1
0

config.sample.php 81 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592
  1. <?php
  2. /**
  3. * SPDX-FileCopyrightText: 2016-2024 Nextcloud GmbH and Nextcloud contributors
  4. * SPDX-FileCopyrightText: 2016 ownCloud, Inc.
  5. * SPDX-License-Identifier: AGPL-3.0-only
  6. */
  7. /**
  8. * This configuration file is only provided to document the different
  9. * configuration options and their usage.
  10. *
  11. * DO NOT COMPLETELY BASE YOUR CONFIGURATION FILE ON THIS SAMPLE. THIS MAY BREAK
  12. * YOUR INSTANCE. Instead, manually copy configuration switches that you
  13. * consider important for your instance to your working ``config.php``, and
  14. * apply configuration options that are pertinent for your instance.
  15. *
  16. * This file is used to generate the configuration documentation.
  17. * Please consider following requirements of the current parser:
  18. * * all comments need to start with `/**` and end with ` *\/` - each on their
  19. * own line
  20. * * add a `@see CONFIG_INDEX` to copy a previously described config option
  21. * also to this line
  22. * * everything between the ` *\/` and the next `/**` will be treated as the
  23. * config option
  24. * * use RST syntax
  25. */
  26. $CONFIG = [
  27. /**
  28. * Default Parameters
  29. *
  30. * These parameters are configured by the Nextcloud installer, and are required
  31. * for your Nextcloud server to operate.
  32. */
  33. /**
  34. * This is a unique identifier for your Nextcloud installation, created
  35. * automatically by the installer. This example is for documentation only,
  36. * and you should never use it because it will not work. A valid ``instanceid``
  37. * is created when you install Nextcloud.
  38. *
  39. * 'instanceid' => 'd3c944a9a',
  40. */
  41. 'instanceid' => '',
  42. /**
  43. * The salt used to hash all passwords, auto-generated by the Nextcloud
  44. * installer. (There are also per-user salts.) If you lose this salt you lose
  45. * all your passwords. This example is for documentation only, and you should
  46. * never use it.
  47. *
  48. * @deprecated This salt is deprecated and only used for legacy-compatibility,
  49. * developers should *NOT* use this value for anything nowadays.
  50. *
  51. * 'passwordsalt' => 'd3c944a9af095aa08f',
  52. */
  53. 'passwordsalt' => '',
  54. /**
  55. * Secret used by Nextcloud for various purposes, e.g. to encrypt data. If you
  56. * lose this string there will be data corruption.
  57. */
  58. 'secret' => '',
  59. /**
  60. * Your list of trusted domains that users can log into. Specifying trusted
  61. * domains prevents host header poisoning. Do not remove this, as it performs
  62. * necessary security checks.
  63. * You can specify:
  64. *
  65. * - the exact hostname of your host or virtual host, e.g. demo.example.org.
  66. * - the exact hostname with permitted port, e.g. demo.example.org:443.
  67. * This disallows all other ports on this host
  68. * - use * as a wildcard, e.g. ubos-raspberry-pi*.local will allow
  69. * ubos-raspberry-pi.local and ubos-raspberry-pi-2.local
  70. * - the IP address with or without permitted port, e.g. [2001:db8::1]:8080
  71. * Using TLS certificates where commonName=<IP address> is deprecated
  72. */
  73. 'trusted_domains' =>
  74. [
  75. 'demo.example.org',
  76. 'otherdomain.example.org',
  77. '10.111.112.113',
  78. '[2001:db8::1]'
  79. ],
  80. /**
  81. * Where user files are stored. The SQLite database is also stored here, when
  82. * you use SQLite.
  83. *
  84. * Default to ``data/`` in the Nextcloud directory.
  85. */
  86. 'datadirectory' => '/var/www/nextcloud/data',
  87. /**
  88. * The current version number of your Nextcloud installation. This is set up
  89. * during installation and update, so you shouldn't need to change it.
  90. */
  91. 'version' => '',
  92. /**
  93. * Identifies the database used with this installation. See also config option
  94. * ``supportedDatabases``
  95. *
  96. * Available:
  97. * - sqlite3 (SQLite3)
  98. * - mysql (MySQL/MariaDB)
  99. * - pgsql (PostgreSQL)
  100. *
  101. * Defaults to ``sqlite3``
  102. */
  103. 'dbtype' => 'sqlite3',
  104. /**
  105. * Your host server name, for example ``localhost``, ``hostname``,
  106. * ``hostname.example.com``, or the IP address.
  107. * To specify a port use ``hostname:####``, for IPv6 addresses use the URI notation ``[ip]:port``.
  108. * To specify a Unix socket use ``/path/to/directory/containing/socket``, e.g. ``/run/postgresql/``.
  109. */
  110. 'dbhost' => '',
  111. /**
  112. * The name of the Nextcloud database, which is set during installation. You
  113. * should not need to change this.
  114. */
  115. 'dbname' => 'nextcloud',
  116. /**
  117. * The user that Nextcloud uses to write to the database. This must be unique
  118. * across Nextcloud instances using the same SQL database. This is set up during
  119. * installation, so you shouldn't need to change it.
  120. */
  121. 'dbuser' => '',
  122. /**
  123. * The password for the database user. This is set up during installation, so
  124. * you shouldn't need to change it.
  125. */
  126. 'dbpassword' => '',
  127. /**
  128. * Prefix for the Nextcloud tables in the database.
  129. *
  130. * Default to ``oc_``
  131. */
  132. 'dbtableprefix' => 'oc_',
  133. /**
  134. * Enable persistent connexions to the database.
  135. * This setting uses the "persistent" option from doctrine dbal, which in turn
  136. * uses the PDO::ATTR_PERSISTENT option from the pdo driver.
  137. */
  138. 'dbpersistent' => '',
  139. /**
  140. * Specify read only replicas to be used by Nextcloud when querying the database
  141. */
  142. 'dbreplica' => [
  143. ['user' => 'nextcloud', 'password' => 'password1', 'host' => 'replica1', 'dbname' => ''],
  144. ['user' => 'nextcloud', 'password' => 'password2', 'host' => 'replica2', 'dbname' => ''],
  145. ],
  146. /**
  147. * Add request id to the database query in a comment.
  148. *
  149. * This can be enabled to assist in mapping database logs to Nextcloud logs.
  150. */
  151. 'db.log_request_id' => false,
  152. /**
  153. * Indicates whether the Nextcloud instance was installed successfully; ``true``
  154. * indicates a successful installation, and ``false`` indicates an unsuccessful
  155. * installation.
  156. *
  157. * Defaults to ``false``
  158. */
  159. 'installed' => false,
  160. /**
  161. * User Experience
  162. *
  163. * These optional parameters control some aspects of the user interface. Default
  164. * values, where present, are shown.
  165. */
  166. /**
  167. * This sets the default language on your Nextcloud server, using ISO_639-1
  168. * language codes such as ``en`` for English, ``de`` for German, and ``fr`` for
  169. * French. The default_language parameter is only used, when the browser does
  170. * not send any language, and the user hasn’t configured own language
  171. * preferences.
  172. *
  173. * Nextcloud has two distinguished language codes for German, 'de' and 'de_DE'.
  174. * 'de' is used for informal German and 'de_DE' for formal German. By setting
  175. * this value to 'de_DE' you can enforce the formal version of German unless
  176. * the user has chosen something different explicitly.
  177. *
  178. * Defaults to ``en``
  179. */
  180. 'default_language' => 'en',
  181. /**
  182. * With this setting a language can be forced for all users. If a language is
  183. * forced, the users are also unable to change their language in the personal
  184. * settings. If users shall be unable to change their language, but users have
  185. * different languages, this value can be set to ``true`` instead of a language
  186. * code.
  187. *
  188. * Defaults to ``false``
  189. */
  190. 'force_language' => 'en',
  191. /**
  192. * This sets the default locale on your Nextcloud server, using ISO_639
  193. * language codes such as ``en`` for English, ``de`` for German, and ``fr`` for
  194. * French, and ISO-3166 country codes such as ``GB``, ``US``, ``CA``, as defined
  195. * in RFC 5646. It overrides automatic locale detection on public pages like
  196. * login or shared items. User's locale preferences configured under "personal
  197. * -> locale" override this setting after they have logged in.
  198. *
  199. * Defaults to ``en``
  200. */
  201. 'default_locale' => 'en_US',
  202. /**
  203. * With this setting is possible to reduce the languages available in the
  204. * language chooser. The languages have to be set as array values using ISO_639-1
  205. * language codes such as ``en`` for English, ``de`` for German etc.
  206. *
  207. * For example: Set to ['de', 'fr'] to only allow German and French languages.
  208. */
  209. 'reduce_to_languages' => [],
  210. /**
  211. * This sets the default region for phone numbers on your Nextcloud server,
  212. * using ISO 3166-1 country codes such as ``DE`` for Germany, ``FR`` for France, …
  213. * It is required to allow inserting phone numbers in the user profiles starting
  214. * without the country code (e.g. +49 for Germany).
  215. *
  216. * No default value!
  217. */
  218. 'default_phone_region' => 'GB',
  219. /**
  220. * With this setting a locale can be forced for all users. If a locale is
  221. * forced, the users are also unable to change their locale in the personal
  222. * settings. If users shall be unable to change their locale, but users have
  223. * different languages, this value can be set to ``true`` instead of a locale
  224. * code.
  225. *
  226. * Defaults to ``false``
  227. */
  228. 'force_locale' => 'en_US',
  229. /**
  230. * This sets the default timezone on your Nextcloud server, using IANA
  231. * identifiers like ``Europe/Berlin`` or ``Pacific/Auckland``. The default
  232. * timezone parameter is only used when the timezone of the user can't be
  233. * determined.
  234. *
  235. * Defaults to ``UTC``
  236. */
  237. 'default_timezone' => 'Europe/Berlin',
  238. /**
  239. * ``true`` enables the Help menu item in the user menu (top right of the
  240. * Nextcloud Web interface). ``false`` removes the Help item.
  241. */
  242. 'knowledgebaseenabled' => true,
  243. /**
  244. * ``true`` embeds the documentation in an iframe inside Nextcloud.
  245. * ``false`` only shows buttons to the online documentation.
  246. */
  247. 'knowledgebase.embedded' => false,
  248. /**
  249. * ``true`` allows users to change their display names (on their Personal
  250. * pages), and ``false`` prevents them from changing their display names.
  251. */
  252. 'allow_user_to_change_display_name' => true,
  253. /**
  254. * The directory where the skeleton files are located. These files will be
  255. * copied to the data directory of new users. Leave empty to not copy any
  256. * skeleton files.
  257. * ``{lang}`` can be used as a placeholder for the language of the user.
  258. * If the directory does not exist, it falls back to non dialect (from ``de_DE``
  259. * to ``de``). If that does not exist either, it falls back to ``default``
  260. *
  261. * Defaults to ``core/skeleton`` in the Nextcloud directory.
  262. */
  263. 'skeletondirectory' => '/path/to/nextcloud/core/skeleton',
  264. /**
  265. * The directory where the template files are located. These files will be
  266. * copied to the template directory of new users. Leave empty to not copy any
  267. * template files.
  268. * ``{lang}`` can be used as a placeholder for the language of the user.
  269. * If the directory does not exist, it falls back to non dialect (from ``de_DE``
  270. * to ``de``). If that does not exist either, it falls back to ``default``
  271. *
  272. * If this is not set creating a template directory will only happen if no custom
  273. * ``skeletondirectory`` is defined, otherwise the shipped templates will be used
  274. * to create a template directory for the user.
  275. */
  276. 'templatedirectory' => '/path/to/nextcloud/templates',
  277. /**
  278. * User session
  279. */
  280. /**
  281. * Lifetime of the remember login cookie. This should be larger than the
  282. * session_lifetime. If it is set to 0 remember me is disabled.
  283. *
  284. * Defaults to ``60*60*24*15`` seconds (15 days)
  285. */
  286. 'remember_login_cookie_lifetime' => 60*60*24*15,
  287. /**
  288. * The lifetime of a session after inactivity.
  289. *
  290. * The maximum possible time is limited by the session.gc_maxlifetime php.ini setting
  291. * which would overwrite this option if it is less than the value in the config.php
  292. *
  293. * Defaults to ``60*60*24`` seconds (24 hours)
  294. */
  295. 'session_lifetime' => 60 * 60 * 24,
  296. /**
  297. * The timeout in seconds for requests to servers made by the DAV component (e.g., needed for federated shares).
  298. */
  299. 'davstorage.request_timeout' => 30,
  300. /**
  301. * The timeout in seconds for synchronizing address books, e.g. federated system address books (as run by `occ federation:sync-addressbooks`).
  302. *
  303. * Defaults to ``30`` seconds
  304. */
  305. 'carddav_sync_request_timeout' => 30,
  306. /**
  307. * `true` enabled a relaxed session timeout, where the session timeout would no longer be
  308. * handled by Nextcloud but by either the PHP garbage collection or the expiration of
  309. * potential other session backends like redis.
  310. *
  311. * This may lead to sessions being available for longer than what session_lifetime uses but
  312. * comes with performance benefits as sessions are no longer a locking operation for concurrent
  313. * requests.
  314. */
  315. 'session_relaxed_expiry' => false,
  316. /**
  317. * Enable or disable session keep-alive when a user is logged in to the Web UI.
  318. * Enabling this sends a "heartbeat" to the server to keep it from timing out.
  319. *
  320. * Defaults to ``true``
  321. */
  322. 'session_keepalive' => true,
  323. /**
  324. * Enable or disable the automatic logout after session_lifetime, even if session
  325. * keepalive is enabled. This will make sure that an inactive browser will log itself out
  326. * even if requests to the server might extend the session lifetime. Note: the logout is
  327. * handled on the client side. This is not a way to limit the duration of potentially
  328. * compromised sessions.
  329. *
  330. * Defaults to ``false``
  331. */
  332. 'auto_logout' => false,
  333. /**
  334. * Enforce token authentication for clients, which blocks requests using the user
  335. * password for enhanced security. Users need to generate tokens in personal settings
  336. * which can be used as passwords on their clients.
  337. *
  338. * Defaults to ``false``
  339. */
  340. 'token_auth_enforced' => false,
  341. /**
  342. * The interval at which token activity should be updated.
  343. * Increasing this value means that the last activity on the security page gets
  344. * more outdated.
  345. *
  346. * Tokens are still checked every 5 minutes for validity
  347. * max value: 300
  348. *
  349. * Defaults to ``60``
  350. */
  351. 'token_auth_activity_update' => 60,
  352. /**
  353. * Whether the brute force protection shipped with Nextcloud should be enabled or not.
  354. *
  355. * Disabling this is discouraged for security reasons.
  356. *
  357. * Defaults to ``true``
  358. */
  359. 'auth.bruteforce.protection.enabled' => true,
  360. /**
  361. * Whether the brute force protection should write into the database even when a memory cache is available
  362. *
  363. * Using the database is most likely worse for performance, but makes investigating
  364. * issues a lot easier as it's possible to look directly at the table to see all
  365. * logged remote addresses and actions.
  366. *
  367. * Defaults to ``false``
  368. */
  369. 'auth.bruteforce.protection.force.database' => false,
  370. /**
  371. * Whether the brute force protection shipped with Nextcloud should be set to testing mode.
  372. *
  373. * In testing mode brute force attempts are still recorded, but the requests do
  374. * not sleep/wait for the specified time. They will still abort with
  375. * "429 Too Many Requests" when the maximum delay is reached.
  376. * Enabling this is discouraged for security reasons
  377. * and should only be done for debugging and on CI when running tests.
  378. *
  379. * Defaults to ``false``
  380. */
  381. 'auth.bruteforce.protection.testing' => false,
  382. /**
  383. * Whether the rate limit protection shipped with Nextcloud should be enabled or not.
  384. *
  385. * Disabling this is discouraged for security reasons.
  386. *
  387. * Defaults to ``true``
  388. */
  389. 'ratelimit.protection.enabled' => true,
  390. /**
  391. * By default, WebAuthn is available, but it can be explicitly disabled by admins
  392. */
  393. 'auth.webauthn.enabled' => true,
  394. /**
  395. * Whether encrypted password should be stored in the database
  396. *
  397. * The passwords are only decrypted using the login token stored uniquely in the
  398. * clients and allow to connect to external storages, autoconfigure mail account in
  399. * the mail app and periodically check if the password it still valid.
  400. *
  401. * This might be desirable to disable this functionality when using one time
  402. * passwords or when having a password policy enforcing long passwords (> 300
  403. * characters).
  404. *
  405. * By default, the passwords are stored encrypted in the database.
  406. *
  407. * WARNING: If disabled, password changes on the user back-end (e.g. on LDAP) no
  408. * longer log connected clients out automatically. Users can still disconnect
  409. * the clients by deleting the app token from the security settings.
  410. */
  411. 'auth.storeCryptedPassword' => true,
  412. /**
  413. * By default, the login form is always available. There are cases (SSO) where an
  414. * admin wants to avoid users entering their credentials to the system if the SSO
  415. * app is unavailable.
  416. *
  417. * This will show an error. But the direct login still works with adding ?direct=1
  418. */
  419. 'hide_login_form' => false,
  420. /**
  421. * If your user backend does not allow password resets (e.g. when it's a
  422. * read-only user backend like LDAP), you can specify a custom link, where the
  423. * user is redirected to, when clicking the "reset password" link after a failed
  424. * login-attempt.
  425. * In case you do not want to provide any link, replace the url with 'disabled'
  426. */
  427. 'lost_password_link' => 'https://example.org/link/to/password/reset',
  428. /**
  429. * URL to use as target for the logo link in the header (top-left logo)
  430. *
  431. * Defaults to the base URL of your Nextcloud instance
  432. */
  433. 'logo_url' => 'https://example.org',
  434. /**
  435. * Mail Parameters
  436. *
  437. * These configure the email settings for Nextcloud notifications and password
  438. * resets.
  439. */
  440. /**
  441. * The return address that you want to appear on emails sent by the Nextcloud
  442. * server, for example ``nc-admin@example.com``, substituting your own domain,
  443. * of course.
  444. */
  445. 'mail_domain' => 'example.com',
  446. /**
  447. * FROM address that overrides the built-in ``sharing-noreply`` and
  448. * ``lostpassword-noreply`` FROM addresses.
  449. *
  450. * Defaults to different from addresses depending on the feature.
  451. */
  452. 'mail_from_address' => 'nextcloud',
  453. /**
  454. * Enable SMTP class debugging.
  455. * NOTE: ``loglevel`` will likely need to be adjusted too. See docs:
  456. * https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/email_configuration.html#enabling-debug-mode
  457. *
  458. * Defaults to ``false``
  459. */
  460. 'mail_smtpdebug' => false,
  461. /**
  462. * Which mode to use for sending mail: ``sendmail``, ``smtp`` or ``qmail``.
  463. *
  464. * If you are using local or remote SMTP, set this to ``smtp``.
  465. *
  466. * For the ``sendmail`` option you need an installed and working email system on
  467. * the server, with ``/usr/sbin/sendmail`` installed on your Unix system.
  468. *
  469. * For ``qmail`` the binary is /var/qmail/bin/sendmail, and it must be installed
  470. * on your Unix system.
  471. *
  472. * Defaults to ``smtp``
  473. */
  474. 'mail_smtpmode' => 'smtp',
  475. /**
  476. * This depends on ``mail_smtpmode``. Specify the IP address of your mail
  477. * server host. This may contain multiple hosts separated by a semicolon. If
  478. * you need to specify the port number append it to the IP address separated by
  479. * a colon, like this: ``127.0.0.1:24``.
  480. *
  481. * Defaults to ``127.0.0.1``
  482. */
  483. 'mail_smtphost' => '127.0.0.1',
  484. /**
  485. * This depends on ``mail_smtpmode``. Specify the port for sending mail.
  486. *
  487. * Defaults to ``25``
  488. */
  489. 'mail_smtpport' => 25,
  490. /**
  491. * This depends on ``mail_smtpmode``. This sets the SMTP server timeout, in
  492. * seconds. You may need to increase this if you are running an anti-malware or
  493. * spam scanner.
  494. *
  495. * Defaults to ``10`` seconds
  496. */
  497. 'mail_smtptimeout' => 10,
  498. /**
  499. * This depends on ``mail_smtpmode``. Specify ``ssl`` when you are using SSL/TLS. Any other value will be ignored.
  500. *
  501. * If the server advertises STARTTLS capabilities, they might be used, but they cannot be enforced by
  502. * this config option.
  503. *
  504. * Defaults to ``''`` (empty string)
  505. */
  506. 'mail_smtpsecure' => '',
  507. /**
  508. *
  509. * This depends on ``mail_smtpmode``. Change this to ``true`` if your mail
  510. * server requires authentication.
  511. *
  512. * Defaults to ``false``
  513. */
  514. 'mail_smtpauth' => false,
  515. /**
  516. * This depends on ``mail_smtpauth``. Specify the username for authenticating to
  517. * the SMTP server.
  518. *
  519. * Defaults to ``''`` (empty string)
  520. */
  521. 'mail_smtpname' => '',
  522. /**
  523. * This depends on ``mail_smtpauth``. Specify the password for authenticating to
  524. * the SMTP server.
  525. *
  526. * Default to ``''`` (empty string)
  527. */
  528. 'mail_smtppassword' => '',
  529. /**
  530. * Replaces the default mail template layout. This can be utilized if the
  531. * options to modify the mail texts with the theming app is not enough.
  532. * The class must extend ``\OC\Mail\EMailTemplate``
  533. */
  534. 'mail_template_class' => '\OC\Mail\EMailTemplate',
  535. /**
  536. * Email will be sent by default with an HTML and a plain text body. This option
  537. * allows to only send plain text emails.
  538. */
  539. 'mail_send_plaintext_only' => false,
  540. /**
  541. * This depends on ``mail_smtpmode``. Array of additional streams options that
  542. * will be passed to underlying Swift mailer implementation.
  543. * Defaults to an empty array.
  544. */
  545. 'mail_smtpstreamoptions' => [],
  546. /**
  547. * Which mode is used for sendmail/qmail: ``smtp`` or ``pipe``.
  548. *
  549. * For ``smtp`` the sendmail binary is started with the parameter ``-bs``:
  550. * - Use the SMTP protocol on standard input and output.
  551. *
  552. * For ``pipe`` the binary is started with the parameters ``-t``:
  553. * - Read message from STDIN and extract recipients.
  554. *
  555. * Defaults to ``smtp``
  556. */
  557. 'mail_sendmailmode' => 'smtp',
  558. /**
  559. * Proxy Configurations
  560. */
  561. /**
  562. * The automatic hostname detection of Nextcloud can fail in certain reverse
  563. * proxy and CLI/cron situations. This option allows you to manually override
  564. * the automatic detection; for example ``www.example.com``, or specify the port
  565. * ``www.example.com:8080``.
  566. */
  567. 'overwritehost' => '',
  568. /**
  569. * When generating URLs, Nextcloud attempts to detect whether the server is
  570. * accessed via ``https`` or ``http``. However, if Nextcloud is behind a proxy
  571. * and the proxy handles the ``https`` calls, Nextcloud would not know that
  572. * ``ssl`` is in use, which would result in incorrect URLs being generated.
  573. * Valid values are ``http`` and ``https``.
  574. */
  575. 'overwriteprotocol' => '',
  576. /**
  577. * Nextcloud attempts to detect the webroot for generating URLs automatically.
  578. * For example, if ``www.example.com/nextcloud`` is the URL pointing to the
  579. * Nextcloud instance, the webroot is ``/nextcloud``. When proxies are in use,
  580. * it may be difficult for Nextcloud to detect this parameter, resulting in
  581. * invalid URLs.
  582. */
  583. 'overwritewebroot' => '',
  584. /**
  585. * This option allows you to define a manual override condition as a regular
  586. * expression for the remote IP address. For example, defining a range of IP
  587. * addresses starting with ``10.0.0.`` and ending with 1 to 3:
  588. * ``^10\.0\.0\.[1-3]$``
  589. *
  590. * Defaults to ``''`` (empty string)
  591. */
  592. 'overwritecondaddr' => '',
  593. /**
  594. * Use this configuration parameter to specify the base URL for any URLs which
  595. * are generated within Nextcloud using any kind of command line tools (cron or
  596. * occ). The value should contain the full base URL:
  597. * ``https://www.example.com/nextcloud``
  598. * Please make sure to set the value to the URL that your users mainly use to access this Nextcloud.
  599. * Otherwise there might be problems with the URL generation via cron.
  600. *
  601. * Defaults to ``''`` (empty string)
  602. */
  603. 'overwrite.cli.url' => '',
  604. /**
  605. * To have clean URLs without `/index.php` this parameter needs to be configured.
  606. *
  607. * This parameter will be written as "RewriteBase" on update and installation of
  608. * Nextcloud to your `.htaccess` file. While this value is often simply the URL
  609. * path of the Nextcloud installation it cannot be set automatically properly in
  610. * every scenario and needs thus some manual configuration.
  611. *
  612. * In a standard Apache setup this usually equals the folder that Nextcloud is
  613. * accessible at. So if Nextcloud is accessible via "https://mycloud.org/nextcloud"
  614. * the correct value would most likely be "/nextcloud". If Nextcloud is running
  615. * under "https://mycloud.org/" then it would be "/".
  616. *
  617. * Note that the above rule is not valid in every case, as there are some rare setup
  618. * cases where this may not apply. However, to avoid any update problems this
  619. * configuration value is explicitly opt-in.
  620. *
  621. * After setting this value run `occ maintenance:update:htaccess`. Now, when the
  622. * following conditions are met Nextcloud URLs won't contain `index.php`:
  623. *
  624. * - `mod_rewrite` is installed
  625. * - `mod_env` is installed
  626. *
  627. * Defaults to ``''`` (empty string)
  628. */
  629. 'htaccess.RewriteBase' => '/',
  630. /**
  631. * For server setups, that don't have `mod_env` enabled or restricted (e.g. suEXEC)
  632. * this parameter has to be set to true and will assume mod_rewrite.
  633. *
  634. * Please check, if `mod_rewrite` is active and functional before setting this
  635. * parameter, and you updated your .htaccess with `occ maintenance:update:htaccess`.
  636. * Otherwise, your nextcloud installation might not be reachable anymore.
  637. * For example, try accessing resources by leaving out `index.php` in the URL.
  638. */
  639. 'htaccess.IgnoreFrontController' => false,
  640. /**
  641. * The URL of your proxy server, for example ``proxy.example.com:8081``.
  642. *
  643. * Note: Guzzle (the http library used by Nextcloud) is reading the environment
  644. * variables HTTP_PROXY (only for cli request), HTTPS_PROXY, and NO_PROXY by default.
  645. *
  646. * If you configure proxy with Nextcloud any default configuration by Guzzle
  647. * is overwritten. Make sure to set ``proxyexclude`` accordingly if necessary.
  648. *
  649. * Defaults to ``''`` (empty string)
  650. */
  651. 'proxy' => '',
  652. /**
  653. * The optional authentication for the proxy to use to connect to the internet.
  654. * The format is: ``username:password``.
  655. *
  656. * Defaults to ``''`` (empty string)
  657. */
  658. 'proxyuserpwd' => '',
  659. /**
  660. * List of host names that should not be proxied to.
  661. * For example: ``['.mit.edu', 'foo.com']``.
  662. *
  663. * Hint: Use something like ``explode(',', getenv('NO_PROXY'))`` to sync this
  664. * value with the global NO_PROXY option.
  665. *
  666. * Defaults to empty array.
  667. */
  668. 'proxyexclude' => [],
  669. /**
  670. * Allow remote servers with local addresses e.g. in federated shares, webcal services and more
  671. *
  672. * Defaults to false
  673. */
  674. 'allow_local_remote_servers' => true,
  675. /**
  676. * Deleted Items (trash bin)
  677. *
  678. * These parameters control the Deleted files app.
  679. */
  680. /**
  681. * If the trash bin app is enabled (default), this setting defines the policy
  682. * for when files and folders in the trash bin will be permanently deleted.
  683. *
  684. * If the user quota limit is exceeded due to deleted files in the trash bin,
  685. * retention settings will be ignored and files will be cleaned up until
  686. * the quota requirements are met.
  687. *
  688. * The app allows for two settings, a minimum time for trash bin retention,
  689. * and a maximum time for trash bin retention.
  690. *
  691. * Minimum time is the number of days a file will be kept, after which it
  692. * *may be* deleted. A file may be deleted after the minimum number of days
  693. * is expired if space is needed. The file will not be deleted if space is
  694. * not needed.
  695. *
  696. * Whether "space is needed" depends on whether a user quota is defined or not:
  697. *
  698. * * If no user quota is defined, the available space on the Nextcloud data
  699. * partition sets the limit for the trashbin
  700. * (issues: see https://github.com/nextcloud/server/issues/28451).
  701. * * If a user quota is defined, 50% of the user's remaining quota space sets
  702. * the limit for the trashbin.
  703. *
  704. * Maximum time is the number of days at which it is *guaranteed
  705. * to be* deleted. There is no further dependency on the available space.
  706. *
  707. * Both minimum and maximum times can be set together to explicitly define
  708. * file and folder deletion. For migration purposes, this setting is installed
  709. * initially set to "auto", which is equivalent to the default setting in
  710. * Nextcloud.
  711. *
  712. * Available values (D1 and D2 are configurable numbers):
  713. *
  714. * * ``auto``
  715. * default setting. keeps files and folders in the trash bin for 30 days
  716. * and automatically deletes anytime after that if space is needed (note:
  717. * files may not be deleted if space is not needed).
  718. * * ``D1, auto``
  719. * keeps files and folders in the trash bin for D1+ days, delete anytime if
  720. * space needed (note: files may not be deleted if space is not needed)
  721. * * ``auto, D2``
  722. * delete all files in the trash bin that are older than D2 days
  723. * automatically, delete other files anytime if space needed
  724. * * ``D1, D2``
  725. * keep files and folders in the trash bin for at least D1 days and
  726. * delete when exceeds D2 days (note: files will not be deleted automatically if space is needed)
  727. * * ``disabled``
  728. * trash bin auto clean disabled, files and folders will be kept forever
  729. *
  730. * Defaults to ``auto``
  731. */
  732. 'trashbin_retention_obligation' => 'auto',
  733. /**
  734. * File versions
  735. *
  736. * These parameters control the Versions app.
  737. */
  738. /**
  739. * If the versions app is enabled (default), this setting defines the policy
  740. * for when versions will be permanently deleted.
  741. * The app allows for two settings, a minimum time for version retention,
  742. * and a maximum time for version retention.
  743. * Minimum time is the number of days a version will be kept, after which it
  744. * may be deleted. Maximum time is the number of days at which it is guaranteed
  745. * to be deleted.
  746. * Both minimum and maximum times can be set together to explicitly define
  747. * version deletion. For migration purposes, this setting is installed
  748. * initially set to "auto", which is equivalent to the default setting in
  749. * Nextcloud.
  750. *
  751. * Available values:
  752. *
  753. * * ``auto``
  754. * default setting. Automatically expire versions according to expire
  755. * rules. Please refer to :doc:`../configuration_files/file_versioning` for
  756. * more information.
  757. * * ``D, auto``
  758. * keep versions at least for D days, apply expiration rules to all versions
  759. * that are older than D days
  760. * * ``auto, D``
  761. * delete all versions that are older than D days automatically, delete
  762. * other versions according to expire rules
  763. * * ``D1, D2``
  764. * keep versions for at least D1 days and delete when exceeds D2 days
  765. * * ``disabled``
  766. * versions auto clean disabled, versions will be kept forever
  767. *
  768. * Defaults to ``auto``
  769. */
  770. 'versions_retention_obligation' => 'auto',
  771. /**
  772. * Nextcloud Verifications
  773. *
  774. * Nextcloud performs several verification checks. There are two options,
  775. * ``true`` and ``false``.
  776. */
  777. /**
  778. * Checks an app before install whether it uses private APIs instead of the
  779. * proper public APIs. If this is set to true it will only allow to install or
  780. * enable apps that pass this check.
  781. *
  782. * Defaults to ``false``
  783. */
  784. 'appcodechecker' => true,
  785. /**
  786. * Check if Nextcloud is up-to-date and shows a notification if a new version is
  787. * available. It sends current version, php version, installation and last update
  788. * time and release channel to the updater server which responds with the latest
  789. * available version based on those metrics.
  790. *
  791. * Defaults to ``true``
  792. */
  793. 'updatechecker' => true,
  794. /**
  795. * URL that Nextcloud should use to look for updates
  796. *
  797. * Defaults to ``https://updates.nextcloud.com/updater_server/``
  798. */
  799. 'updater.server.url' => 'https://updates.nextcloud.com/updater_server/',
  800. /**
  801. * The channel that Nextcloud should use to look for updates
  802. *
  803. * Supported values:
  804. *
  805. * - ``daily``
  806. * - ``beta``
  807. * - ``stable``
  808. */
  809. 'updater.release.channel' => 'stable',
  810. /**
  811. * Is Nextcloud connected to the Internet or running in a closed network?
  812. *
  813. * Defaults to ``true``
  814. */
  815. 'has_internet_connection' => true,
  816. /**
  817. * Which domains to request to determine the availability of an Internet
  818. * connection. If none of these hosts are reachable, the administration panel
  819. * will show a warning. Set to an empty list to not do any such checks (warning
  820. * will still be shown).
  821. * If no protocol is provided, both http and https will be tested.
  822. * For example, 'http://www.nextcloud.com' and 'https://www.nextcloud.com'
  823. * will be tested for 'www.nextcloud.com'
  824. * If a protocol is provided, only this one will be tested.
  825. *
  826. * Defaults to the following domains:
  827. *
  828. * - www.nextcloud.com
  829. * - www.startpage.com
  830. * - www.eff.org
  831. * - www.edri.org
  832. */
  833. 'connectivity_check_domains' => [
  834. 'www.nextcloud.com',
  835. 'www.startpage.com',
  836. 'www.eff.org',
  837. 'www.edri.org'
  838. ],
  839. /**
  840. * Allows Nextcloud to verify a working .well-known URL redirects. This is done
  841. * by attempting to make a request from JS to
  842. * https://your-domain.com/.well-known/caldav/
  843. *
  844. * Defaults to ``true``
  845. */
  846. 'check_for_working_wellknown_setup' => true,
  847. /**
  848. * This is a crucial security check on Apache servers that should always be set
  849. * to ``true``. This verifies that the ``.htaccess`` file is writable and works.
  850. * If it is not, then any options controlled by ``.htaccess``, such as large
  851. * file uploads, will not work. It also runs checks on the ``data/`` directory,
  852. * which verifies that it can't be accessed directly through the Web server.
  853. *
  854. * Defaults to ``true``
  855. */
  856. 'check_for_working_htaccess' => true,
  857. /**
  858. * In rare setups (e.g. on Openshift or Docker on Windows) the permissions check
  859. * might block the installation while the underlying system offers no means to
  860. * "correct" the permissions. In this case, set the value to false.
  861. *
  862. * In regular cases, if issues with permissions are encountered they should be
  863. * adjusted accordingly. Changing the flag is discouraged.
  864. *
  865. * Defaults to ``true``
  866. */
  867. 'check_data_directory_permissions' => true,
  868. /**
  869. * In certain environments it is desired to have a read-only configuration file.
  870. * When this switch is set to ``true``, writing to the config file will be
  871. * forbidden. Therefore, it will not be possible to configure all options via
  872. * the Web interface. Furthermore, when updating Nextcloud it is required to
  873. * make the configuration file writable again and to set this switch to ``false``
  874. * for the update process.
  875. *
  876. * Defaults to ``false``
  877. */
  878. 'config_is_read_only' => false,
  879. /**
  880. * Logging
  881. */
  882. /**
  883. * This parameter determines where the Nextcloud logs are sent.
  884. * ``file``: the logs are written to file ``nextcloud.log`` in the default
  885. * Nextcloud data directory. The log file can be changed with parameter
  886. * ``logfile``.
  887. * ``syslog``: the logs are sent to the system log. This requires a syslog daemon
  888. * to be active.
  889. * ``errorlog``: the logs are sent to the PHP ``error_log`` function.
  890. * ``systemd``: the logs are sent to the Systemd journal. This requires a system
  891. * that runs Systemd and the Systemd journal. The PHP extension ``systemd``
  892. * must be installed and active.
  893. *
  894. * Defaults to ``file``
  895. */
  896. 'log_type' => 'file',
  897. /**
  898. * This parameter determines where the audit logs are sent. See ``log_type`` for more information.
  899. *
  900. * Defaults to ``file``
  901. */
  902. 'log_type_audit' => 'file',
  903. /**
  904. * Name of the file to which the Nextcloud logs are written if parameter
  905. * ``log_type`` is set to ``file``.
  906. *
  907. * Defaults to ``[datadirectory]/nextcloud.log``
  908. */
  909. 'logfile' => '/var/log/nextcloud.log',
  910. /**
  911. * Name of the file to which the audit logs are written if parameter
  912. * ``log_type`` is set to ``file``.
  913. *
  914. * Defaults to ``[datadirectory]/audit.log``
  915. */
  916. 'logfile_audit' => '/var/log/audit.log',
  917. /**
  918. * Log file mode for the Nextcloud logging type in octal notation.
  919. *
  920. * Defaults to 0640 (writeable by user, readable by group).
  921. */
  922. 'logfilemode' => 0640,
  923. /**
  924. * Loglevel to start logging at. Valid values are: 0 = Debug, 1 = Info, 2 =
  925. * Warning, 3 = Error, and 4 = Fatal. The default value is Warning.
  926. *
  927. * Defaults to ``2``
  928. */
  929. 'loglevel' => 2,
  930. /**
  931. * Loglevel used by the frontend to start logging at. The same values as
  932. * for ``loglevel`` can be used. If not set it defaults to the value
  933. * configured for ``loglevel`` or Warning if that is not set either.
  934. *
  935. * Defaults to ``2``
  936. */
  937. 'loglevel_frontend' => 2,
  938. /**
  939. * Loglevel used by the dirty database query detection. Useful to identify
  940. * potential database bugs in production. Set this to loglevel or higher to
  941. * see dirty queries in the logs.
  942. *
  943. * Defaults to ``0`` (debug)
  944. */
  945. 'loglevel_dirty_database_queries' => 0,
  946. /**
  947. * If you maintain different instances and aggregate the logs, you may want
  948. * to distinguish between them. ``syslog_tag`` can be set per instance
  949. * with a unique id. Only available if ``log_type`` is set to ``syslog`` or
  950. * ``systemd``.
  951. *
  952. * The default value is ``Nextcloud``.
  953. */
  954. 'syslog_tag' => 'Nextcloud',
  955. /**
  956. * If you maintain different instances and aggregate the logs, you may want
  957. * to distinguish between them. ``syslog_tag_audit`` can be set per instance
  958. * with a unique id. Only available if ``log_type`` is set to ``syslog`` or
  959. * ``systemd``.
  960. *
  961. * The default value is the value of ``syslog_tag``.
  962. */
  963. 'syslog_tag_audit' => 'Nextcloud',
  964. /**
  965. * Log condition for log level increase based on conditions. Once one of these
  966. * conditions is met, the required log level is set to debug. This allows to
  967. * debug specific requests, users or apps
  968. *
  969. * Supported conditions:
  970. * - ``shared_secret``: if a request parameter with the name `log_secret` is set to
  971. * this value the condition is met
  972. * - ``users``: if the current request is done by one of the specified users,
  973. * this condition is met
  974. * - ``apps``: if the log message is invoked by one of the specified apps,
  975. * this condition is met
  976. * - ``matches``: if all the conditions inside a group match,
  977. * this condition is met. This allows to log only entries to an app
  978. * by a few users.
  979. *
  980. * Defaults to an empty array.
  981. */
  982. 'log.condition' => [
  983. 'shared_secret' => '57b58edb6637fe3059b3595cf9c41b9',
  984. 'users' => ['sample-user'],
  985. 'apps' => ['files'],
  986. 'matches' => [
  987. [
  988. 'shared_secret' => '57b58edb6637fe3059b3595cf9c41b9',
  989. 'users' => ['sample-user'],
  990. 'apps' => ['files'],
  991. 'loglevel' => 1,
  992. 'message' => 'contains substring'
  993. ],
  994. ],
  995. ],
  996. /**
  997. * Enables logging a backtrace with each log line. Normally, only Exceptions
  998. * are carrying backtrace information which are logged automatically. This
  999. * switch turns them on for any log message. Enabling this option will lead
  1000. * to increased log data size.
  1001. *
  1002. * Defaults to ``false``.
  1003. */
  1004. 'log.backtrace' => false,
  1005. /**
  1006. * This uses PHP.date formatting; see https://www.php.net/manual/en/function.date.php
  1007. *
  1008. * Defaults to ISO 8601 ``2005-08-15T15:52:01+00:00`` - see \DateTime::ATOM
  1009. * (https://www.php.net/manual/en/class.datetime.php#datetime.constants.atom)
  1010. */
  1011. 'logdateformat' => 'F d, Y H:i:s',
  1012. /**
  1013. * The timezone for logfiles. You may change this; see
  1014. * https://www.php.net/manual/en/timezones.php
  1015. *
  1016. * Defaults to ``UTC``
  1017. */
  1018. 'logtimezone' => 'Europe/Berlin',
  1019. /**
  1020. * Append all database queries and parameters to the log file. Use this only for
  1021. * debugging, as your logfile will become huge.
  1022. */
  1023. 'log_query' => false,
  1024. /**
  1025. * Enables log rotation and limits the total size of logfiles. Set it to 0 for
  1026. * no rotation. Specify a size in bytes, for example 104857600 (100 megabytes
  1027. * = 100 * 1024 * 1024 bytes). A new logfile is created with a new name when the
  1028. * old logfile reaches your limit. If a rotated log file is already present, it
  1029. * will be overwritten.
  1030. *
  1031. * Defaults to 100 MB
  1032. */
  1033. 'log_rotate_size' => 100 * 1024 * 1024,
  1034. /**
  1035. * Enable built-in profiler. Helpful when trying to debug performance
  1036. * issues.
  1037. *
  1038. * Note that this has a performance impact and shouldn't be enabled
  1039. * on production.
  1040. */
  1041. 'profiler' => false,
  1042. /**
  1043. * Alternate Code Locations
  1044. *
  1045. * Some Nextcloud code may be stored in alternate locations.
  1046. */
  1047. /**
  1048. * This section is for configuring the download links for Nextcloud clients, as
  1049. * seen in the first-run wizard and on Personal pages.
  1050. *
  1051. * Defaults to:
  1052. *
  1053. * - Desktop client: ``https://nextcloud.com/install/#install-clients``
  1054. * - Android client: ``https://play.google.com/store/apps/details?id=com.nextcloud.client``
  1055. * - iOS client: ``https://itunes.apple.com/us/app/nextcloud/id1125420102?mt=8``
  1056. * - iOS client app id: ``1125420102``
  1057. * - F-Droid client: ``https://f-droid.org/packages/com.nextcloud.client/``
  1058. */
  1059. 'customclient_desktop' =>
  1060. 'https://nextcloud.com/install/#install-clients',
  1061. 'customclient_android' =>
  1062. 'https://play.google.com/store/apps/details?id=com.nextcloud.client',
  1063. 'customclient_ios' =>
  1064. 'https://itunes.apple.com/us/app/nextcloud/id1125420102?mt=8',
  1065. 'customclient_ios_appid' =>
  1066. '1125420102',
  1067. 'customclient_fdroid' =>
  1068. 'https://f-droid.org/packages/com.nextcloud.client/',
  1069. /**
  1070. * Apps
  1071. *
  1072. * Options for the Apps folder, Apps store, and App code checker.
  1073. */
  1074. /**
  1075. * Set the default app to open on login. The entry IDs can be retrieved from
  1076. * the Navigations OCS API endpoint: https://docs.nextcloud.com/server/latest/develper_manual/_static/openapi.html#/operations/core-navigation-get-apps-navigation.
  1077. * You can use a comma-separated list of app names, so if the first
  1078. * app is not enabled for a user then Nextcloud will try the second one, and so
  1079. * on. If no enabled apps are found it defaults to the dashboard app.
  1080. *
  1081. * Defaults to ``dashboard,files``
  1082. */
  1083. 'defaultapp' => 'dashboard,files',
  1084. /**
  1085. * When enabled, admins may install apps from the Nextcloud app store.
  1086. *
  1087. * Defaults to ``true``
  1088. */
  1089. 'appstoreenabled' => true,
  1090. /**
  1091. * Enables the installation of apps from a self-hosted apps store.
  1092. * Requires that at least one of the configured apps directories is writeable.
  1093. *
  1094. * Defaults to ``https://apps.nextcloud.com/api/v1``
  1095. */
  1096. 'appstoreurl' => 'https://apps.nextcloud.com/api/v1',
  1097. /**
  1098. * Filters allowed installable apps from the appstore.
  1099. * Empty array will prevent all apps from the store to be found.
  1100. */
  1101. 'appsallowlist' => [],
  1102. /**
  1103. * Use the ``apps_paths`` parameter to set the location of the Apps directory,
  1104. * which should be scanned for available apps, and where user-specific apps
  1105. * should be installed from the Apps store. The ``path`` defines the absolute
  1106. * file system path to the app folder. The key ``url`` defines the HTTP Web path
  1107. * to that folder, starting from the Nextcloud webroot. The key ``writable``
  1108. * indicates if a Web server can write files to that folder.
  1109. */
  1110. 'apps_paths' => [
  1111. [
  1112. 'path'=> '/var/www/nextcloud/apps',
  1113. 'url' => '/apps',
  1114. 'writable' => true,
  1115. ],
  1116. ],
  1117. /**
  1118. * @see appcodechecker
  1119. */
  1120. /**
  1121. * Previews
  1122. *
  1123. * Nextcloud supports previews of image files, the covers of MP3 files, and text
  1124. * files. These options control enabling and disabling previews, and thumbnail
  1125. * size.
  1126. */
  1127. /**
  1128. * By default, Nextcloud can generate previews for the following filetypes:
  1129. *
  1130. * - Image files
  1131. * - Covers of MP3 files
  1132. * - Text documents
  1133. *
  1134. * Valid values are ``true``, to enable previews, or
  1135. * ``false``, to disable previews
  1136. *
  1137. * Defaults to ``true``
  1138. */
  1139. 'enable_previews' => true,
  1140. /**
  1141. * Number of all preview requests being processed concurrently,
  1142. * including previews that need to be newly generated, and those that have
  1143. * been generated.
  1144. *
  1145. * This should be greater than 'preview_concurrency_new'.
  1146. * If unspecified, defaults to twice the value of 'preview_concurrency_new'.
  1147. */
  1148. 'preview_concurrency_all' => 8,
  1149. /**
  1150. * Number of new previews that are being concurrently generated.
  1151. *
  1152. * Depending on the max preview size set by 'preview_max_x' and 'preview_max_y',
  1153. * the generation process can consume considerable CPU and memory resources.
  1154. * It's recommended to limit this to be no greater than the number of CPU cores.
  1155. * If unspecified, defaults to the number of CPU cores, or 4 if that cannot
  1156. * be determined.
  1157. */
  1158. 'preview_concurrency_new' => 4,
  1159. /**
  1160. * The maximum width, in pixels, of a preview. A value of ``null`` means there
  1161. * is no limit.
  1162. *
  1163. * Defaults to ``4096``
  1164. */
  1165. 'preview_max_x' => 4096,
  1166. /**
  1167. * The maximum height, in pixels, of a preview. A value of ``null`` means there
  1168. * is no limit.
  1169. *
  1170. * Defaults to ``4096``
  1171. */
  1172. 'preview_max_y' => 4096,
  1173. /**
  1174. * Max file size for generating image previews with imagegd (default behavior).
  1175. * If the image is bigger, it'll try other preview generators, but will most
  1176. * likely either show the default mimetype icon or not display the image at all.
  1177. * Set to ``-1`` for no limit and try to generate image previews on all file sizes.
  1178. *
  1179. * Defaults to ``50`` megabytes
  1180. */
  1181. 'preview_max_filesize_image' => 50,
  1182. /**
  1183. * max memory for generating image previews with imagegd (default behavior)
  1184. * Reads the image dimensions from the header and assumes 32 bits per pixel.
  1185. * If creating the image would allocate more memory, preview generation will
  1186. * be disabled and the default mimetype icon is shown. Set to -1 for no limit.
  1187. *
  1188. * Defaults to ``256`` megabytes
  1189. */
  1190. 'preview_max_memory' => 256,
  1191. /**
  1192. * custom path for LibreOffice/OpenOffice binary
  1193. *
  1194. *
  1195. * Defaults to ``''`` (empty string)
  1196. */
  1197. 'preview_libreoffice_path' => '/usr/bin/libreoffice',
  1198. /**
  1199. * custom path for ffmpeg binary
  1200. *
  1201. * Defaults to ``null`` and falls back to searching ``avconv`` and ``ffmpeg``
  1202. * in the configured ``PATH`` environment
  1203. */
  1204. 'preview_ffmpeg_path' => '/usr/bin/ffmpeg',
  1205. /**
  1206. * Set the URL of the Imaginary service to send image previews to.
  1207. * Also requires the ``OC\Preview\Imaginary`` provider to be enabled in the
  1208. * ``enabledPreviewProviders`` array, to create previews for these mimetypes: bmp,
  1209. * x-bitmap, png, jpeg, gif, heic, heif, svg+xml, tiff, webp and illustrator.
  1210. *
  1211. * If you want Imaginary to also create preview images from PDF Documents, you
  1212. * have to add the ``OC\Preview\ImaginaryPDF`` provider as well.
  1213. *
  1214. * See https://github.com/h2non/imaginary
  1215. */
  1216. 'preview_imaginary_url' => 'http://previews_hpb:8088/',
  1217. /**
  1218. * If you want set a api key for imaginary.
  1219. */
  1220. 'preview_imaginary_key' => 'secret',
  1221. /**
  1222. * Only register providers that have been explicitly enabled
  1223. *
  1224. * The following providers are disabled by default due to performance or privacy
  1225. * concerns:
  1226. *
  1227. * - ``OC\Preview\Font``
  1228. * - ``OC\Preview\HEIC``
  1229. * - ``OC\Preview\Illustrator``
  1230. * - ``OC\Preview\Movie``
  1231. * - ``OC\Preview\MSOffice2003``
  1232. * - ``OC\Preview\MSOffice2007``
  1233. * - ``OC\Preview\MSOfficeDoc``
  1234. * - ``OC\Preview\PDF``
  1235. * - ``OC\Preview\Photoshop``
  1236. * - ``OC\Preview\Postscript``
  1237. * - ``OC\Preview\StarOffice``
  1238. * - ``OC\Preview\SVG``
  1239. * - ``OC\Preview\TIFF``
  1240. * - ``OC\Preview\EMF``
  1241. *
  1242. *
  1243. * Defaults to the following providers:
  1244. *
  1245. * - ``OC\Preview\BMP``
  1246. * - ``OC\Preview\GIF``
  1247. * - ``OC\Preview\JPEG``
  1248. * - ``OC\Preview\Krita``
  1249. * - ``OC\Preview\MarkDown``
  1250. * - ``OC\Preview\MP3``
  1251. * - ``OC\Preview\OpenDocument``
  1252. * - ``OC\Preview\PNG``
  1253. * - ``OC\Preview\TXT``
  1254. * - ``OC\Preview\XBitmap``
  1255. */
  1256. 'enabledPreviewProviders' => [
  1257. 'OC\Preview\BMP',
  1258. 'OC\Preview\GIF',
  1259. 'OC\Preview\JPEG',
  1260. 'OC\Preview\Krita',
  1261. 'OC\Preview\MarkDown',
  1262. 'OC\Preview\MP3',
  1263. 'OC\Preview\OpenDocument',
  1264. 'OC\Preview\PNG',
  1265. 'OC\Preview\TXT',
  1266. 'OC\Preview\XBitmap',
  1267. ],
  1268. /**
  1269. * Maximum file size for metadata generation.
  1270. * If a file exceeds this size, metadata generation will be skipped.
  1271. * Note: memory equivalent to this size will be used for metadata generation.
  1272. *
  1273. * Default: 256 megabytes.
  1274. */
  1275. 'metadata_max_filesize' => 256,
  1276. /**
  1277. * LDAP
  1278. *
  1279. * Global settings used by LDAP User and Group Backend
  1280. */
  1281. /**
  1282. * defines the interval in minutes for the background job that checks user
  1283. * existence and marks them as ready to be cleaned up. The number is always
  1284. * minutes. Setting it to 0 disables the feature.
  1285. * See command line (occ) methods ``ldap:show-remnants`` and ``user:delete``
  1286. *
  1287. * Defaults to ``51`` minutes
  1288. */
  1289. 'ldapUserCleanupInterval' => 51,
  1290. /**
  1291. * Sort groups in the user settings by name instead of the user count
  1292. *
  1293. * By enabling this the user count beside the group name is disabled as well.
  1294. * @deprecated since Nextcloud 29 - Use the frontend instead or set the app config value `group.sortBy` for `core` to `2`
  1295. */
  1296. 'sort_groups_by_name' => false,
  1297. /**
  1298. * Comments
  1299. *
  1300. * Global settings for the Comments infrastructure
  1301. */
  1302. /**
  1303. * Replaces the default Comments Manager Factory. This can be utilized if an
  1304. * own or 3rdParty CommentsManager should be used that – for instance – uses the
  1305. * filesystem instead of the database to keep the comments.
  1306. *
  1307. * Defaults to ``\OC\Comments\ManagerFactory``
  1308. */
  1309. 'comments.managerFactory' => '\OC\Comments\ManagerFactory',
  1310. /**
  1311. * Replaces the default System Tags Manager Factory. This can be utilized if an
  1312. * own or 3rdParty SystemTagsManager should be used that – for instance – uses the
  1313. * filesystem instead of the database to keep the tags.
  1314. *
  1315. * Defaults to ``\OC\SystemTag\ManagerFactory``
  1316. */
  1317. 'systemtags.managerFactory' => '\OC\SystemTag\ManagerFactory',
  1318. /**
  1319. * Maintenance
  1320. *
  1321. * These options are for halting user activity when you are performing server
  1322. * maintenance.
  1323. */
  1324. /**
  1325. * Enable maintenance mode to disable Nextcloud
  1326. *
  1327. * If you want to prevent users from logging in to Nextcloud before you start
  1328. * doing some maintenance work, you need to set the value of the maintenance
  1329. * parameter to true. Please keep in mind that users who are already logged-in
  1330. * are kicked out of Nextcloud instantly.
  1331. *
  1332. * Defaults to ``false``
  1333. */
  1334. 'maintenance' => false,
  1335. /**
  1336. * UTC Hour for maintenance windows
  1337. *
  1338. * Some background jobs only run once a day. When an hour is defined for this config,
  1339. * the background jobs which advertise themselves as not time sensitive will be
  1340. * delayed during the "working" hours and only run in the 4 hours after the given time.
  1341. * This is e.g. used for activity expiration, suspicious login training and update checks.
  1342. *
  1343. * A value of 1 e.g. will only run these background jobs between 01:00am UTC and 05:00am UTC.
  1344. *
  1345. * Defaults to ``100`` which disables the feature
  1346. */
  1347. 'maintenance_window_start' => 1,
  1348. /**
  1349. * Log all LDAP requests into a file
  1350. *
  1351. * Warning: This heavily decreases the performance of the server and is only
  1352. * meant to debug/profile the LDAP interaction manually.
  1353. * Also, it might log sensitive data into a plain text file.
  1354. */
  1355. 'ldap_log_file' => '',
  1356. /**
  1357. * SSL
  1358. */
  1359. /**
  1360. * Extra SSL options to be used for configuration.
  1361. *
  1362. * Defaults to an empty array.
  1363. */
  1364. 'openssl' => [
  1365. 'config' => '/absolute/location/of/openssl.cnf',
  1366. ],
  1367. /**
  1368. * Memory caching backend configuration
  1369. *
  1370. * Available cache backends:
  1371. *
  1372. * * ``\OC\Memcache\APCu`` APC user backend
  1373. * * ``\OC\Memcache\ArrayCache`` In-memory array-based backend (not recommended)
  1374. * * ``\OC\Memcache\Memcached`` Memcached backend
  1375. * * ``\OC\Memcache\Redis`` Redis backend
  1376. *
  1377. * Advice on choosing between the various backends:
  1378. *
  1379. * * APCu should be easiest to install. Almost all distributions have packages.
  1380. * Use this for single user environment for all caches.
  1381. * * Use Redis or Memcached for distributed environments.
  1382. * For the local cache (you can configure two) take APCu.
  1383. */
  1384. /**
  1385. * Memory caching backend for locally stored data
  1386. *
  1387. * * Used for host-specific data, e.g. file paths
  1388. *
  1389. * Defaults to ``none``
  1390. */
  1391. 'memcache.local' => '\OC\Memcache\APCu',
  1392. /**
  1393. * Memory caching backend for distributed data
  1394. *
  1395. * * Used for installation-specific data, e.g. database caching
  1396. * * If unset, defaults to the value of memcache.local
  1397. *
  1398. * Defaults to ``none``
  1399. */
  1400. 'memcache.distributed' => '\OC\Memcache\Memcached',
  1401. /**
  1402. * Connection details for redis to use for memory caching in a single server configuration.
  1403. *
  1404. * For enhanced security it is recommended to configure Redis
  1405. * to require a password. See http://redis.io/topics/security
  1406. * for more information.
  1407. *
  1408. * We also support redis SSL/TLS encryption as of version 6.
  1409. * See https://redis.io/topics/encryption for more information.
  1410. */
  1411. 'redis' => [
  1412. 'host' => 'localhost', // can also be a unix domain socket: '/tmp/redis.sock'
  1413. 'port' => 6379,
  1414. 'timeout' => 0.0,
  1415. 'read_timeout' => 0.0,
  1416. 'user' => '', // Optional: if not defined, no password will be used.
  1417. 'password' => '', // Optional: if not defined, no password will be used.
  1418. 'dbindex' => 0, // Optional: if undefined SELECT will not run and will use Redis Server's default DB Index.
  1419. // If redis in-transit encryption is enabled, provide certificates
  1420. // SSL context https://www.php.net/manual/en/context.ssl.php
  1421. 'ssl_context' => [
  1422. 'local_cert' => '/certs/redis.crt',
  1423. 'local_pk' => '/certs/redis.key',
  1424. 'cafile' => '/certs/ca.crt'
  1425. ]
  1426. ],
  1427. /**
  1428. * Connection details for a Redis Cluster.
  1429. *
  1430. * Redis Cluster support requires the php module phpredis in version 3.0.0 or
  1431. * higher.
  1432. *
  1433. * Available failover modes:
  1434. * - \RedisCluster::FAILOVER_NONE - only send commands to master nodes (default)
  1435. * - \RedisCluster::FAILOVER_ERROR - failover to slaves for read commands if master is unavailable (recommended)
  1436. * - \RedisCluster::FAILOVER_DISTRIBUTE - randomly distribute read commands across master and slaves
  1437. *
  1438. * WARNING: FAILOVER_DISTRIBUTE is a not recommended setting, and we strongly
  1439. * suggest to not use it if you use Redis for file locking. Due to the way Redis
  1440. * is synchronized it could happen, that the read for an existing lock is
  1441. * scheduled to a slave that is not fully synchronized with the connected master
  1442. * which then causes a FileLocked exception.
  1443. *
  1444. * See https://redis.io/topics/cluster-spec for details about the Redis cluster
  1445. *
  1446. * Authentication works with phpredis version 4.2.1+. See
  1447. * https://github.com/phpredis/phpredis/commit/c5994f2a42b8a348af92d3acb4edff1328ad8ce1
  1448. */
  1449. 'redis.cluster' => [
  1450. 'seeds' => [ // provide some or all of the cluster servers to bootstrap discovery, port required
  1451. 'localhost:7000',
  1452. 'localhost:7001',
  1453. ],
  1454. 'timeout' => 0.0,
  1455. 'read_timeout' => 0.0,
  1456. 'failover_mode' => \RedisCluster::FAILOVER_ERROR,
  1457. 'user' => '', // Optional: if not defined, no password will be used.
  1458. 'password' => '', // Optional: if not defined, no password will be used.
  1459. // If redis in-transit encryption is enabled, provide certificates
  1460. // SSL context https://www.php.net/manual/en/context.ssl.php
  1461. 'ssl_context' => [
  1462. 'local_cert' => '/certs/redis.crt',
  1463. 'local_pk' => '/certs/redis.key',
  1464. 'cafile' => '/certs/ca.crt'
  1465. ]
  1466. ],
  1467. /**
  1468. * Server details for one or more memcached servers to use for memory caching.
  1469. */
  1470. 'memcached_servers' => [
  1471. // hostname, port and optional weight
  1472. // or path and port 0 for unix socket. Also see:
  1473. // https://www.php.net/manual/en/memcached.addservers.php
  1474. // https://www.php.net/manual/en/memcached.addserver.php
  1475. ['localhost', 11211],
  1476. //array('other.host.local', 11211),
  1477. ],
  1478. /**
  1479. * Connection options for memcached
  1480. */
  1481. 'memcached_options' => [
  1482. // Set timeouts to 50ms
  1483. \Memcached::OPT_CONNECT_TIMEOUT => 50,
  1484. \Memcached::OPT_RETRY_TIMEOUT => 50,
  1485. \Memcached::OPT_SEND_TIMEOUT => 50,
  1486. \Memcached::OPT_RECV_TIMEOUT => 50,
  1487. \Memcached::OPT_POLL_TIMEOUT => 50,
  1488. // Enable compression
  1489. \Memcached::OPT_COMPRESSION => true,
  1490. // Turn on consistent hashing
  1491. \Memcached::OPT_LIBKETAMA_COMPATIBLE => true,
  1492. // Enable Binary Protocol
  1493. \Memcached::OPT_BINARY_PROTOCOL => true,
  1494. // Binary serializer vill be enabled if the igbinary PECL module is available
  1495. //\Memcached::OPT_SERIALIZER => \Memcached::SERIALIZER_IGBINARY,
  1496. ],
  1497. /**
  1498. * Location of the cache folder, defaults to ``data/$user/cache`` where
  1499. * ``$user`` is the current user. When specified, the format will change to
  1500. * ``$cache_path/$user`` where ``$cache_path`` is the configured cache directory
  1501. * and ``$user`` is the user.
  1502. *
  1503. * Defaults to ``''`` (empty string)
  1504. */
  1505. 'cache_path' => '',
  1506. /**
  1507. * TTL of chunks located in the cache folder before they're removed by
  1508. * garbage collection (in seconds). Increase this value if users have
  1509. * issues uploading very large files via the Nextcloud Client as upload isn't
  1510. * completed within one day.
  1511. *
  1512. * Defaults to ``60*60*24`` (1 day)
  1513. */
  1514. 'cache_chunk_gc_ttl' => 60*60*24,
  1515. /**
  1516. * Using Object Store with Nextcloud
  1517. */
  1518. /**
  1519. * This example shows how to configure Nextcloud to store all files in a
  1520. * swift object storage.
  1521. *
  1522. * It is important to note that Nextcloud in object store mode will expect
  1523. * exclusive access to the object store container because it only stores the
  1524. * binary data for each file. The metadata is currently kept in the local
  1525. * database for performance reasons.
  1526. *
  1527. * WARNING: The current implementation is incompatible with any app that uses
  1528. * direct file IO and circumvents our virtual filesystem. That includes
  1529. * Encryption and Gallery. Gallery will store thumbnails directly in the
  1530. * filesystem and encryption will cause severe overhead because key files need
  1531. * to be fetched in addition to any requested file.
  1532. *
  1533. */
  1534. 'objectstore' => [
  1535. 'class' => 'OC\\Files\\ObjectStore\\Swift',
  1536. 'arguments' => [
  1537. // trystack will use your facebook id as the username
  1538. 'username' => 'facebook100000123456789',
  1539. // in the trystack dashboard go to user -> settings -> API Password to
  1540. // generate a password
  1541. 'password' => 'Secr3tPaSSWoRdt7',
  1542. // must already exist in the objectstore, name can be different
  1543. 'container' => 'nextcloud',
  1544. // prefix to prepend to the fileid, default is 'oid:urn:'
  1545. 'objectPrefix' => 'oid:urn:',
  1546. // create the container if it does not exist. default is false
  1547. 'autocreate' => true,
  1548. // required, dev-/trystack defaults to 'RegionOne'
  1549. 'region' => 'RegionOne',
  1550. // The Identity / Keystone endpoint
  1551. 'url' => 'http://8.21.28.222:5000/v2.0',
  1552. // uploadPartSize: size of the uploaded chunks, defaults to 524288000
  1553. 'uploadPartSize' => 524288000,
  1554. // required on dev-/trystack
  1555. 'tenantName' => 'facebook100000123456789',
  1556. // dev-/trystack uses swift by default, the lib defaults to 'cloudFiles'
  1557. // if omitted
  1558. 'serviceName' => 'swift',
  1559. // The Interface / url Type, optional
  1560. 'urlType' => 'internal'
  1561. ],
  1562. ],
  1563. /**
  1564. * To use swift V3
  1565. */
  1566. 'objectstore' => [
  1567. 'class' => 'OC\\Files\\ObjectStore\\Swift',
  1568. 'arguments' => [
  1569. 'autocreate' => true,
  1570. 'user' => [
  1571. 'name' => 'swift',
  1572. 'password' => 'swift',
  1573. 'domain' => [
  1574. 'name' => 'default',
  1575. ],
  1576. ],
  1577. 'scope' => [
  1578. 'project' => [
  1579. 'name' => 'service',
  1580. 'domain' => [
  1581. 'name' => 'default',
  1582. ],
  1583. ],
  1584. ],
  1585. 'tenantName' => 'service',
  1586. 'serviceName' => 'swift',
  1587. 'region' => 'regionOne',
  1588. 'url' => 'http://yourswifthost:5000/v3',
  1589. 'bucket' => 'nextcloud',
  1590. ],
  1591. ],
  1592. /**
  1593. * If this is set to true and a multibucket object store is configured then
  1594. * newly created previews are put into 256 dedicated buckets.
  1595. *
  1596. * Those buckets are named like the mulibucket version but with the postfix
  1597. * ``-preview-NUMBER`` where NUMBER is between 0 and 255.
  1598. *
  1599. * Keep in mind that only previews of files are put in there that don't have
  1600. * some already. Otherwise, the old bucket will be used.
  1601. *
  1602. * To migrate existing previews to this new multibucket distribution of previews
  1603. * use the occ command ``preview:repair``. For now this will only migrate
  1604. * previews that were generated before Nextcloud 19 in the flat
  1605. * ``appdata_INSTANCEID/previews/FILEID`` folder structure.
  1606. */
  1607. 'objectstore.multibucket.preview-distribution' => false,
  1608. /**
  1609. * Sharing
  1610. *
  1611. * Global settings for Sharing
  1612. */
  1613. /**
  1614. * Replaces the default Share Provider Factory. This can be utilized if
  1615. * own or 3rdParty Share Providers are used that – for instance – use the
  1616. * filesystem instead of the database to keep the share information.
  1617. *
  1618. * Defaults to ``\OC\Share20\ProviderFactory``
  1619. */
  1620. 'sharing.managerFactory' => '\OC\Share20\ProviderFactory',
  1621. /**
  1622. * Enables expiration for link share passwords sent by email (sharebymail).
  1623. * The passwords will expire after the configured interval, the users can
  1624. * still request a new one in the public link page.
  1625. */
  1626. 'sharing.enable_mail_link_password_expiration' => false,
  1627. /**
  1628. * Expiration interval for passwords, in seconds.
  1629. */
  1630. 'sharing.mail_link_password_expiration_interval' => 3600,
  1631. /**
  1632. * Define max number of results returned by the search for auto-completion of
  1633. * users, groups, etc. The value must not be lower than 0 (for unlimited).
  1634. *
  1635. * If more, different sources are requested (e.g. different user backends; or
  1636. * both users and groups), the value is applied per source and might not be
  1637. * truncated after collecting the results. I.e. more results can appear than
  1638. * configured here.
  1639. *
  1640. * Default is 25.
  1641. */
  1642. 'sharing.maxAutocompleteResults' => 25,
  1643. /**
  1644. * Define the minimum length of the search string before we start auto-completion
  1645. * Default is no limit (value set to 0)
  1646. */
  1647. 'sharing.minSearchStringLength' => 0,
  1648. /**
  1649. * Set to true to enable that internal shares need to be accepted by the users by default.
  1650. * Users can change this for their account in their personal sharing settings
  1651. */
  1652. 'sharing.enable_share_accept' => false,
  1653. /**
  1654. * Set to true to enforce that internal shares need to be accepted
  1655. */
  1656. 'sharing.force_share_accept' => false,
  1657. /**
  1658. * Set to ``false``, to prevent users from setting a custom share_folder
  1659. */
  1660. 'sharing.allow_custom_share_folder' => true,
  1661. /**
  1662. * Define a default folder for shared files and folders other than root.
  1663. * Changes to this value will only have effect on new shares.
  1664. *
  1665. * Defaults to ``/``
  1666. */
  1667. 'share_folder' => '/',
  1668. /**
  1669. * Set to ``false``, to stop sending a mail when users receive a share
  1670. */
  1671. 'sharing.enable_share_mail' => true,
  1672. /**
  1673. * Set to true to enable the feature to add exceptions for share password enforcement
  1674. */
  1675. 'sharing.allow_disabled_password_enforcement_groups' => false,
  1676. /**
  1677. * Set to true to always transfer incoming shares by default
  1678. * when running "occ files:transfer-ownership".
  1679. * Defaults to false, so incoming shares are not transferred if not specifically requested
  1680. * by a command line argument.
  1681. */
  1682. 'transferIncomingShares' => false,
  1683. /**
  1684. * Hashing
  1685. */
  1686. /**
  1687. * By default, Nextcloud will use the Argon2 password hashing if available.
  1688. * However, if for whatever reason you want to stick with the PASSWORD_DEFAULT
  1689. * of your php version. Then set the setting to true.
  1690. *
  1691. * Nextcloud uses the Argon2 algorithm (with PHP >= 7.2) to create hashes by its
  1692. * own and exposes its configuration options as following. More information can
  1693. * be found at: https://www.php.net/manual/en/function.password-hash.php
  1694. */
  1695. 'hashing_default_password' => false,
  1696. /**
  1697. * The number of CPU threads to be used by the algorithm for computing a hash.
  1698. * The value must be an integer, and the minimum value is 1. Rationally it does
  1699. * not help to provide a number higher than the available threads on the machine.
  1700. * Values that undershoot the minimum will be ignored in favor of the minimum.
  1701. */
  1702. 'hashingThreads' => PASSWORD_ARGON2_DEFAULT_THREADS,
  1703. /**
  1704. * The memory in KiB to be used by the algorithm for computing a hash. The value
  1705. * must be an integer, and the minimum value is 8 times the number of CPU threads.
  1706. * Values that undershoot the minimum will be ignored in favor of the minimum.
  1707. */
  1708. 'hashingMemoryCost' => PASSWORD_ARGON2_DEFAULT_MEMORY_COST,
  1709. /**
  1710. * The number of iterations that are used by the algorithm for computing a hash.
  1711. * The value must be an integer, and the minimum value is 1. Values that
  1712. * undershoot the minimum will be ignored in favor of the minimum.
  1713. */
  1714. 'hashingTimeCost' => PASSWORD_ARGON2_DEFAULT_TIME_COST,
  1715. /**
  1716. * The hashing cost used by hashes generated by Nextcloud
  1717. * Using a higher value requires more time and CPU power to calculate the hashes
  1718. */
  1719. 'hashingCost' => 10,
  1720. /**
  1721. * All other configuration options
  1722. */
  1723. /**
  1724. * Additional driver options for the database connection, e.g. to enable SSL
  1725. * encryption in MySQL or specify a custom wait timeout on a cheap hoster.
  1726. *
  1727. * When setting up TLS/SSL for encrypting the connections, you need to ensure that
  1728. * the passed keys and certificates are readable by the PHP process. In addition,
  1729. * PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT might need to be set to false, if the
  1730. * database servers certificates CN does not match with the hostname used to connect.
  1731. * The standard behavior here is different from the MySQL/MariaDB CLI client, which
  1732. * does not verify the server cert except --ssl-verify-server-cert is passed manually.
  1733. */
  1734. 'dbdriveroptions' => [
  1735. PDO::MYSQL_ATTR_SSL_CA => '/file/path/to/ca_cert.pem',
  1736. PDO::MYSQL_ATTR_SSL_KEY => '/file/path/to/mysql-client-key.pem',
  1737. PDO::MYSQL_ATTR_SSL_CERT => '/file/path/to/mysql-client-cert.pem',
  1738. PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT => false,
  1739. PDO::MYSQL_ATTR_INIT_COMMAND => 'SET wait_timeout = 28800'
  1740. ],
  1741. /**
  1742. * sqlite3 journal mode can be specified using this configuration parameter -
  1743. * can be 'WAL' or 'DELETE' see for more details https://www.sqlite.org/wal.html
  1744. */
  1745. 'sqlite.journal_mode' => 'DELETE',
  1746. /**
  1747. * During setup, if requirements are met (see below), this setting is set to true
  1748. * and MySQL can handle 4 byte characters instead of 3 byte characters.
  1749. *
  1750. * If you want to convert an existing 3-byte setup into a 4-byte setup please
  1751. * set the parameters in MySQL as mentioned below and run the migration command:
  1752. * ./occ db:convert-mysql-charset
  1753. * The config setting will be set automatically after a successful run.
  1754. *
  1755. * Consult the documentation for more details.
  1756. *
  1757. * MySQL requires a special setup for longer indexes (> 767 bytes) which are
  1758. * needed:
  1759. *
  1760. * [mysqld]
  1761. * innodb_large_prefix=ON
  1762. * innodb_file_format=Barracuda
  1763. * innodb_file_per_table=ON
  1764. *
  1765. * Tables will be created with
  1766. * * character set: utf8mb4
  1767. * * collation: utf8mb4_bin
  1768. * * row_format: dynamic
  1769. *
  1770. * See:
  1771. * https://dev.mysql.com/doc/refman/5.7/en/charset-unicode-utf8mb4.html
  1772. * https://dev.mysql.com/doc/refman/5.7/en/innodb-parameters.html#sysvar_innodb_large_prefix
  1773. * https://mariadb.com/kb/en/mariadb/xtradbinnodb-server-system-variables/#innodb_large_prefix
  1774. * http://www.tocker.ca/2013/10/31/benchmarking-innodb-page-compression-performance.html
  1775. * http://mechanics.flite.com/blog/2014/07/29/using-innodb-large-prefix-to-avoid-error-1071/
  1776. */
  1777. 'mysql.utf8mb4' => false,
  1778. /**
  1779. * For search queries in the database, a default collation – depending on the
  1780. * character set – is chosen. In some cases a different behaviour is desired,
  1781. * for instances when an accent sensitive search is desired.
  1782. *
  1783. * MariaDB and MySQL have an overlap in available collations, but also
  1784. * incompatible ones, also depending on the version of the database server.
  1785. *
  1786. * This option allows to override the automatic choice. Example:
  1787. *
  1788. * 'mysql.collation' => 'utf8mb4_0900_as_ci',
  1789. *
  1790. * This setting has no effect on setup or creating tables. In those cases
  1791. * always utf8[mb4]_bin is being used. This setting is only taken into
  1792. * consideration in SQL queries that utilize LIKE comparison operators.
  1793. */
  1794. 'mysql.collation' => null,
  1795. /**
  1796. * Database types that are supported for installation.
  1797. *
  1798. * Available:
  1799. * - sqlite (SQLite3)
  1800. * - mysql (MySQL)
  1801. * - pgsql (PostgreSQL)
  1802. * - oci (Oracle)
  1803. *
  1804. * Defaults to the following databases:
  1805. * - sqlite (SQLite3)
  1806. * - mysql (MySQL)
  1807. * - pgsql (PostgreSQL)
  1808. */
  1809. 'supportedDatabases' => [
  1810. 'sqlite',
  1811. 'mysql',
  1812. 'pgsql',
  1813. 'oci',
  1814. ],
  1815. /**
  1816. * Override where Nextcloud stores temporary files. Useful in situations where
  1817. * the system temporary directory is on a limited space ramdisk or is otherwise
  1818. * restricted, or if external storage which do not support streaming are in
  1819. * use.
  1820. *
  1821. * The Web server user/PHP must have write access to this directory.
  1822. * Additionally you have to make sure that your PHP configuration considers this a valid
  1823. * tmp directory, by setting the TMP, TMPDIR, and TEMP variables to the required directories.
  1824. * On top of that you might be required to grant additional permissions in AppArmor or SELinux.
  1825. */
  1826. 'tempdirectory' => '/tmp/nextcloudtemp',
  1827. /**
  1828. * Override where Nextcloud stores update files while updating. Useful in situations
  1829. * where the default `datadirectory` is on network disk like NFS, or is otherwise
  1830. * restricted. Defaults to the value of `datadirectory` if unset.
  1831. *
  1832. * If set, the value MUST be located _outside_ of the installation directory of Nextcloud and
  1833. * writable by the Web server user.
  1834. *
  1835. */
  1836. 'updatedirectory' => '',
  1837. /**
  1838. * Block a specific file or files and disallow the upload of files with this name.
  1839. * This blocks any access to those files (read and write).
  1840. * ``.htaccess`` is blocked by default.
  1841. *
  1842. * WARNING: USE THIS ONLY IF YOU KNOW WHAT YOU ARE DOING.
  1843. *
  1844. * Note that this list is case-insensitive.
  1845. *
  1846. * Defaults to ``array('.htaccess')``
  1847. */
  1848. 'forbidden_filenames' => ['.htaccess'],
  1849. /**
  1850. * Disallow the upload of files with specific basenames.
  1851. * Matching existing files can no longer be updated and in matching folders no files can be created anymore.
  1852. *
  1853. * The basename is the name of the file without the extension,
  1854. * e.g. for "archive.tar.gz" the basename would be "archive".
  1855. *
  1856. * Note that this list is case-insensitive.
  1857. *
  1858. * Defaults to ``array()``
  1859. */
  1860. 'forbidden_filename_basenames' => [],
  1861. /**
  1862. * Block characters from being used in filenames. This is useful if you
  1863. * have a filesystem or OS which does not support certain characters like windows.
  1864. * Matching existing files can no longer be updated and in matching folders no files can be created anymore.
  1865. *
  1866. * The '/' and '\' characters are always forbidden, as well as all characters in the ASCII range [0-31].
  1867. *
  1868. * Example for windows systems: ``array('?', '<', '>', ':', '*', '|', '"')``
  1869. * see https://en.wikipedia.org/wiki/Comparison_of_file_systems#Limits
  1870. *
  1871. * Defaults to ``array()``
  1872. */
  1873. 'forbidden_filename_characters' => [],
  1874. /**
  1875. * Deny extensions from being used for filenames.
  1876. * Matching existing files can no longer be updated and in matching folders no files can be created anymore.
  1877. *
  1878. * The '.part' extension is always forbidden, as this is used internally by Nextcloud.
  1879. *
  1880. * Defaults to ``array('.filepart', '.part')``
  1881. */
  1882. 'forbidden_filename_extensions' => ['.part', '.filepart'],
  1883. /**
  1884. * If you are applying a theme to Nextcloud, enter the name of the theme here.
  1885. * The default location for themes is ``nextcloud/themes/``.
  1886. *
  1887. * Defaults to the theming app which is shipped since Nextcloud 9
  1888. */
  1889. 'theme' => '',
  1890. /**
  1891. * Enforce the user theme. This will disable the user theming settings
  1892. * This must be a valid ITheme ID.
  1893. * E.g. dark, dark-highcontrast, default, light, light-highcontrast, opendyslexic
  1894. */
  1895. 'enforce_theme' => '',
  1896. /**
  1897. * The default cipher for encrypting files. Currently supported are:
  1898. * - AES-256-CTR
  1899. * - AES-128-CTR
  1900. * - AES-256-CFB
  1901. * - AES-128-CFB
  1902. *
  1903. * Defaults to ``AES-256-CTR``
  1904. */
  1905. 'cipher' => 'AES-256-CTR',
  1906. /**
  1907. * Use the legacy base64 format for encrypted files instead of the more space-efficient
  1908. * binary format. The option affects only newly written files, existing encrypted files
  1909. * will not be touched and will remain readable whether they use the new format or not.
  1910. *
  1911. * Defaults to ``false``
  1912. */
  1913. 'encryption.use_legacy_base64_encoding' => false,
  1914. /**
  1915. * The minimum Nextcloud desktop client version that will be allowed to sync with
  1916. * this server instance. All connections made from earlier clients will be denied
  1917. * by the server. Defaults to the minimum officially supported Nextcloud desktop
  1918. * client version at the time of release of this server version.
  1919. *
  1920. * When changing this, note that older unsupported versions of the Nextcloud desktop
  1921. * client may not function as expected, and could lead to permanent data loss for
  1922. * clients or other unexpected results.
  1923. *
  1924. * Defaults to ``2.3.0``
  1925. */
  1926. 'minimum.supported.desktop.version' => '2.3.0',
  1927. /**
  1928. * Option to allow local storage to contain symlinks.
  1929. * WARNING: Not recommended. This would make it possible for Nextcloud to access
  1930. * files outside the data directory and could be considered a security risk.
  1931. *
  1932. * Defaults to ``false``
  1933. */
  1934. 'localstorage.allowsymlinks' => false,
  1935. /**
  1936. * Nextcloud overrides umask to ensure suitable access permissions
  1937. * regardless of webserver/php-fpm configuration and worker state.
  1938. * WARNING: Modifying this value has security implications and
  1939. * may soft-break the installation.
  1940. *
  1941. * Most installs shall not modify this value.
  1942. *
  1943. * Defaults to ``0022``
  1944. */
  1945. 'localstorage.umask' => 0022,
  1946. /**
  1947. * This options allows storage systems that don't allow to modify existing files
  1948. * to overcome this limitation by removing the files before overwriting.
  1949. *
  1950. * Defaults to ``false``
  1951. */
  1952. 'localstorage.unlink_on_truncate' => false,
  1953. /**
  1954. * EXPERIMENTAL: option whether to include external storage in quota
  1955. * calculation, defaults to false.
  1956. *
  1957. * Defaults to ``false``
  1958. */
  1959. 'quota_include_external_storage' => false,
  1960. /**
  1961. * When an external storage is unavailable for some reasons, it will be flagged
  1962. * as such for 10 minutes. When the trigger is a failed authentication attempt
  1963. * the delay is higher and can be controlled with this option. The motivation
  1964. * is to make account lock outs at Active Directories (and compatible) more
  1965. * unlikely.
  1966. *
  1967. * Defaults to ``1800`` (seconds)
  1968. */
  1969. 'external_storage.auth_availability_delay' => 1800,
  1970. /**
  1971. * Allows to create external storages of type "Local" in the web interface and APIs.
  1972. *
  1973. * When disabled, it is still possible to create local storages with occ using
  1974. * the following command:
  1975. *
  1976. * % php occ files_external:create /mountpoint local null::null -c datadir=/path/to/data
  1977. *
  1978. * Defaults to ``true``
  1979. *
  1980. */
  1981. 'files_external_allow_create_new_local' => true,
  1982. /**
  1983. * Specifies how often the local filesystem (the Nextcloud data/ directory, and
  1984. * NFS mounts in data/) is checked for changes made outside Nextcloud. This
  1985. * does not apply to external storage.
  1986. *
  1987. * 0 -> Never check the filesystem for outside changes, provides a performance
  1988. * increase when it's certain that no changes are made directly to the
  1989. * filesystem
  1990. *
  1991. * 1 -> Check each file or folder at most once per request, recommended for
  1992. * general use if outside changes might happen.
  1993. *
  1994. * Defaults to ``0``
  1995. */
  1996. 'filesystem_check_changes' => 0,
  1997. /**
  1998. * By default, Nextcloud will store the part files created during upload in the
  1999. * same storage as the upload target. Setting this to false will store the part
  2000. * files in the root of the users folder which might be required to work with certain
  2001. * external storage setups that have limited rename capabilities.
  2002. *
  2003. * Defaults to ``true``
  2004. */
  2005. 'part_file_in_storage' => true,
  2006. /**
  2007. * Where ``mount.json`` file should be stored, defaults to ``data/mount.json``
  2008. * in the Nextcloud directory.
  2009. *
  2010. * Defaults to ``data/mount.json`` in the Nextcloud directory.
  2011. */
  2012. 'mount_file' => '/var/www/nextcloud/data/mount.json',
  2013. /**
  2014. * When ``true``, prevent Nextcloud from changing the cache due to changes in
  2015. * the filesystem for all storage.
  2016. *
  2017. * Defaults to ``false``
  2018. */
  2019. 'filesystem_cache_readonly' => false,
  2020. /**
  2021. * List of trusted proxy servers
  2022. *
  2023. * You may set this to an array containing a combination of
  2024. * - IPv4 addresses, e.g. `192.168.2.123`
  2025. * - IPv4 ranges in CIDR notation, e.g. `192.168.2.0/24`
  2026. * - IPv6 addresses, e.g. `fd9e:21a7:a92c:2323::1`
  2027. * - IPv6 ranges in CIDR notation, e.g. `2001:db8:85a3:8d3:1319:8a20::/95`
  2028. *
  2029. * When an incoming request's `REMOTE_ADDR` matches any of the IP addresses
  2030. * specified here, it is assumed to be a proxy instead of a client. Thus, the
  2031. * client IP will be read from the HTTP header specified in
  2032. * `forwarded_for_headers` instead of from `REMOTE_ADDR`.
  2033. *
  2034. * So if you configure `trusted_proxies`, also consider setting
  2035. * `forwarded_for_headers` which otherwise defaults to `HTTP_X_FORWARDED_FOR`
  2036. * (the `X-Forwarded-For` header).
  2037. *
  2038. * Defaults to an empty array.
  2039. */
  2040. 'trusted_proxies' => ['203.0.113.45', '198.51.100.128', '192.168.2.0/24'],
  2041. /**
  2042. * Headers that should be trusted as client IP address in combination with
  2043. * `trusted_proxies`. If the HTTP header looks like 'X-Forwarded-For', then use
  2044. * 'HTTP_X_FORWARDED_FOR' here.
  2045. *
  2046. * If set incorrectly, a client can spoof their IP address as visible to
  2047. * Nextcloud, bypassing access controls and making logs useless!
  2048. *
  2049. * Defaults to ``'HTTP_X_FORWARDED_FOR'``
  2050. */
  2051. 'forwarded_for_headers' => ['HTTP_X_FORWARDED', 'HTTP_FORWARDED_FOR'],
  2052. /**
  2053. * List of trusted IP ranges for admin actions
  2054. *
  2055. * If this list is non-empty, all admin actions must be triggered from
  2056. * IP addresses inside theses ranges.
  2057. *
  2058. * Defaults to an empty array.
  2059. */
  2060. 'allowed_admin_ranges' => ['192.0.2.42/32', '233.252.0.0/24', '2001:db8::13:37/64'],
  2061. /**
  2062. * max file size for animating gifs on public-sharing-site.
  2063. * If the gif is bigger, it'll show a static preview
  2064. *
  2065. * Value represents the maximum filesize in megabytes. Set to ``-1`` for
  2066. * no limit.
  2067. *
  2068. * Defaults to ``10`` megabytes
  2069. */
  2070. 'max_filesize_animated_gifs_public_sharing' => 10,
  2071. /**
  2072. * Enables transactional file locking.
  2073. * This is enabled by default.
  2074. *
  2075. * Prevents concurrent processes from accessing the same files
  2076. * at the same time. Can help prevent side effects that would
  2077. * be caused by concurrent operations. Mainly relevant for
  2078. * very large installations with many users working with
  2079. * shared files.
  2080. *
  2081. * Defaults to ``true``
  2082. */
  2083. 'filelocking.enabled' => true,
  2084. /**
  2085. * Set the lock's time-to-live in seconds.
  2086. *
  2087. * Any lock older than this will be automatically cleaned up.
  2088. *
  2089. * Defaults to ``60*60`` seconds (1 hour) or the php
  2090. * max_execution_time, whichever is higher.
  2091. */
  2092. 'filelocking.ttl' => 60*60,
  2093. /**
  2094. * Memory caching backend for file locking
  2095. *
  2096. * Because most memcache backends can clean values without warning using redis
  2097. * is highly recommended to *avoid data loss*.
  2098. *
  2099. * Defaults to ``none``
  2100. */
  2101. 'memcache.locking' => '\\OC\\Memcache\\Redis',
  2102. /**
  2103. * Enable locking debug logging
  2104. *
  2105. * Note that this can lead to a very large volume of log items being written which can lead
  2106. * to performance degradation and large log files on busy instance.
  2107. *
  2108. * Thus enabling this in production for longer periods of time is not recommended
  2109. * or should be used together with the ``log.condition`` setting.
  2110. */
  2111. 'filelocking.debug' => false,
  2112. /**
  2113. * Disable the web based updater
  2114. */
  2115. 'upgrade.disable-web' => false,
  2116. /**
  2117. * Allows to modify the cli-upgrade link in order to link to a different documentation
  2118. */
  2119. 'upgrade.cli-upgrade-link' => '',
  2120. /**
  2121. * Allows to modify the exception server logs documentation link in order to link to a different documentation
  2122. */
  2123. 'documentation_url.server_logs' => '',
  2124. /**
  2125. * Set this Nextcloud instance to debugging mode
  2126. *
  2127. * Only enable this for local development and not in production environments
  2128. * This will disable the minifier and outputs some additional debug information
  2129. *
  2130. * Defaults to ``false``
  2131. */
  2132. 'debug' => false,
  2133. /**
  2134. * Sets the data-fingerprint of the current data served
  2135. *
  2136. * This is a property used by the clients to find out if a backup has been
  2137. * restored on the server. Once a backup is restored run
  2138. * ./occ maintenance:data-fingerprint
  2139. * To set this to a new value.
  2140. *
  2141. * Updating/Deleting this value can make connected clients stall until
  2142. * the user has resolved conflicts.
  2143. *
  2144. * Defaults to ``''`` (empty string)
  2145. */
  2146. 'data-fingerprint' => '',
  2147. /**
  2148. * This entry is just here to show a warning in case somebody copied the sample
  2149. * configuration. DO NOT ADD THIS SWITCH TO YOUR CONFIGURATION!
  2150. *
  2151. * If you, brave person, have read until here be aware that you should not
  2152. * modify *ANY* settings in this file without reading the documentation.
  2153. */
  2154. 'copied_sample_config' => true,
  2155. /**
  2156. * use a custom lookup server to publish user data
  2157. */
  2158. 'lookup_server' => 'https://lookup.nextcloud.com',
  2159. /**
  2160. * set to true if the server is used in a setup based on Nextcloud's Global Scale architecture
  2161. */
  2162. 'gs.enabled' => false,
  2163. /**
  2164. * by default federation is only used internally in a Global Scale setup
  2165. * If you want to allow federation outside your environment set it to 'global'
  2166. */
  2167. 'gs.federation' => 'internal',
  2168. /**
  2169. * List of incompatible user agents opted out from Same Site Cookie Protection.
  2170. * Some user agents are notorious and don't really properly follow HTTP
  2171. * specifications. For those, have an opt-out.
  2172. *
  2173. * WARNING: only use this if you know what you are doing
  2174. */
  2175. 'csrf.optout' => [
  2176. '/^WebDAVFS/', // OS X Finder
  2177. '/^Microsoft-WebDAV-MiniRedir/', // Windows webdav drive
  2178. ],
  2179. /**
  2180. * By default, there is on public pages a link shown that allows users to
  2181. * learn about the "simple sign up" - see https://nextcloud.com/signup/
  2182. *
  2183. * If this is set to "false" it will not show the link.
  2184. */
  2185. 'simpleSignUpLink.shown' => true,
  2186. /**
  2187. * By default, autocompletion is enabled for the login form on Nextcloud's login page.
  2188. * While this is enabled, browsers are allowed to "remember" login names and such.
  2189. * Some companies require it to be disabled to comply with their security policy.
  2190. *
  2191. * Simply set this property to "false", if you want to turn this feature off.
  2192. */
  2193. 'login_form_autocomplete' => true,
  2194. /**
  2195. * Timeout for the login form, after this time the login form is reset.
  2196. * This prevents password leaks on public devices if the user forgots to clear the form.
  2197. *
  2198. * Default is 5 minutes (300 seconds), a value of 0 means no timeout.
  2199. */
  2200. 'login_form_timeout' => 300,
  2201. /**
  2202. * If your user is using an outdated or unsupported browser, a warning will be shown
  2203. * to offer some guidance to upgrade or switch and ensure a proper Nextcloud experience.
  2204. * They can still bypass it after they have read the warning.
  2205. *
  2206. * Simply set this property to "true", if you want to turn this feature off.
  2207. */
  2208. 'no_unsupported_browser_warning' => false,
  2209. /**
  2210. * Disable background scanning of files
  2211. *
  2212. * By default, a background job runs every 10 minutes and execute a background
  2213. * scan to sync filesystem and database. Only users with unscanned files
  2214. * (size < 0 in filecache) are included. Maximum 500 users per job.
  2215. *
  2216. * Defaults to ``false``
  2217. */
  2218. 'files_no_background_scan' => false,
  2219. /**
  2220. * Log all queries into a file
  2221. *
  2222. * Warning: This heavily decreases the performance of the server and is only
  2223. * meant to debug/profile the query interaction manually.
  2224. * Also, it might log sensitive data into a plain text file.
  2225. */
  2226. 'query_log_file' => '',
  2227. /**
  2228. * Log all redis requests into a file
  2229. *
  2230. * Warning: This heavily decreases the performance of the server and is only
  2231. * meant to debug/profile the redis interaction manually.
  2232. * Also, it might log sensitive data into a plain text file.
  2233. */
  2234. 'redis_log_file' => '',
  2235. /**
  2236. * Enable diagnostics event logging
  2237. *
  2238. * If enabled the timings of common execution steps will be logged to the
  2239. * Nextcloud log at debug level. log.condition is useful to enable this on
  2240. * production systems to only log under some conditions
  2241. */
  2242. 'diagnostics.logging' => true,
  2243. /**
  2244. * Limit diagnostics event logging to events longer than the configured threshold in ms
  2245. *
  2246. * when set to 0 no diagnostics events will be logged
  2247. */
  2248. 'diagnostics.logging.threshold' => 0,
  2249. /**
  2250. * Enable profile globally
  2251. *
  2252. * Defaults to ``true``
  2253. */
  2254. 'profile.enabled' => true,
  2255. /**
  2256. * Allows to override the default scopes for Account data.
  2257. * The list of overridable properties and valid values for scopes are in
  2258. * ``OCP\Accounts\IAccountManager``. Values added here are merged with
  2259. * default values, which are in ``OC\Accounts\AccountManager``.
  2260. *
  2261. * For instance, if the phone property should default to the private scope
  2262. * instead of the local one:
  2263. *
  2264. * ::
  2265. *
  2266. * [
  2267. * \OCP\Accounts\IAccountManager::PROPERTY_PHONE => \OCP\Accounts\IAccountManager::SCOPE_PRIVATE
  2268. * ]
  2269. *
  2270. */
  2271. 'account_manager.default_property_scope' => [],
  2272. /**
  2273. * Enable the deprecated Projects feature,
  2274. * superseded by Related resources as of Nextcloud 25
  2275. *
  2276. * Defaults to ``false``
  2277. */
  2278. 'projects.enabled' => false,
  2279. /**
  2280. * Enable the bulk upload feature.
  2281. *
  2282. * Defaults to ``true``
  2283. */
  2284. 'bulkupload.enabled' => true,
  2285. /**
  2286. * Enables fetching open graph metadata from remote urls
  2287. *
  2288. * Defaults to ``true``
  2289. */
  2290. 'reference_opengraph' => true,
  2291. /**
  2292. * Enable use of old unified search
  2293. *
  2294. * Defaults to ``false``
  2295. */
  2296. 'unified_search.enabled' => false,
  2297. /**
  2298. * Enable features that are do respect accessibility standards yet.
  2299. *
  2300. * Defaults to ``true``
  2301. */
  2302. 'enable_non-accessible_features' => true,
  2303. /**
  2304. * Directories where nextcloud looks for binaries.
  2305. * This is used to find external binaries like libreoffice, sendmail, ffmpeg and more.
  2306. *
  2307. * Defaults to ``['/usr/local/sbin','/usr/local/bin','/usr/sbin','/usr/bin','/sbin','/bin','/opt/bin']``
  2308. */
  2309. 'binary_search_paths' => [
  2310. '/usr/local/sbin',
  2311. '/usr/local/bin',
  2312. '/usr/sbin',
  2313. '/usr/bin',
  2314. '/sbin',
  2315. '/bin',
  2316. '/opt/bin',
  2317. ],
  2318. /**
  2319. * The maximum chunk size to use for chunked uploads.
  2320. * A bigger chunk size results in higher throughput, but above 100 MiB there are only diminishing returns,
  2321. * while services like Cloudflare already limit to 100 MiB.
  2322. *
  2323. * Defaults to 100 MiB.
  2324. */
  2325. 'files.chunked_upload.max_size' => 100 * 1024 * 1024,
  2326. /**
  2327. * The maximum number of chunks uploaded in parallel during chunked uploads.
  2328. * A bigger count results in higher throughput, but will also consume more server workers,
  2329. * while the improvements diminish.
  2330. *
  2331. * Defaults to 5.
  2332. */
  2333. 'files.chunked_upload.max_parallel_count' => 5,
  2334. ];