirected to, when clicking the "reset password" link after a failed
  339. * login-attempt.
  340. * In case you do not want to provide any link, replace the url with 'disabled'
  341. */
  342. 'lost_password_link' => 'https://example.org/link/to/password/reset',
  343. /**
  344. * URL to use as target for the logo link in the header (top-left logo)
  345. *
  346. * Defaults to the base URL of your Nextcloud instance
  347. */
  348. 'logo_url' => 'https://example.org',
  349. /**
  350. * Mail Parameters
  351. *
  352. * These configure the email settings for Nextcloud notifications and password
  353. * resets.
  354. */
  355. /**
  356. * The return address that you want to appear on emails sent by the Nextcloud
  357. * server, for example ``nc-admin@example.com``, substituting your own domain,
  358. * of course.
  359. */
  360. 'mail_domain' => 'example.com',
  361. /**
  362. * FROM address that overrides the built-in ``sharing-noreply`` and
  363. * ``lostpassword-noreply`` FROM addresses.
  364. *
  365. * Defaults to different from addresses depending on the feature.
  366. */
  367. 'mail_from_address' => 'nextcloud',
  368. /**
  369. * Enable SMTP class debugging.
  370. *
  371. * Defaults to ``false``
  372. */
  373. 'mail_smtpdebug' => false,
  374. /**
  375. * Which mode to use for sending mail: ``sendmail``, ``smtp`` or ``qmail``.
  376. *
  377. * If you are using local or remote SMTP, set this to ``smtp``.
  378. *
  379. * For the ``sendmail`` option you need an installed and working email system on
  380. * the server, with ``/usr/sbin/sendmail`` installed on your Unix system.
  381. *
  382. * For ``qmail`` the binary is /var/qmail/bin/sendmail, and it must be installed
  383. * on your Unix system.
  384. *
  385. * Defaults to ``smtp``
  386. */
  387. 'mail_smtpmode' => 'smtp',
  388. /**
  389. * This depends on ``mail_smtpmode``. Specify the IP address of your mail
  390. * server host. This may contain multiple hosts separated by a semicolon. If
  391. * you need to specify the port number append it to the IP address separated by
  392. * a colon, like this: ``127.0.0.1:24``.
  393. *
  394. * Defaults to ``127.0.0.1``
  395. */
  396. 'mail_smtphost' => '127.0.0.1',
  397. /**
  398. * This depends on ``mail_smtpmode``. Specify the port for sending mail.
  399. *
  400. * Defaults to ``25``
  401. */
  402. 'mail_smtpport' => 25,
  403. /**
  404. * This depends on ``mail_smtpmode``. This sets the SMTP server timeout, in
  405. * seconds. You may need to increase this if you are running an anti-malware or
  406. * spam scanner.
  407. *
  408. * Defaults to ``10`` seconds
  409. */
  410. 'mail_smtptimeout' => 10,
  411. /**
  412. * This depends on ``mail_smtpmode``. Specify when you are using ``ssl`` for SSL/TLS or
  413. * ``tls`` for STARTTLS, or leave empty for no encryption.
  414. *
  415. * Defaults to ``''`` (empty string)
  416. */
  417. 'mail_smtpsecure' => '',
  418. /**
  419. * This depends on ``mail_smtpmode``. Change this to ``true`` if your mail
  420. * server requires authentication.
  421. *
  422. * Defaults to ``false``
  423. */
  424. 'mail_smtpauth' => false,
  425. /**
  426. * This depends on ``mail_smtpmode``. If SMTP authentication is required, choose
  427. * the authentication type as ``LOGIN`` or ``PLAIN``.
  428. *
  429. * Defaults to ``LOGIN``
  430. */
  431. 'mail_smtpauthtype' => 'LOGIN',
  432. /**
  433. * This depends on ``mail_smtpauth``. Specify the username for authenticating to
  434. * the SMTP server.
  435. *
  436. * Defaults to ``''`` (empty string)
  437. */
  438. 'mail_smtpname' => '',
  439. /**
  440. * This depends on ``mail_smtpauth``. Specify the password for authenticating to
  441. * the SMTP server.
  442. *
  443. * Default to ``''`` (empty string)
  444. */
  445. 'mail_smtppassword' => '',
  446. /**
  447. * Replaces the default mail template layout. This can be utilized if the
  448. * options to modify the mail texts with the theming app is not enough.
  449. * The class must extend ``\OC\Mail\EMailTemplate``
  450. */
  451. 'mail_template_class' => '\OC\Mail\EMailTemplate',
  452. /**
  453. * Email will be sent by default with an HTML and a plain text body. This option
  454. * allows to only send plain text emails.
  455. */
  456. 'mail_send_plaintext_only' => false,
  457. /**
  458. * This depends on ``mail_smtpmode``. Array of additional streams options that
  459. * will be passed to underlying Swift mailer implementation.
  460. * Defaults to an empty array.
  461. */
  462. 'mail_smtpstreamoptions' => [],
  463. /**
  464. * Which mode is used for sendmail/qmail: ``smtp`` or ``pipe``.
  465. *
  466. * For ``smtp`` the sendmail binary is started with the parameter ``-bs``:
  467. * - Use the SMTP protocol on standard input and output.
  468. *
  469. * For ``pipe`` the binary is started with the parameters ``-t``:
  470. * - Read message from STDIN and extract recipients.
  471. *
  472. * Defaults to ``smtp``
  473. */
  474. 'mail_sendmailmode' => 'smtp',
  475. /**
  476. * Proxy Configurations
  477. */
  478. /**
  479. * The automatic hostname detection of Nextcloud can fail in certain reverse
  480. * proxy and CLI/cron situations. This option allows you to manually override
  481. * the automatic detection; for example ``www.example.com``, or specify the port
  482. * ``www.example.com:8080``.
  483. */
  484. 'overwritehost' => '',
  485. /**
  486. * When generating URLs, Nextcloud attempts to detect whether the server is
  487. * accessed via ``https`` or ``http``. However, if Nextcloud is behind a proxy
  488. * and the proxy handles the ``https`` calls, Nextcloud would not know that
  489. * ``ssl`` is in use, which would result in incorrect URLs being generated.
  490. * Valid values are ``http`` and ``https``.
  491. */
  492. 'overwriteprotocol' => '',
  493. /**
  494. * Nextcloud attempts to detect the webroot for generating URLs automatically.
  495. * For example, if ``www.example.com/nextcloud`` is the URL pointing to the
  496. * Nextcloud instance, the webroot is ``/nextcloud``. When proxies are in use,
  497. * it may be difficult for Nextcloud to detect this parameter, resulting in
  498. * invalid URLs.
  499. */
  500. 'overwritewebroot' => '',
  501. /**
  502. * This option allows you to define a manual override condition as a regular
  503. * expression for the remote IP address. For example, defining a range of IP
  504. * addresses starting with ``10.0.0.`` and ending with 1 to 3:
  505. * ``^10\.0\.0\.[1-3]$``
  506. *
  507. * Defaults to ``''`` (empty string)
  508. */
  509. 'overwritecondaddr' => '',
  510. /**
  511. * Use this configuration parameter to specify the base URL for any URLs which
  512. * are generated within Nextcloud using any kind of command line tools (cron or
  513. * occ). The value should contain the full base URL:
  514. * ``https://www.example.com/nextcloud``
  515. *
  516. * Defaults to ``''`` (empty string)
  517. */
  518. 'overwrite.cli.url' => '',
  519. /**
  520. * To have clean URLs without `/index.php` this parameter needs to be configured.
  521. *
  522. * This parameter will be written as "RewriteBase" on update and installation of
  523. * Nextcloud to your `.htaccess` file. While this value is often simply the URL
  524. * path of the Nextcloud installation it cannot be set automatically properly in
  525. * every scenario and needs thus some manual configuration.
  526. *
  527. * In a standard Apache setup this usually equals the folder that Nextcloud is
  528. * accessible at. So if Nextcloud is accessible via "https://mycloud.org/nextcloud"
  529. * the correct value would most likely be "/nextcloud". If Nextcloud is running
  530. * under "https://mycloud.org/" then it would be "/".
  531. *
  532. * Note that the above rule is not valid in every case, as there are some rare setup
  533. * cases where this may not apply. However, to avoid any update problems this
  534. * configuration value is explicitly opt-in.
  535. *
  536. * After setting this value run `occ maintenance:update:htaccess`. Now, when the
  537. * following conditions are met Nextcloud URLs won't contain `index.php`:
  538. *
  539. * - `mod_rewrite` is installed
  540. * - `mod_env` is installed
  541. *
  542. * Defaults to ``''`` (empty string)
  543. */
  544. 'htaccess.RewriteBase' => '/',
  545. /**
  546. * For server setups, that don't have `mod_env` enabled or restricted (e.g. suEXEC)
  547. * this parameter has to be set to true and will assume mod_rewrite.
  548. *
  549. * Please check, if `mod_rewrite` is active and functional before setting this
  550. * parameter, and you updated your .htaccess with `occ maintenance:update:htaccess`.
  551. * Otherwise, your nextcloud installation might not be reachable anymore.
  552. * For example, try accessing resources by leaving out `index.php` in the URL.
  553. */
  554. 'htaccess.IgnoreFrontController' => false,
  555. /**
  556. * The URL of your proxy server, for example ``proxy.example.com:8081``.
  557. *
  558. * Note: Guzzle (the http library used by Nextcloud) is reading the environment
  559. * variables HTTP_PROXY (only for cli request), HTTPS_PROXY, and NO_PROXY by default.
  560. *
  561. * If you configure proxy with Nextcloud any default configuration by Guzzle
  562. * is overwritten. Make sure to set ``proxyexclude`` accordingly if necessary.
  563. *
  564. * Defaults to ``''`` (empty string)
  565. */
  566. 'proxy' => '',
  567. /**
  568. * The optional authentication for the proxy to use to connect to the internet.
  569. * The format is: ``username:password``.
  570. *
  571. * Defaults to ``''`` (empty string)
  572. */
  573. 'proxyuserpwd' => '',
  574. /**
  575. * List of host names that should not be proxied to.
  576. * For example: ``['.mit.edu', 'foo.com']``.
  577. *
  578. * Hint: Use something like ``explode(',', getenv('NO_PROXY'))`` to sync this
  579. * value with the global NO_PROXY option.
  580. *
  581. * Defaults to empty array.
  582. */
  583. 'proxyexclude' => [],
  584. /**
  585. * Allow remote servers with local addresses e.g. in federated shares, webcal services and more
  586. *
  587. * Defaults to false
  588. */
  589. 'allow_local_remote_servers' => true,
  590. /**
  591. * Deleted Items (trash bin)
  592. *
  593. * These parameters control the Deleted files app.
  594. */
  595. /**
  596. * If the trash bin app is enabled (default), this setting defines the policy
  597. * for when files and folders in the trash bin will be permanently deleted.
  598. * The app allows for two settings, a minimum time for trash bin retention,
  599. * and a maximum time for trash bin retention.
  600. *
  601. * Minimum time is the number of days a file will be kept, after which it
  602. * _may be_ deleted. A file may be deleted after the minimum number of days
  603. * is expired if space is needed. The file will not be deleted if space is
  604. * not needed.
  605. *
  606. * Whether "space is needed" depends on whether a user quota is defined or not:
  607. *
  608. * * If no user quota is defined, the available space on the Nextcloud data
  609. * partition sets the limit for the trashbin
  610. * (issues: see https://github.com/nextcloud/server/issues/28451).
  611. * * If a user quota is defined, 50% of the user's remaining quota space sets
  612. * the limit for the trashbin.
  613. *
  614. * Maximum time is the number of days at which it is _guaranteed
  615. * to be_ deleted. There is no further dependency on the available space.
  616. *
  617. * Both minimum and maximum times can be set together to explicitly define
  618. * file and folder deletion. For migration purposes, this setting is installed
  619. * initially set to "auto", which is equivalent to the default setting in
  620. * Nextcloud.
  621. *
  622. * Available values (D1 and D2 are configurable numbers):
  623. *
  624. * * ``auto``
  625. * default setting. keeps files and folders in the trash bin for 30 days
  626. * and automatically deletes anytime after that if space is needed (note:
  627. * files may not be deleted if space is not needed).
  628. * * ``D1, auto``
  629. * keeps files and folders in the trash bin for D1+ days, delete anytime if
  630. * space needed (note: files may not be deleted if space is not needed)
  631. * * ``auto, D2``
  632. * delete all files in the trash bin that are older than D2 days
  633. * automatically, delete other files anytime if space needed
  634. * * ``D1, D2``
  635. * keep files and folders in the trash bin for at least D1 days and
  636. * delete when exceeds D2 days (note: files will not be deleted automatically if space is needed)
  637. * * ``disabled``
  638. * trash bin auto clean disabled, files and folders will be kept forever
  639. *
  640. * Defaults to ``auto``
  641. */
  642. 'trashbin_retention_obligation' => 'auto',
  643. /**
  644. * File versions
  645. *
  646. * These parameters control the Versions app.
  647. */
  648. /**
  649. * If the versions app is enabled (default), this setting defines the policy
  650. * for when versions will be permanently deleted.
  651. * The app allows for two settings, a minimum time for version retention,
  652. * and a maximum time for version retention.
  653. * Minimum time is the number of days a version will be kept, after which it
  654. * may be deleted. Maximum time is the number of days at which it is guaranteed
  655. * to be deleted.
  656. * Both minimum and maximum times can be set together to explicitly define
  657. * version deletion. For migration purposes, this setting is installed
  658. * initially set to "auto", which is equivalent to the default setting in
  659. * Nextcloud.
  660. *
  661. * Available values:
  662. *
  663. * * ``auto``
  664. * default setting. Automatically expire versions according to expire
  665. * rules. Please refer to :doc:`../configuration_files/file_versioning` for
  666. * more information.
  667. * * ``D, auto``
  668. * keep versions at least for D days, apply expiration rules to all versions
  669. * that are older than D days
  670. * * ``auto, D``
  671. * delete all versions that are older than D days automatically, delete
  672. * other versions according to expire rules
  673. * * ``D1, D2``
  674. * keep versions for at least D1 days and delete when exceeds D2 days
  675. * * ``disabled``
  676. * versions auto clean disabled, versions will be kept forever
  677. *
  678. * Defaults to ``auto``
  679. */
  680. 'versions_retention_obligation' => 'auto',
  681. /**
  682. * Nextcloud Verifications
  683. *
  684. * Nextcloud performs several verification checks. There are two options,
  685. * ``true`` and ``false``.
  686. */
  687. /**
  688. * Checks an app before install whether it uses private APIs instead of the
  689. * proper public APIs. If this is set to true it will only allow to install or
  690. * enable apps that pass this check.
  691. *
  692. * Defaults to ``false``
  693. */
  694. 'appcodechecker' => true,
  695. /**
  696. * Check if Nextcloud is up-to-date and shows a notification if a new version is
  697. * available. It sends current version, php version, installation and last update
  698. * time and release channel to the updater server which responds with the latest
  699. * available version based on those metrics.
  700. *
  701. * Defaults to ``true``
  702. */
  703. 'updatechecker' => true,
  704. /**
  705. * URL that Nextcloud should use to look for updates
  706. *
  707. * Defaults to ``https://updates.nextcloud.com/updater_server/``
  708. */
  709. 'updater.server.url' => 'https://updates.nextcloud.com/updater_server/',
  710. /**
  711. * The channel that Nextcloud should use to look for updates
  712. *
  713. * Supported values:
  714. * - ``daily``
  715. * - ``beta``
  716. * - ``stable``
  717. */
  718. 'updater.release.channel' => 'stable',
  719. /**
  720. * Is Nextcloud connected to the Internet or running in a closed network?
  721. *
  722. * Defaults to ``true``
  723. */
  724. 'has_internet_connection' => true,
  725. /**
  726. * Which domains to request to determine the availability of an Internet
  727. * connection. If none of these hosts are reachable, the administration panel
  728. * will show a warning. Set to an empty list to not do any such checks (warning
  729. * will still be shown).
  730. * If no protocol is provided, both http and https will be tested.
  731. * For example, 'http://www.nextcloud.com' and 'https://www.nextcloud.com'
  732. * will be tested for 'www.nextcloud.com'
  733. * If a protocol is provided, only this one will be tested.
  734. *
  735. * Defaults to the following domains:
  736. *
  737. * - www.nextcloud.com
  738. * - www.startpage.com
  739. * - www.eff.org
  740. * - www.edri.org
  741. */
  742. 'connectivity_check_domains' => [
  743. 'www.nextcloud.com',
  744. 'www.startpage.com',
  745. 'www.eff.org',
  746. 'www.edri.org'
  747. ],
  748. /**
  749. * Allows Nextcloud to verify a working .well-known URL redirects. This is done
  750. * by attempting to make a request from JS to
  751. * https://your-domain.com/.well-known/caldav/
  752. *
  753. * Defaults to ``true``
  754. */
  755. 'check_for_working_wellknown_setup' => true,
  756. /**
  757. * This is a crucial security check on Apache servers that should always be set
  758. * to ``true``. This verifies that the ``.htaccess`` file is writable and works.
  759. * If it is not, then any options controlled by ``.htaccess``, such as large
  760. * file uploads, will not work. It also runs checks on the ``data/`` directory,
  761. * which verifies that it can't be accessed directly through the Web server.
  762. *
  763. * Defaults to ``true``
  764. */
  765. 'check_for_working_htaccess' => true,
  766. /**
  767. * In rare setups (e.g. on Openshift or Docker on Windows) the permissions check
  768. * might block the installation while the underlying system offers no means to
  769. * "correct" the permissions. In this case, set the value to false.
  770. *
  771. * In regular cases, if issues with permissions are encountered they should be
  772. * adjusted accordingly. Changing the flag is discouraged.
  773. *
  774. * Defaults to ``true``
  775. */
  776. 'check_data_directory_permissions' => true,
  777. /**
  778. * In certain environments it is desired to have a read-only configuration file.
  779. * When this switch is set to ``true``, writing to the config file will be
  780. * forbidden. Therefore, it will not be possible to configure all options via
  781. * the Web interface. Furthermore, when updating Nextcloud it is required to
  782. * make the configuration file writable again and to set this switch to ``false``
  783. * for the update process.
  784. *
  785. * Defaults to ``false``
  786. */
  787. 'config_is_read_only' => false,
  788. /**
  789. * Logging
  790. */
  791. /**
  792. * This parameter determines where the Nextcloud logs are sent.
  793. * ``file``: the logs are written to file ``nextcloud.log`` in the default
  794. * Nextcloud data directory. The log file can be changed with parameter
  795. * ``logfile``.
  796. * ``syslog``: the logs are sent to the system log. This requires a syslog daemon
  797. * to be active.
  798. * ``errorlog``: the logs are sent to the PHP ``error_log`` function.
  799. * ``systemd``: the logs are sent to the Systemd journal. This requires a system
  800. * that runs Systemd and the Systemd journal. The PHP extension ``systemd``
  801. * must be installed and active.
  802. *
  803. * Defaults to ``file``
  804. */
  805. 'log_type' => 'file',
  806. /**
  807. * This parameter determines where the audit logs are sent. See ``log_type`` for more information.
  808. *
  809. * Defaults to ``file``
  810. */
  811. 'log_type_audit' => 'file',
  812. /**
  813. * Name of the file to which the Nextcloud logs are written if parameter
  814. * ``log_type`` is set to ``file``.
  815. *
  816. * Defaults to ``[datadirectory]/nextcloud.log``
  817. */
  818. 'logfile' => '/var/log/nextcloud.log',
  819. /**
  820. * Name of the file to which the audit logs are written if parameter
  821. * ``log_type`` is set to ``file``.
  822. *
  823. * Defaults to ``[datadirectory]/audit.log``
  824. */
  825. 'logfile_audit' => '/var/log/audit.log',
  826. /**
  827. * Log file mode for the Nextcloud logging type in octal notation.
  828. *
  829. * Defaults to 0640 (writeable by user, readable by group).
  830. */
  831. 'logfilemode' => 0640,
  832. /**
  833. * Loglevel to start logging at. Valid values are: 0 = Debug, 1 = Info, 2 =
  834. * Warning, 3 = Error, and 4 = Fatal. The default value is Warning.
  835. *
  836. * Defaults to ``2``
  837. */
  838. 'loglevel' => 2,
  839. /**
  840. * Loglevel used by the frontend to start logging at. The same values as
  841. * for ``loglevel`` can be used. If not set it defaults to the value
  842. * configured for ``loglevel`` or Warning if that is not set either.
  843. *
  844. * Defaults to ``2``
  845. */
  846. 'loglevel_frontend' => 2,
  847. /**
  848. * If you maintain different instances and aggregate the logs, you may want
  849. * to distinguish between them. ``syslog_tag`` can be set per instance
  850. * with a unique id. Only available if ``log_type`` is set to ``syslog`` or
  851. * ``systemd``.
  852. *
  853. * The default value is ``Nextcloud``.
  854. */
  855. 'syslog_tag' => 'Nextcloud',
  856. /**
  857. * If you maintain different instances and aggregate the logs, you may want
  858. * to distinguish between them. ``syslog_tag_audit`` can be set per instance
  859. * with a unique id. Only available if ``log_type`` is set to ``syslog`` or
  860. * ``systemd``.
  861. *
  862. * The default value is the value of ``syslog_tag``.
  863. */
  864. 'syslog_tag_audit' => 'Nextcloud',
  865. /**
  866. * Log condition for log level increase based on conditions. Once one of these
  867. * conditions is met, the required log level is set to debug. This allows to
  868. * debug specific requests, users or apps
  869. *
  870. * Supported conditions:
  871. * - ``shared_secret``: if a request parameter with the name `log_secret` is set to
  872. * this value the condition is met
  873. * - ``users``: if the current request is done by one of the specified users,
  874. * this condition is met
  875. * - ``apps``: if the log message is invoked by one of the specified apps,
  876. * this condition is met
  877. *
  878. * Defaults to an empty array.
  879. */
  880. 'log.condition' => [
  881. 'shared_secret' => '57b58edb6637fe3059b3595cf9c41b9',
  882. 'users' => ['sample-user'],
  883. 'apps' => ['files'],
  884. ],
  885. /**
  886. * This uses PHP.date formatting; see https://www.php.net/manual/en/function.date.php
  887. *
  888. * Defaults to ISO 8601 ``2005-08-15T15:52:01+00:00`` - see \DateTime::ATOM
  889. * (https://www.php.net/manual/en/class.datetime.php#datetime.constants.atom)
  890. */
  891. 'logdateformat' => 'F d, Y H:i:s',
  892. /**
  893. * The timezone for logfiles. You may change this; see
  894. * https://www.php.net/manual/en/timezones.php
  895. *
  896. * Defaults to ``UTC``
  897. */
  898. 'logtimezone' => 'Europe/Berlin',
  899. /**
  900. * Append all database queries and parameters to the log file. Use this only for
  901. * debugging, as your logfile will become huge.
  902. */
  903. 'log_query' => false,
  904. /**
  905. * Enables log rotation and limits the total size of logfiles. Set it to 0 for
  906. * no rotation. Specify a size in bytes, for example 104857600 (100 megabytes
  907. * = 100 * 1024 * 1024 bytes). A new logfile is created with a new name when the
  908. * old logfile reaches your limit. If a rotated log file is already present, it
  909. * will be overwritten.
  910. *
  911. * Defaults to 100 MB
  912. */
  913. 'log_rotate_size' => 100 * 1024 * 1024,
  914. /**
  915. * Enable built-in profiler. Helpful when trying to debug performance
  916. * issues.
  917. *
  918. * Note that this has a performance impact and shouldn't be enabled
  919. * on production.
  920. */
  921. 'profiler' => false,
  922. /**
  923. * Alternate Code Locations
  924. *
  925. * Some Nextcloud code may be stored in alternate locations.
  926. */
  927. /**
  928. * This section is for configuring the download links for Nextcloud clients, as
  929. * seen in the first-run wizard and on Personal pages.
  930. *
  931. * Defaults to:
  932. * - Desktop client: ``https://nextcloud.com/install/#install-clients``
  933. * - Android client: ``https://play.google.com/store/apps/details?id=com.nextcloud.client``
  934. * - iOS client: ``https://itunes.apple.com/us/app/nextcloud/id1125420102?mt=8``
  935. * - iOS client app id: ``1125420102``
  936. */
  937. 'customclient_desktop' =>
  938. 'https://nextcloud.com/install/#install-clients',
  939. 'customclient_android' =>
  940. 'https://play.google.com/store/apps/details?id=com.nextcloud.client',
  941. 'customclient_ios' =>
  942. 'https://itunes.apple.com/us/app/nextcloud/id1125420102?mt=8',
  943. 'customclient_ios_appid' =>
  944. '1125420102',
  945. /**
  946. * Apps
  947. *
  948. * Options for the Apps folder, Apps store, and App code checker.
  949. */
  950. /**
  951. * When enabled, admins may install apps from the Nextcloud app store.
  952. *
  953. * Defaults to ``true``
  954. */
  955. 'appstoreenabled' => true,
  956. /**
  957. * Enables the installation of apps from a self-hosted apps store.
  958. * Requires that at least one of the configured apps directories is writeable.
  959. *
  960. * Defaults to ``https://apps.nextcloud.com/api/v1``
  961. */
  962. 'appstoreurl' => 'https://apps.nextcloud.com/api/v1',
  963. /**
  964. * Filters allowed installable apps from the appstore.
  965. * Empty array will prevent all apps from the store to be found.
  966. */
  967. 'appsallowlist' => [],
  968. /**
  969. * Use the ``apps_paths`` parameter to set the location of the Apps directory,
  970. * which should be scanned for available apps, and where user-specific apps
  971. * should be installed from the Apps store. The ``path`` defines the absolute
  972. * file system path to the app folder. The key ``url`` defines the HTTP Web path
  973. * to that folder, starting from the Nextcloud webroot. The key ``writable``
  974. * indicates if a Web server can write files to that folder.
  975. */
  976. 'apps_paths' => [
  977. [
  978. 'path'=> '/var/www/nextcloud/apps',
  979. 'url' => '/apps',
  980. 'writable' => true,
  981. ],
  982. ],
  983. /**
  984. * @see appcodechecker
  985. */
  986. /**
  987. * Previews
  988. *
  989. * Nextcloud supports previews of image files, the covers of MP3 files, and text
  990. * files. These options control enabling and disabling previews, and thumbnail
  991. * size.
  992. */
  993. /**
  994. * By default, Nextcloud can generate previews for the following filetypes:
  995. *
  996. * - Image files
  997. * - Covers of MP3 files
  998. * - Text documents
  999. *
  1000. * Valid values are ``true``, to enable previews, or
  1001. * ``false``, to disable previews
  1002. *
  1003. * Defaults to ``true``
  1004. */
  1005. 'enable_previews' => true,
  1006. /**
  1007. * Number of all preview requests being processed concurrently,
  1008. * including previews that need to be newly generated, and those that have
  1009. * been generated.
  1010. *
  1011. * This should be greater than 'preview_concurrency_new'.
  1012. * If unspecified, defaults to twice the value of 'preview_concurrency_new'.
  1013. */
  1014. 'preview_concurrency_all' => 8,
  1015. /**
  1016. * Number of new previews that are being concurrently generated.
  1017. *
  1018. * Depending on the max preview size set by 'preview_max_x' and 'preview_max_y',
  1019. * the generation process can consume considerable CPU and memory resources.
  1020. * It's recommended to limit this to be no greater than the number of CPU cores.
  1021. * If unspecified, defaults to the number of CPU cores, or 4 if that cannot
  1022. * be determined.
  1023. */
  1024. 'preview_concurrency_new' => 4,
  1025. /**
  1026. * The maximum width, in pixels, of a preview. A value of ``null`` means there
  1027. * is no limit.
  1028. *
  1029. * Defaults to ``4096``
  1030. */
  1031. 'preview_max_x' => 4096,
  1032. /**
  1033. * The maximum height, in pixels, of a preview. A value of ``null`` means there
  1034. * is no limit.
  1035. *
  1036. * Defaults to ``4096``
  1037. */
  1038. 'preview_max_y' => 4096,
  1039. /**
  1040. * Max file size for generating image previews with imagegd (default behavior).
  1041. * If the image is bigger, it'll try other preview generators, but will most
  1042. * likely either show the default mimetype icon or not display the image at all.
  1043. * Set to ``-1`` for no limit and try to generate image previews on all file sizes.
  1044. *
  1045. * Defaults to ``50`` megabytes
  1046. */
  1047. 'preview_max_filesize_image' => 50,
  1048. /**
  1049. * max memory for generating image previews with imagegd (default behavior)
  1050. * Reads the image dimensions from the header and assumes 32 bits per pixel.
  1051. * If creating the image would allocate more memory, preview generation will
  1052. * be disabled and the default mimetype icon is shown. Set to -1 for no limit.
  1053. *
  1054. * Defaults to ``128`` megabytes
  1055. */
  1056. 'preview_max_memory' => 128,
  1057. /**
  1058. * custom path for LibreOffice/OpenOffice binary
  1059. *
  1060. *
  1061. * Defaults to ``''`` (empty string)
  1062. */
  1063. 'preview_libreoffice_path' => '/usr/bin/libreoffice',
  1064. /**
  1065. * Use this if LibreOffice/OpenOffice requires additional arguments.
  1066. *
  1067. * Defaults to ``''`` (empty string)
  1068. */
  1069. 'preview_office_cl_parameters' =>
  1070. ' --headless --nologo --nofirststartwizard --invisible --norestore '.
  1071. '--convert-to png --outdir ',
  1072. /**
  1073. * Set the URL of the Imaginary service to send image previews to.
  1074. * Also requires the OC\Preview\Imaginary provider to be enabled.
  1075. *
  1076. * See https://github.com/h2non/imaginary
  1077. */
  1078. 'preview_imaginary_url' => 'http://previews_hpb:8088/',
  1079. /**
  1080. * Only register providers that have been explicitly enabled
  1081. *
  1082. * The following providers are disabled by default due to performance or privacy
  1083. * concerns:
  1084. *
  1085. * - OC\Preview\Illustrator
  1086. * - OC\Preview\HEIC
  1087. * - OC\Preview\Movie
  1088. * - OC\Preview\MSOffice2003
  1089. * - OC\Preview\MSOffice2007
  1090. * - OC\Preview\MSOfficeDoc
  1091. * - OC\Preview\PDF
  1092. * - OC\Preview\Photoshop
  1093. * - OC\Preview\Postscript
  1094. * - OC\Preview\StarOffice
  1095. * - OC\Preview\SVG
  1096. * - OC\Preview\TIFF
  1097. * - OC\Preview\Font
  1098. *
  1099. *
  1100. * Defaults to the following providers:
  1101. *
  1102. * - OC\Preview\BMP
  1103. * - OC\Preview\GIF
  1104. * - OC\Preview\JPEG
  1105. * - OC\Preview\MarkDown
  1106. * - OC\Preview\MP3
  1107. * - OC\Preview\PNG
  1108. * - OC\Preview\TXT
  1109. * - OC\Preview\XBitmap
  1110. * - OC\Preview\OpenDocument
  1111. * - OC\Preview\Krita
  1112. */
  1113. 'enabledPreviewProviders' => [
  1114. 'OC\Preview\PNG',
  1115. 'OC\Preview\JPEG',
  1116. 'OC\Preview\GIF',
  1117. 'OC\Preview\BMP',
  1118. 'OC\Preview\XBitmap',
  1119. 'OC\Preview\MP3',
  1120. 'OC\Preview\TXT',
  1121. 'OC\Preview\MarkDown',
  1122. 'OC\Preview\OpenDocument',
  1123. 'OC\Preview\Krita',
  1124. ],
  1125. /**
  1126. * LDAP
  1127. *
  1128. * Global settings used by LDAP User and Group Backend
  1129. */
  1130. /**
  1131. * defines the interval in minutes for the background job that checks user
  1132. * existence and marks them as ready to be cleaned up. The number is always
  1133. * minutes. Setting it to 0 disables the feature.
  1134. * See command line (occ) methods ``ldap:show-remnants`` and ``user:delete``
  1135. *
  1136. * Defaults to ``51`` minutes
  1137. */
  1138. 'ldapUserCleanupInterval' => 51,
  1139. /**
  1140. * Sort groups in the user settings by name instead of the user count
  1141. *
  1142. * By enabling this the user count beside the group name is disabled as well.
  1143. */
  1144. 'sort_groups_by_name' => false,
  1145. /**
  1146. * Comments
  1147. *
  1148. * Global settings for the Comments infrastructure
  1149. */
  1150. /**
  1151. * Replaces the default Comments Manager Factory. This can be utilized if an
  1152. * own or 3rdParty CommentsManager should be used that – for instance – uses the
  1153. * filesystem instead of the database to keep the comments.
  1154. *
  1155. * Defaults to ``\OC\Comments\ManagerFactory``
  1156. */
  1157. 'comments.managerFactory' => '\OC\Comments\ManagerFactory',
  1158. /**
  1159. * Replaces the default System Tags Manager Factory. This can be utilized if an
  1160. * own or 3rdParty SystemTagsManager should be used that – for instance – uses the
  1161. * filesystem instead of the database to keep the tags.
  1162. *
  1163. * Defaults to ``\OC\SystemTag\ManagerFactory``
  1164. */
  1165. 'systemtags.managerFactory' => '\OC\SystemTag\ManagerFactory',
  1166. /**
  1167. * Maintenance
  1168. *
  1169. * These options are for halting user activity when you are performing server
  1170. * maintenance.
  1171. */
  1172. /**
  1173. * Enable maintenance mode to disable Nextcloud
  1174. *
  1175. * If you want to prevent users from logging in to Nextcloud before you start
  1176. * doing some maintenance work, you need to set the value of the maintenance
  1177. * parameter to true. Please keep in mind that users who are already logged-in
  1178. * are kicked out of Nextcloud instantly.
  1179. *
  1180. * Defaults to ``false``
  1181. */
  1182. 'maintenance' => false,
  1183. /**
  1184. * UTC Hour for maintenance windows
  1185. *
  1186. * Some background jobs only run once a day. When an hour is defined for this config,
  1187. * the background jobs which advertise themselves as not time sensitive will be
  1188. * delayed during the "working" hours and only run in the 4 hours after the given time.
  1189. * This is e.g. used for activity expiration, suspicious login training and update checks.
  1190. *
  1191. * A value of 1 e.g. will only run these background jobs between 01:00am UTC and 05:00am UTC.
  1192. *
  1193. * Defaults to ``100`` which disables the feature
  1194. */
  1195. 'maintenance_window_start' => 1,
  1196. /**
  1197. * SSL
  1198. */
  1199. /**
  1200. * Extra SSL options to be used for configuration.
  1201. *
  1202. * Defaults to an empty array.
  1203. */
  1204. 'openssl' => [
  1205. 'config' => '/absolute/location/of/openssl.cnf',
  1206. ],
  1207. /**
  1208. * Memory caching backend configuration
  1209. *
  1210. * Available cache backends:
  1211. *
  1212. * * ``\OC\Memcache\APCu`` APC user backend
  1213. * * ``\OC\Memcache\ArrayCache`` In-memory array-based backend (not recommended)
  1214. * * ``\OC\Memcache\Memcached`` Memcached backend
  1215. * * ``\OC\Memcache\Redis`` Redis backend
  1216. *
  1217. * Advice on choosing between the various backends:
  1218. *
  1219. * * APCu should be easiest to install. Almost all distributions have packages.
  1220. * Use this for single user environment for all caches.
  1221. * * Use Redis or Memcached for distributed environments.
  1222. * For the local cache (you can configure two) take APCu.
  1223. */
  1224. /**
  1225. * Memory caching backend for locally stored data
  1226. *
  1227. * * Used for host-specific data, e.g. file paths
  1228. *
  1229. * Defaults to ``none``
  1230. */
  1231. 'memcache.local' => '\OC\Memcache\APCu',
  1232. /**
  1233. * Memory caching backend for distributed data
  1234. *
  1235. * * Used for installation-specific data, e.g. database caching
  1236. * * If unset, defaults to the value of memcache.local
  1237. *
  1238. * Defaults to ``none``
  1239. */
  1240. 'memcache.distributed' => '\OC\Memcache\Memcached',
  1241. /**
  1242. * Connection details for redis to use for memory caching in a single server configuration.
  1243. *
  1244. * For enhanced security it is recommended to configure Redis
  1245. * to require a password. See http://redis.io/topics/security
  1246. * for more information.
  1247. *
  1248. * We also support redis SSL/TLS encryption as of version 6.
  1249. * See https://redis.io/topics/encryption for more information.
  1250. */
  1251. 'redis' => [
  1252. 'host' => 'localhost', // can also be a unix domain socket: '/tmp/redis.sock'
  1253. 'port' => 6379,
  1254. 'timeout' => 0.0,
  1255. 'read_timeout' => 0.0,
  1256. 'user' => '', // Optional: if not defined, no password will be used.
  1257. 'password' => '', // Optional: if not defined, no password will be used.
  1258. 'dbindex' => 0, // Optional: if undefined SELECT will not run and will use Redis Server's default DB Index.
  1259. // If redis in-transit encryption is enabled, provide certificates
  1260. // SSL context https://www.php.net/manual/en/context.ssl.php
  1261. 'ssl_context' => [
  1262. 'local_cert' => '/certs/redis.crt',
  1263. 'local_pk' => '/certs/redis.key',
  1264. 'cafile' => '/certs/ca.crt'
  1265. ]
  1266. ],
  1267. /**
  1268. * Connection details for a Redis Cluster.
  1269. *
  1270. * Redis Cluster support requires the php module phpredis in version 3.0.0 or
  1271. * higher.
  1272. *
  1273. * Available failover modes:
  1274. * - \RedisCluster::FAILOVER_NONE - only send commands to master nodes (default)
  1275. * - \RedisCluster::FAILOVER_ERROR - failover to slaves for read commands if master is unavailable (recommended)
  1276. * - \RedisCluster::FAILOVER_DISTRIBUTE - randomly distribute read commands across master and slaves
  1277. *
  1278. * WARNING: FAILOVER_DISTRIBUTE is a not recommended setting, and we strongly
  1279. * suggest to not use it if you use Redis for file locking. Due to the way Redis
  1280. * is synchronized it could happen, that the read for an existing lock is
  1281. * scheduled to a slave that is not fully synchronized with the connected master
  1282. * which then causes a FileLocked exception.
  1283. *
  1284. * See https://redis.io/topics/cluster-spec for details about the Redis cluster
  1285. *
  1286. * Authentication works with phpredis version 4.2.1+. See
  1287. * https://github.com/phpredis/phpredis/commit/c5994f2a42b8a348af92d3acb4edff1328ad8ce1
  1288. */
  1289. 'redis.cluster' => [
  1290. 'seeds' => [ // provide some or all of the cluster servers to bootstrap discovery, port required
  1291. 'localhost:7000',
  1292. 'localhost:7001',
  1293. ],
  1294. 'timeout' => 0.0,
  1295. 'read_timeout' => 0.0,
  1296. 'failover_mode' => \RedisCluster::FAILOVER_ERROR,
  1297. 'user' => '', // Optional: if not defined, no password will be used.
  1298. 'password' => '', // Optional: if not defined, no password will be used.
  1299. // If redis in-transit encryption is enabled, provide certificates
  1300. // SSL context https://www.php.net/manual/en/context.ssl.php
  1301. 'ssl_context' => [
  1302. 'local_cert' => '/certs/redis.crt',
  1303. 'local_pk' => '/certs/redis.key',
  1304. 'cafile' => '/certs/ca.crt'
  1305. ]
  1306. ],
  1307. /**
  1308. * Server details for one or more memcached servers to use for memory caching.
  1309. */
  1310. 'memcached_servers' => [
  1311. // hostname, port and optional weight
  1312. // or path and port 0 for unix socket. Also see:
  1313. // https://www.php.net/manual/en/memcached.addservers.php
  1314. // https://www.php.net/manual/en/memcached.addserver.php
  1315. ['localhost', 11211],
  1316. //array('other.host.local', 11211),
  1317. ],
  1318. /**
  1319. * Connection options for memcached
  1320. */
  1321. 'memcached_options' => [
  1322. // Set timeouts to 50ms
  1323. \Memcached::OPT_CONNECT_TIMEOUT => 50,
  1324. \Memcached::OPT_RETRY_TIMEOUT => 50,
  1325. \Memcached::OPT_SEND_TIMEOUT => 50,
  1326. \Memcached::OPT_RECV_TIMEOUT => 50,
  1327. \Memcached::OPT_POLL_TIMEOUT => 50,
  1328. // Enable compression
  1329. \Memcached::OPT_COMPRESSION => true,
  1330. // Turn on consistent hashing
  1331. \Memcached::OPT_LIBKETAMA_COMPATIBLE => true,
  1332. // Enable Binary Protocol
  1333. \Memcached::OPT_BINARY_PROTOCOL => true,
  1334. // Binary serializer vill be enabled if the igbinary PECL module is available
  1335. //\Memcached::OPT_SERIALIZER => \Memcached::SERIALIZER_IGBINARY,
  1336. ],
  1337. /**
  1338. * Location of the cache folder, defaults to ``data/$user/cache`` where
  1339. * ``$user`` is the current user. When specified, the format will change to
  1340. * ``$cache_path/$user`` where ``$cache_path`` is the configured cache directory
  1341. * and ``$user`` is the user.
  1342. *
  1343. * Defaults to ``''`` (empty string)
  1344. */
  1345. 'cache_path' => '',
  1346. /**
  1347. * TTL of chunks located in the cache folder before they're removed by
  1348. * garbage collection (in seconds). Increase this value if users have
  1349. * issues uploading very large files via the Nextcloud Client as upload isn't
  1350. * completed within one day.
  1351. *
  1352. * Defaults to ``60*60*24`` (1 day)
  1353. */
  1354. 'cache_chunk_gc_ttl' => 60*60*24,
  1355. /**
  1356. * Using Object Store with Nextcloud
  1357. */
  1358. /**
  1359. * This example shows how to configure Nextcloud to store all files in a
  1360. * swift object storage.
  1361. *
  1362. * It is important to note that Nextcloud in object store mode will expect
  1363. * exclusive access to the object store container because it only stores the
  1364. * binary data for each file. The metadata is currently kept in the local
  1365. * database for performance reasons.
  1366. *
  1367. * WARNING: The current implementation is incompatible with any app that uses
  1368. * direct file IO and circumvents our virtual filesystem. That includes
  1369. * Encryption and Gallery. Gallery will store thumbnails directly in the
  1370. * filesystem and encryption will cause severe overhead because key files need
  1371. * to be fetched in addition to any requested file.
  1372. *
  1373. * One way to test is applying for a trystack account at http://trystack.org/
  1374. */
  1375. 'objectstore' => [
  1376. 'class' => 'OC\\Files\\ObjectStore\\Swift',
  1377. 'arguments' => [
  1378. // trystack will use your facebook id as the username
  1379. 'username' => 'facebook100000123456789',
  1380. // in the trystack dashboard go to user -> settings -> API Password to
  1381. // generate a password
  1382. 'password' => 'Secr3tPaSSWoRdt7',
  1383. // must already exist in the objectstore, name can be different
  1384. 'container' => 'nextcloud',
  1385. // prefix to prepend to the fileid, default is 'oid:urn:'
  1386. 'objectPrefix' => 'oid:urn:',
  1387. // create the container if it does not exist. default is false
  1388. 'autocreate' => true,
  1389. // required, dev-/trystack defaults to 'RegionOne'
  1390. 'region' => 'RegionOne',
  1391. // The Identity / Keystone endpoint
  1392. 'url' => 'http://8.21.28.222:5000/v2.0',
  1393. // uploadPartSize: size of the uploaded chunks, defaults to 524288000
  1394. 'uploadPartSize' => 524288000,
  1395. // required on dev-/trystack
  1396. 'tenantName' => 'facebook100000123456789',
  1397. // dev-/trystack uses swift by default, the lib defaults to 'cloudFiles'
  1398. // if omitted
  1399. 'serviceName' => 'swift',
  1400. // The Interface / url Type, optional
  1401. 'urlType' => 'internal'
  1402. ],
  1403. ],
  1404. /**
  1405. * To use swift V3
  1406. */
  1407. 'objectstore' => [
  1408. 'class' => 'OC\\Files\\ObjectStore\\Swift',
  1409. 'arguments' => [
  1410. 'autocreate' => true,
  1411. 'user' => [
  1412. 'name' => 'swift',
  1413. 'password' => 'swift',
  1414. 'domain' => [
  1415. 'name' => 'default',
  1416. ],
  1417. ],
  1418. 'scope' => [
  1419. 'project' => [
  1420. 'name' => 'service',
  1421. 'domain' => [
  1422. 'name' => 'default',
  1423. ],
  1424. ],
  1425. ],
  1426. 'tenantName' => 'service',
  1427. 'serviceName' => 'swift',
  1428. 'region' => 'regionOne',
  1429. 'url' => 'http://yourswifthost:5000/v3',
  1430. 'bucket' => 'nextcloud',
  1431. ],
  1432. ],
  1433. /**
  1434. * If this is set to true and a multibucket object store is configured then
  1435. * newly created previews are put into 256 dedicated buckets.
  1436. *
  1437. * Those buckets are named like the mulibucket version but with the postfix
  1438. * ``-preview-NUMBER`` where NUMBER is between 0 and 255.
  1439. *
  1440. * Keep in mind that only previews of files are put in there that don't have
  1441. * some already. Otherwise, the old bucket will be used.
  1442. *
  1443. * To migrate existing previews to this new multibucket distribution of previews
  1444. * use the occ command ``preview:repair``. For now this will only migrate
  1445. * previews that were generated before Nextcloud 19 in the flat
  1446. * ``appdata_INSTANCEID/previews/FILEID`` folder structure.
  1447. */
  1448. 'objectstore.multibucket.preview-distribution' => false,
  1449. /**
  1450. * Sharing
  1451. *
  1452. * Global settings for Sharing
  1453. */
  1454. /**
  1455. * Replaces the default Share Provider Factory. This can be utilized if
  1456. * own or 3rdParty Share Providers are used that – for instance – use the
  1457. * filesystem instead of the database to keep the share information.
  1458. *
  1459. * Defaults to ``\OC\Share20\ProviderFactory``
  1460. */
  1461. 'sharing.managerFactory' => '\OC\Share20\ProviderFactory',
  1462. /**
  1463. * Enables expiration for link share passwords sent by email (sharebymail).
  1464. * The passwords will expire after the configured interval, the users can
  1465. * still request a new one in the public link page.
  1466. */
  1467. 'sharing.enable_mail_link_password_expiration' => false,
  1468. /**
  1469. * Expiration interval for passwords, in seconds.
  1470. */
  1471. 'sharing.mail_link_password_expiration_interval' => 3600,
  1472. /**
  1473. * Define max number of results returned by the search for auto-completion of
  1474. * users, groups, etc. The value must not be lower than 0 (for unlimited).
  1475. *
  1476. * If more, different sources are requested (e.g. different user backends; or
  1477. * both users and groups), the value is applied per source and might not be
  1478. * truncated after collecting the results. I.e. more results can appear than
  1479. * configured here.
  1480. *
  1481. * Default is 25.
  1482. */
  1483. 'sharing.maxAutocompleteResults' => 25,
  1484. /**
  1485. * Define the minimum length of the search string before we start auto-completion
  1486. * Default is no limit (value set to 0)
  1487. */
  1488. 'sharing.minSearchStringLength' => 0,
  1489. /**
  1490. * Set to true to enable that internal shares need to be accepted by the users by default.
  1491. * Users can change this for their account in their personal sharing settings
  1492. */
  1493. 'sharing.enable_share_accept' => false,
  1494. /**
  1495. * Set to true to enforce that internal shares need to be accepted
  1496. */
  1497. 'sharing.force_share_accept' => false,
  1498. /**
  1499. * Set to ``false``, to prevent users from setting a custom share_folder
  1500. */
  1501. 'sharing.allow_custom_share_folder' => true,
  1502. /**
  1503. * Set to ``false``, to stop sending a mail when users receive a share
  1504. */
  1505. 'sharing.enable_share_mail' => true,
  1506. /**
  1507. * Set to true to enable the feature to add exceptions for share password enforcement
  1508. */
  1509. 'sharing.allow_disabled_password_enforcement_groups' => false,
  1510. /**
  1511. * Set to true to always transfer incoming shares by default
  1512. * when running "occ files:transfer-ownership".
  1513. * Defaults to false, so incoming shares are not transferred if not specifically requested
  1514. * by a command line argument.
  1515. */
  1516. 'transferIncomingShares' => false,
  1517. /**
  1518. * All other configuration options
  1519. */
  1520. /**
  1521. * Additional driver options for the database connection, e.g. to enable SSL
  1522. * encryption in MySQL or specify a custom wait timeout on a cheap hoster.
  1523. *
  1524. * When setting up TLS/SSL for encrypting the connections, you need to ensure that
  1525. * the passed keys and certificates are readable by the PHP process. In addition,
  1526. * PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT might need to be set to false, if the
  1527. * database servers certificates CN does not match with the hostname used to connect.
  1528. * The standard behavior here is different from the MySQL/MariaDB CLI client, which
  1529. * does not verify the server cert except --ssl-verify-server-cert is passed manually.
  1530. */
  1531. 'dbdriveroptions' => [
  1532. PDO::MYSQL_ATTR_SSL_CA => '/file/path/to/ca_cert.pem',
  1533. PDO::MYSQL_ATTR_SSL_KEY => '/file/path/to/mysql-client-key.pem',
  1534. PDO::MYSQL_ATTR_SSL_CERT => '/file/path/to/mysql-client-cert.pem',
  1535. PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT => false,
  1536. PDO::MYSQL_ATTR_INIT_COMMAND => 'SET wait_timeout = 28800'
  1537. ],
  1538. /**
  1539. * sqlite3 journal mode can be specified using this configuration parameter -
  1540. * can be 'WAL' or 'DELETE' see for more details https://www.sqlite.org/wal.html
  1541. */
  1542. 'sqlite.journal_mode' => 'DELETE',
  1543. /**
  1544. * During setup, if requirements are met (see below), this setting is set to true
  1545. * and MySQL can handle 4 byte characters instead of 3 byte characters.
  1546. *
  1547. * If you want to convert an existing 3-byte setup into a 4-byte setup please
  1548. * set the parameters in MySQL as mentioned below and run the migration command:
  1549. * ./occ db:convert-mysql-charset
  1550. * The config setting will be set automatically after a successful run.
  1551. *
  1552. * Consult the documentation for more details.
  1553. *
  1554. * MySQL requires a special setup for longer indexes (> 767 bytes) which are
  1555. * needed:
  1556. *
  1557. * [mysqld]
  1558. * innodb_large_prefix=ON
  1559. * innodb_file_format=Barracuda
  1560. * innodb_file_per_table=ON
  1561. *
  1562. * Tables will be created with
  1563. * * character set: utf8mb4
  1564. * * collation: utf8mb4_bin
  1565. * * row_format: dynamic
  1566. *
  1567. * See:
  1568. * https://dev.mysql.com/doc/refman/5.7/en/charset-unicode-utf8mb4.html
  1569. * https://dev.mysql.com/doc/refman/5.7/en/innodb-parameters.html#sysvar_innodb_large_prefix
  1570. * https://mariadb.com/kb/en/mariadb/xtradbinnodb-server-system-variables/#innodb_large_prefix
  1571. * http://www.tocker.ca/2013/10/31/benchmarking-innodb-page-compression-performance.html
  1572. * http://mechanics.flite.com/blog/2014/07/29/using-innodb-large-prefix-to-avoid-error-1071/
  1573. */
  1574. 'mysql.utf8mb4' => false,
  1575. /**
  1576. * For search queries in the database, a default collation – depending on the
  1577. * character set – is chosen. In some cases a different behaviour is desired,
  1578. * for instances when an accent sensitive search is desired.
  1579. *
  1580. * MariaDB and MySQL have an overlap in available collations, but also
  1581. * incompatible ones, also depending on the version of the database server.
  1582. *
  1583. * This option allows to override the automatic choice. Example:
  1584. *
  1585. * 'mysql.collation' => 'utf8mb4_0900_as_ci',
  1586. *
  1587. * This setting has no effect on setup or creating tables. In those cases
  1588. * always utf8[mb4]_bin is being used. This setting is only taken into
  1589. * consideration in SQL queries that utilize LIKE comparison operators.
  1590. */
  1591. 'mysql.collation' => null,
  1592. /**
  1593. * Database types that are supported for installation.
  1594. *
  1595. * Available:
  1596. * - sqlite (SQLite3)
  1597. * - mysql (MySQL)
  1598. * - pgsql (PostgreSQL)
  1599. * - oci (Oracle)
  1600. *
  1601. * Defaults to the following databases:
  1602. * - sqlite (SQLite3)
  1603. * - mysql (MySQL)
  1604. * - pgsql (PostgreSQL)
  1605. */
  1606. 'supportedDatabases' => [
  1607. 'sqlite',
  1608. 'mysql',
  1609. 'pgsql',
  1610. 'oci',
  1611. ],
  1612. /**
  1613. * Override where Nextcloud stores temporary files. Useful in situations where
  1614. * the system temporary directory is on a limited space ramdisk or is otherwise
  1615. * restricted, or if external storage which do not support streaming are in
  1616. * use.
  1617. *
  1618. * The Web server user must have write access to this directory.
  1619. */
  1620. 'tempdirectory' => '/tmp/nextcloudtemp',
  1621. /**
  1622. * Override where Nextcloud stores update files while updating. Useful in situations
  1623. * where the default `datadirectory` is on network disk like NFS, or is otherwise
  1624. * restricted. Defaults to the value of `datadirectory` if unset.
  1625. *
  1626. * The Web server user must have write access to this directory.
  1627. */
  1628. 'updatedirectory' => '',
  1629. /**
  1630. * Hashing
  1631. */
  1632. /**
  1633. * By default, Nextcloud will use the Argon2 password hashing if available.
  1634. * However, if for whatever reason you want to stick with the PASSWORD_DEFAULT
  1635. * of your php version. Then set the setting to true.
  1636. */
  1637. 'hashing_default_password' => false,
  1638. /**
  1639. *
  1640. * Nextcloud uses the Argon2 algorithm (with PHP >= 7.2) to create hashes by its
  1641. * own and exposes its configuration options as following. More information can
  1642. * be found at: https://www.php.net/manual/en/function.password-hash.php
  1643. */
  1644. /**
  1645. * The number of CPU threads to be used by the algorithm for computing a hash.
  1646. * The value must be an integer, and the minimum value is 1. Rationally it does
  1647. * not help to provide a number higher than the available threads on the machine.
  1648. * Values that undershoot the minimum will be ignored in favor of the minimum.
  1649. */
  1650. 'hashingThreads' => PASSWORD_ARGON2_DEFAULT_THREADS,
  1651. /**
  1652. * The memory in KiB to be used by the algorithm for computing a hash. The value
  1653. * must be an integer, and the minimum value is 8 times the number of CPU threads.
  1654. * Values that undershoot the minimum will be ignored in favor of the minimum.
  1655. */
  1656. 'hashingMemoryCost' => PASSWORD_ARGON2_DEFAULT_MEMORY_COST,
  1657. /**
  1658. * The number of iterations that are used by the algorithm for computing a hash.
  1659. * The value must be an integer, and the minimum value is 1. Values that
  1660. * undershoot the minimum will be ignored in favor of the minimum.
  1661. */
  1662. 'hashingTimeCost' => PASSWORD_ARGON2_DEFAULT_TIME_COST,
  1663. /**
  1664. * The hashing cost used by hashes generated by Nextcloud
  1665. * Using a higher value requires more time and CPU power to calculate the hashes
  1666. */
  1667. 'hashingCost' => 10,
  1668. /**
  1669. * Blacklist a specific file or files and disallow the upload of files
  1670. * with this name. ``.htaccess`` is blocked by default.
  1671. * WARNING: USE THIS ONLY IF YOU KNOW WHAT YOU ARE DOING.
  1672. *
  1673. * Defaults to ``array('.htaccess')``
  1674. */
  1675. 'blacklisted_files' => ['.htaccess'],
  1676. /**
  1677. * Define a default folder for shared files and folders other than root.
  1678. * Changes to this value will only have effect on new shares.
  1679. *
  1680. * Defaults to ``/``
  1681. */
  1682. 'share_folder' => '/',
  1683. /**
  1684. * If you are applying a theme to Nextcloud, enter the name of the theme here.
  1685. * The default location for themes is ``nextcloud/themes/``.
  1686. *
  1687. * Defaults to the theming app which is shipped since Nextcloud 9
  1688. */
  1689. 'theme' => '',
  1690. /**
  1691. * Enforce the user theme. This will disable the user theming settings
  1692. * This must be a valid ITheme ID.
  1693. * E.g. light, dark, highcontrast, dark-highcontrast...
  1694. */
  1695. 'enforce_theme' => '',
  1696. /**
  1697. * The default cipher for encrypting files. Currently supported are:
  1698. * - AES-256-CTR
  1699. * - AES-128-CTR
  1700. * - AES-256-CFB
  1701. * - AES-128-CFB
  1702. *
  1703. * Defaults to ``AES-256-CTR``
  1704. */
  1705. 'cipher' => 'AES-256-CTR',
  1706. /**
  1707. * Use the legacy base64 format for encrypted files instead of the more space-efficient
  1708. * binary format. The option affects only newly written files, existing encrypted files
  1709. * will not be touched and will remain readable whether they use the new format or not.
  1710. *
  1711. * Defaults to ``false``
  1712. */
  1713. 'encryption.use_legacy_base64_encoding' => false,
  1714. /**
  1715. * The minimum Nextcloud desktop client version that will be allowed to sync with
  1716. * this server instance. All connections made from earlier clients will be denied
  1717. * by the server. Defaults to the minimum officially supported Nextcloud desktop
  1718. * client version at the time of release of this server version.
  1719. *
  1720. * When changing this, note that older unsupported versions of the Nextcloud desktop
  1721. * client may not function as expected, and could lead to permanent data loss for
  1722. * clients or other unexpected results.
  1723. *
  1724. * Defaults to ``2.3.0``
  1725. */
  1726. 'minimum.supported.desktop.version' => '2.3.0',
  1727. /**
  1728. * Option to allow local storage to contain symlinks.
  1729. * WARNING: Not recommended. This would make it possible for Nextcloud to access
  1730. * files outside the data directory and could be considered a security risk.
  1731. *
  1732. * Defaults to ``false``
  1733. */
  1734. 'localstorage.allowsymlinks' => false,
  1735. /**
  1736. * Nextcloud overrides umask to ensure suitable access permissions
  1737. * regardless of webserver/php-fpm configuration and worker state.
  1738. * WARNING: Modifying this value has security implications and
  1739. * may soft-break the installation.
  1740. *
  1741. * Most installs shall not modify this value.
  1742. *
  1743. * Defaults to ``0022``
  1744. */
  1745. 'localstorage.umask' => 0022,
  1746. /**
  1747. * This options allows storage systems that don't allow to modify existing files
  1748. * to overcome this limitation by removing the files before overwriting.
  1749. *
  1750. * Defaults to ``false``
  1751. */
  1752. 'localstorage.unlink_on_truncate' => false,
  1753. /**
  1754. * EXPERIMENTAL: option whether to include external storage in quota
  1755. * calculation, defaults to false.
  1756. *
  1757. * Defaults to ``false``
  1758. */
  1759. 'quota_include_external_storage' => false,
  1760. /**
  1761. * When an external storage is unavailable for some reasons, it will be flagged
  1762. * as such for 10 minutes. When the trigger is a failed authentication attempt
  1763. * the delay is higher and can be controlled with this option. The motivation
  1764. * is to make account lock outs at Active Directories (and compatible) more
  1765. * unlikely.
  1766. *
  1767. * Defaults to ``1800`` (seconds)
  1768. */
  1769. 'external_storage.auth_availability_delay' => 1800,
  1770. /**
  1771. * Allows to create external storages of type "Local" in the web interface and APIs.
  1772. *
  1773. * When disabled, it is still possible to create local storages with occ using
  1774. * the following command:
  1775. *
  1776. * % php occ files_external:create /mountpoint local null::null -c datadir=/path/to/data
  1777. *
  1778. * Defaults to ``true``
  1779. *
  1780. */
  1781. 'files_external_allow_create_new_local' => true,
  1782. /**
  1783. * Specifies how often the local filesystem (the Nextcloud data/ directory, and
  1784. * NFS mounts in data/) is checked for changes made outside Nextcloud. This
  1785. * does not apply to external storage.
  1786. *
  1787. * 0 -> Never check the filesystem for outside changes, provides a performance
  1788. * increase when it's certain that no changes are made directly to the
  1789. * filesystem
  1790. *
  1791. * 1 -> Check each file or folder at most once per request, recommended for
  1792. * general use if outside changes might happen.
  1793. *
  1794. * Defaults to ``0``
  1795. */
  1796. 'filesystem_check_changes' => 0,
  1797. /**
  1798. * By default, Nextcloud will store the part files created during upload in the
  1799. * same storage as the upload target. Setting this to false will store the part
  1800. * files in the root of the users folder which might be required to work with certain
  1801. * external storage setups that have limited rename capabilities.
  1802. *
  1803. * Defaults to ``true``
  1804. */
  1805. 'part_file_in_storage' => true,
  1806. /**
  1807. * Where ``mount.json`` file should be stored, defaults to ``data/mount.json``
  1808. * in the Nextcloud directory.
  1809. *
  1810. * Defaults to ``data/mount.json`` in the Nextcloud directory.
  1811. */
  1812. 'mount_file' => '/var/www/nextcloud/data/mount.json',
  1813. /**
  1814. * When ``true``, prevent Nextcloud from changing the cache due to changes in
  1815. * the filesystem for all storage.
  1816. *
  1817. * Defaults to ``false``
  1818. */
  1819. 'filesystem_cache_readonly' => false,
  1820. /**
  1821. * Secret used by Nextcloud for various purposes, e.g. to encrypt data. If you
  1822. * lose this string there will be data corruption.
  1823. */
  1824. 'secret' => '',
  1825. /**
  1826. * List of trusted proxy servers
  1827. *
  1828. * You may set this to an array containing a combination of
  1829. * - IPv4 addresses, e.g. `192.168.2.123`
  1830. * - IPv4 ranges in CIDR notation, e.g. `192.168.2.0/24`
  1831. * - IPv6 addresses, e.g. `fd9e:21a7:a92c:2323::1`
  1832. *
  1833. * _(CIDR notation for IPv6 is currently work in progress and thus not
  1834. * available yet)_
  1835. *
  1836. * When an incoming request's `REMOTE_ADDR` matches any of the IP addresses
  1837. * specified here, it is assumed to be a proxy instead of a client. Thus, the
  1838. * client IP will be read from the HTTP header specified in
  1839. * `forwarded_for_headers` instead of from `REMOTE_ADDR`.
  1840. *
  1841. * So if you configure `trusted_proxies`, also consider setting
  1842. * `forwarded_for_headers` which otherwise defaults to `HTTP_X_FORWARDED_FOR`
  1843. * (the `X-Forwarded-For` header).
  1844. *
  1845. * Defaults to an empty array.
  1846. */
  1847. 'trusted_proxies' => ['203.0.113.45', '198.51.100.128', '192.168.2.0/24'],
  1848. /**
  1849. * Headers that should be trusted as client IP address in combination with
  1850. * `trusted_proxies`. If the HTTP header looks like 'X-Forwarded-For', then use
  1851. * 'HTTP_X_FORWARDED_FOR' here.
  1852. *
  1853. * If set incorrectly, a client can spoof their IP address as visible to
  1854. * Nextcloud, bypassing access controls and making logs useless!
  1855. *
  1856. * Defaults to ``'HTTP_X_FORWARDED_FOR'``
  1857. */
  1858. 'forwarded_for_headers' => ['HTTP_X_FORWARDED', 'HTTP_FORWARDED_FOR'],
  1859. /**
  1860. * max file size for animating gifs on public-sharing-site.
  1861. * If the gif is bigger, it'll show a static preview
  1862. *
  1863. * Value represents the maximum filesize in megabytes. Set to ``-1`` for
  1864. * no limit.
  1865. *
  1866. * Defaults to ``10`` megabytes
  1867. */
  1868. 'max_filesize_animated_gifs_public_sharing' => 10,
  1869. /**
  1870. * Enables transactional file locking.
  1871. * This is enabled by default.
  1872. *
  1873. * Prevents concurrent processes from accessing the same files
  1874. * at the same time. Can help prevent side effects that would
  1875. * be caused by concurrent operations. Mainly relevant for
  1876. * very large installations with many users working with
  1877. * shared files.
  1878. *
  1879. * Defaults to ``true``
  1880. */
  1881. 'filelocking.enabled' => true,
  1882. /**
  1883. * Set the lock's time-to-live in seconds.
  1884. *
  1885. * Any lock older than this will be automatically cleaned up.
  1886. *
  1887. * Defaults to ``60*60`` seconds (1 hour) or the php
  1888. * max_execution_time, whichever is higher.
  1889. */
  1890. 'filelocking.ttl' => 60*60,
  1891. /**
  1892. * Memory caching backend for file locking
  1893. *
  1894. * Because most memcache backends can clean values without warning using redis
  1895. * is highly recommended to *avoid data loss*.
  1896. *
  1897. * Defaults to ``none``
  1898. */
  1899. 'memcache.locking' => '\\OC\\Memcache\\Redis',
  1900. /**
  1901. * Enable locking debug logging
  1902. *
  1903. * Note that this can lead to a very large volume of log items being written which can lead
  1904. * to performance degradation and large log files on busy instance.
  1905. *
  1906. * Thus enabling this in production for longer periods of time is not recommended
  1907. * or should be used together with the ``log.condition`` setting.
  1908. */
  1909. 'filelocking.debug' => false,
  1910. /**
  1911. * Disable the web based updater
  1912. */
  1913. 'upgrade.disable-web' => false,
  1914. /**
  1915. * Set this Nextcloud instance to debugging mode
  1916. *
  1917. * Only enable this for local development and not in production environments
  1918. * This will disable the minifier and outputs some additional debug information
  1919. *
  1920. * Defaults to ``false``
  1921. */
  1922. 'debug' => false,
  1923. /**
  1924. * Sets the data-fingerprint of the current data served
  1925. *
  1926. * This is a property used by the clients to find out if a backup has been
  1927. * restored on the server. Once a backup is restored run
  1928. * ./occ maintenance:data-fingerprint
  1929. * To set this to a new value.
  1930. *
  1931. * Updating/Deleting this value can make connected clients stall until
  1932. * the user has resolved conflicts.
  1933. *
  1934. * Defaults to ``''`` (empty string)
  1935. */
  1936. 'data-fingerprint' => '',
  1937. /**
  1938. * This entry is just here to show a warning in case somebody copied the sample
  1939. * configuration. DO NOT ADD THIS SWITCH TO YOUR CONFIGURATION!
  1940. *
  1941. * If you, brave person, have read until here be aware that you should not
  1942. * modify *ANY* settings in this file without reading the documentation.
  1943. */
  1944. 'copied_sample_config' => true,
  1945. /**
  1946. * use a custom lookup server to publish user data
  1947. */
  1948. 'lookup_server' => 'https://lookup.nextcloud.com',
  1949. /**
  1950. * set to true if the server is used in a setup based on Nextcloud's Global Scale architecture
  1951. */
  1952. 'gs.enabled' => false,
  1953. /**
  1954. * by default federation is only used internally in a Global Scale setup
  1955. * If you want to allow federation outside your environment set it to 'global'
  1956. */
  1957. 'gs.federation' => 'internal',
  1958. /**
  1959. * List of incompatible user agents opted out from Same Site Cookie Protection.
  1960. * Some user agents are notorious and don't really properly follow HTTP
  1961. * specifications. For those, have an opt-out.
  1962. *
  1963. * WARNING: only use this if you know what you are doing
  1964. */
  1965. 'csrf.optout' => [
  1966. '/^WebDAVFS/', // OS X Finder
  1967. '/^Microsoft-WebDAV-MiniRedir/', // Windows webdav drive
  1968. ],
  1969. /**
  1970. * By default, there is on public pages a link shown that allows users to
  1971. * learn about the "simple sign up" - see https://nextcloud.com/signup/
  1972. *
  1973. * If this is set to "false" it will not show the link.
  1974. */
  1975. 'simpleSignUpLink.shown' => true,
  1976. /**
  1977. * By default, autocompletion is enabled for the login form on Nextcloud's login page.
  1978. * While this is enabled, browsers are allowed to "remember" login names and such.
  1979. * Some companies require it to be disabled to comply with their security policy.
  1980. *
  1981. * Simply set this property to "false", if you want to turn this feature off.
  1982. */
  1983. 'login_form_autocomplete' => true,
  1984. /**
  1985. * If your user is using an outdated or unsupported browser, a warning will be shown
  1986. * to offer some guidance to upgrade or switch and ensure a proper Nextcloud experience.
  1987. * They can still bypass it after they have read the warning.
  1988. *
  1989. * Simply set this property to "true", if you want to turn this feature off.
  1990. */
  1991. 'no_unsupported_browser_warning' => false,
  1992. /**
  1993. * Disable background scanning of files
  1994. *
  1995. * By default, a background job runs every 10 minutes and execute a background
  1996. * scan to sync filesystem and database. Only users with unscanned files
  1997. * (size < 0 in filecache) are included. Maximum 500 users per job.
  1998. *
  1999. * Defaults to ``true``
  2000. */
  2001. 'files_no_background_scan' => false,
  2002. /**
  2003. * Log all queries into a file
  2004. *
  2005. * Warning: This heavily decreases the performance of the server and is only
  2006. * meant to debug/profile the query interaction manually.
  2007. * Also, it might log sensitive data into a plain text file.
  2008. */
  2009. 'query_log_file' => '',
  2010. /**
  2011. * Log all redis requests into a file
  2012. *
  2013. * Warning: This heavily decreases the performance of the server and is only
  2014. * meant to debug/profile the redis interaction manually.
  2015. * Also, it might log sensitive data into a plain text file.
  2016. */
  2017. 'redis_log_file' => '',
  2018. /**
  2019. * Log all LDAP requests into a file
  2020. *
  2021. * Warning: This heavily decreases the performance of the server and is only
  2022. * meant to debug/profile the LDAP interaction manually.
  2023. * Also, it might log sensitive data into a plain text file.
  2024. */
  2025. 'ldap_log_file' => '',
  2026. /**
  2027. * Enable diagnostics event logging
  2028. *
  2029. * If enabled the timings of common execution steps will be logged to the
  2030. * Nextcloud log at debug level. log.condition is useful to enable this on
  2031. * production systems to only log under some conditions
  2032. */
  2033. 'diagnostics.logging' => true,
  2034. /**
  2035. * Limit diagnostics event logging to events longer than the configured threshold in ms
  2036. *
  2037. * when set to 0 no diagnostics events will be logged
  2038. */
  2039. 'diagnostics.logging.threshold' => 0,
  2040. /**
  2041. * Enable profile globally
  2042. *
  2043. * Defaults to ``true``
  2044. */
  2045. 'profile.enabled' => true,
  2046. /**
  2047. * Enable file metadata collection
  2048. *
  2049. * This is helpful for the mobile clients and will enable few optimizations in
  2050. * the future for the preview generation.
  2051. *
  2052. * Note that when enabled, this data will be stored in the database and might increase
  2053. * the database storage.
  2054. */
  2055. 'enable_file_metadata' => true,
  2056. /**
  2057. * Allows to override the default scopes for Account data.
  2058. * The list of overridable properties and valid values for scopes are in
  2059. * OCP\Accounts\IAccountManager. Values added here are merged with
  2060. * default values, which are in OC\Accounts\AccountManager
  2061. *
  2062. * For instance, if the phone property should default to the private scope
  2063. * instead of the local one:
  2064. * [
  2065. * \OCP\Accounts\IAccountManager::PROPERTY_PHONE => \OCP\Accounts\IAccountManager::SCOPE_PRIVATE
  2066. * ]
  2067. */
  2068. 'account_manager.default_property_scope' => [],
  2069. /**
  2070. * Enable the deprecated Projects feature,
  2071. * superseded by Related resources as of Nextcloud 25
  2072. *
  2073. * Defaults to ``false``
  2074. */
  2075. 'projects.enabled' => false,
  2076. /**
  2077. * Enable the bulk upload feature.
  2078. *
  2079. * Defaults to ``true``
  2080. */
  2081. 'bulkupload.enabled' => true,
  2082. /**
  2083. * Enables fetching open graph metadata from remote urls
  2084. *
  2085. * Defaults to ``true``
  2086. */
  2087. 'reference_opengraph' => true,
  2088. ];