config.sample.php 54 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777
  1. <?php
  2. /**
  3. * This configuration file is only provided to document the different
  4. * configuration options and their usage.
  5. *
  6. * DO NOT COMPLETELY BASE YOUR CONFIGURATION FILE ON THIS SAMPLE. THIS MAY BREAK
  7. * YOUR INSTANCE. Instead, manually copy configuration switches that you
  8. * consider important for your instance to your working ``config.php``, and
  9. * apply configuration options that are pertinent for your instance.
  10. *
  11. * This file is used to generate the configuration documentation.
  12. * Please consider following requirements of the current parser:
  13. * * all comments need to start with `/**` and end with ` *\/` - each on their
  14. * own line
  15. * * add a `@see CONFIG_INDEX` to copy a previously described config option
  16. * also to this line
  17. * * everything between the ` *\/` and the next `/**` will be treated as the
  18. * config option
  19. * * use RST syntax
  20. */
  21. $CONFIG = array(
  22. /**
  23. * Default Parameters
  24. *
  25. * These parameters are configured by the Nextcloud installer, and are required
  26. * for your Nextcloud server to operate.
  27. */
  28. /**
  29. * This is a unique identifier for your Nextcloud installation, created
  30. * automatically by the installer. This example is for documentation only,
  31. * and you should never use it because it will not work. A valid ``instanceid``
  32. * is created when you install Nextcloud.
  33. *
  34. * 'instanceid' => 'd3c944a9a',
  35. */
  36. 'instanceid' => '',
  37. /**
  38. * The salt used to hash all passwords, auto-generated by the Nextcloud
  39. * installer. (There are also per-user salts.) If you lose this salt you lose
  40. * all your passwords. This example is for documentation only, and you should
  41. * never use it.
  42. *
  43. * @deprecated This salt is deprecated and only used for legacy-compatibility,
  44. * developers should *NOT* use this value for anything nowadays.
  45. *
  46. * 'passwordsalt' => 'd3c944a9af095aa08f',
  47. */
  48. 'passwordsalt' => '',
  49. /**
  50. * Your list of trusted domains that users can log into. Specifying trusted
  51. * domains prevents host header poisoning. Do not remove this, as it performs
  52. * necessary security checks.
  53. * You can specify:
  54. *
  55. * - the exact hostname of your host or virtual host, e.g. demo.example.org.
  56. * - the exact hostname with permitted port, e.g. demo.example.org:443.
  57. * This disallows all other ports on this host
  58. * - use * as a wildcard, e.g. ubos-raspberry-pi*.local will allow
  59. * ubos-raspberry-pi.local and ubos-raspberry-pi-2.local
  60. */
  61. 'trusted_domains' =>
  62. array (
  63. 'demo.example.org',
  64. 'otherdomain.example.org',
  65. ),
  66. /**
  67. * Where user files are stored. The SQLite database is also stored here, when
  68. * you use SQLite.
  69. *
  70. * Default to ``data/`` in the Nextcloud directory.
  71. */
  72. 'datadirectory' => '/var/www/nextcloud/data',
  73. /**
  74. * The current version number of your Nextcloud installation. This is set up
  75. * during installation and update, so you shouldn't need to change it.
  76. */
  77. 'version' => '',
  78. /**
  79. * Identifies the database used with this installation. See also config option
  80. * ``supportedDatabases``
  81. *
  82. * Available:
  83. * - sqlite3 (SQLite3)
  84. * - mysql (MySQL/MariaDB)
  85. * - pgsql (PostgreSQL)
  86. *
  87. * Defaults to ``sqlite3``
  88. */
  89. 'dbtype' => 'sqlite3',
  90. /**
  91. * Your host server name, for example ``localhost``, ``hostname``,
  92. * ``hostname.example.com``, or the IP address. To specify a port use
  93. * ``hostname:####``; to specify a Unix socket use
  94. * ``localhost:/path/to/socket``.
  95. */
  96. 'dbhost' => '',
  97. /**
  98. * The name of the Nextcloud database, which is set during installation. You
  99. * should not need to change this.
  100. */
  101. 'dbname' => 'nextcloud',
  102. /**
  103. * The user that Nextcloud uses to write to the database. This must be unique
  104. * across Nextcloud instances using the same SQL database. This is set up during
  105. * installation, so you shouldn't need to change it.
  106. */
  107. 'dbuser' => '',
  108. /**
  109. * The password for the database user. This is set up during installation, so
  110. * you shouldn't need to change it.
  111. */
  112. 'dbpassword' => '',
  113. /**
  114. * Prefix for the Nextcloud tables in the database.
  115. *
  116. * Default to ``oc_``
  117. */
  118. 'dbtableprefix' => '',
  119. /**
  120. * Indicates whether the Nextcloud instance was installed successfully; ``true``
  121. * indicates a successful installation, and ``false`` indicates an unsuccessful
  122. * installation.
  123. *
  124. * Defaults to ``false``
  125. */
  126. 'installed' => false,
  127. /**
  128. * User Experience
  129. *
  130. * These optional parameters control some aspects of the user interface. Default
  131. * values, where present, are shown.
  132. */
  133. /**
  134. * This sets the default language on your Nextcloud server, using ISO_639-1
  135. * language codes such as ``en`` for English, ``de`` for German, and ``fr`` for
  136. * French. It overrides automatic language detection on public pages like login
  137. * or shared items. User's language preferences configured under "personal ->
  138. * language" override this setting after they have logged in. Nextcloud has two
  139. * distinguished language codes for German, 'de' and 'de_DE'. 'de' is used for
  140. * informal German and 'de_DE' for formal German. By setting this value to 'de_DE'
  141. * you can enforce the formal version of German unless the user has chosen
  142. * something different explicitly.
  143. *
  144. * Defaults to ``en``
  145. */
  146. 'default_language' => 'en',
  147. /**
  148. * With this setting a language can be forced for all users. If a language is
  149. * forced, the users are also unable to change their language in the personal
  150. * settings. If users shall be unable to change their language, but users have
  151. * different languages, this value can be set to ``true`` instead of a language
  152. * code.
  153. *
  154. * Defaults to ``false``
  155. */
  156. 'force_language' => 'en',
  157. /**
  158. * This sets the default locale on your Nextcloud server, using ISO_639
  159. * language codes such as ``en`` for English, ``de`` for German, and ``fr`` for
  160. * French, and ISO-3166 country codes such as ``GB``, ``US``, ``CA``, as defined
  161. * in RFC 5646. It overrides automatic locale detection on public pages like
  162. * login or shared items. User's locale preferences configured under "personal
  163. * -> locale" override this setting after they have logged in.
  164. *
  165. * Defaults to ``en``
  166. */
  167. 'default_locale' => 'en_US',
  168. /**
  169. * With this setting a locale can be forced for all users. If a locale is
  170. * forced, the users are also unable to change their locale in the personal
  171. * settings. If users shall be unable to change their locale, but users have
  172. * different languages, this value can be set to ``true`` instead of a locale
  173. * code.
  174. *
  175. * Defaults to ``false``
  176. */
  177. 'force_locale' => 'en_US',
  178. /**
  179. * Set the default app to open on login. Use the app names as they appear in the
  180. * URL after clicking them in the Apps menu, such as documents, calendar, and
  181. * gallery. You can use a comma-separated list of app names, so if the first
  182. * app is not enabled for a user then Nextcloud will try the second one, and so
  183. * on. If no enabled apps are found it defaults to the Files app.
  184. *
  185. * Defaults to ``files``
  186. */
  187. 'defaultapp' => 'files',
  188. /**
  189. * ``true`` enables the Help menu item in the user menu (top right of the
  190. * Nextcloud Web interface). ``false`` removes the Help item.
  191. */
  192. 'knowledgebaseenabled' => true,
  193. /**
  194. * ``true`` allows users to change their display names (on their Personal
  195. * pages), and ``false`` prevents them from changing their display names.
  196. */
  197. 'allow_user_to_change_display_name' => true,
  198. /**
  199. * Lifetime of the remember login cookie. This should be larger than the
  200. * session_lifetime. If it is set to 0 remember me is disabled.
  201. *
  202. * Defaults to ``60*60*24*15`` seconds (15 days)
  203. */
  204. 'remember_login_cookie_lifetime' => 60*60*24*15,
  205. /**
  206. * The lifetime of a session after inactivity.
  207. *
  208. * Defaults to ``60*60*24`` seconds (24 hours)
  209. */
  210. 'session_lifetime' => 60 * 60 * 24,
  211. /**
  212. * Enable or disable session keep-alive when a user is logged in to the Web UI.
  213. * Enabling this sends a "heartbeat" to the server to keep it from timing out.
  214. *
  215. * Defaults to ``true``
  216. */
  217. 'session_keepalive' => true,
  218. /**
  219. * Enforce token authentication for clients, which blocks requests using the user
  220. * password for enhanced security. Users need to generate tokens in personal settings
  221. * which can be used as passwords on their clients.
  222. *
  223. * Defaults to ``false``
  224. */
  225. 'token_auth_enforced' => false,
  226. /**
  227. * Whether the bruteforce protection shipped with Nextcloud should be enabled or not.
  228. *
  229. * Disabling this is discouraged for security reasons.
  230. *
  231. * Defaults to ``true``
  232. */
  233. 'auth.bruteforce.protection.enabled' => true,
  234. /**
  235. * The directory where the skeleton files are located. These files will be
  236. * copied to the data directory of new users. Leave empty to not copy any
  237. * skeleton files.
  238. * ``{lang}`` can be used as a placeholder for the language of the user.
  239. * If the directory does not exist, it falls back to non dialect (from ``de_DE``
  240. * to ``de``). If that does not exist either, it falls back to ``default``
  241. *
  242. * Defaults to ``core/skeleton`` in the Nextcloud directory.
  243. */
  244. 'skeletondirectory' => '/path/to/nextcloud/core/skeleton',
  245. /**
  246. * If your user backend does not allow password resets (e.g. when it's a
  247. * read-only user backend like LDAP), you can specify a custom link, where the
  248. * user is redirected to, when clicking the "reset password" link after a failed
  249. * login-attempt.
  250. * In case you do not want to provide any link, replace the url with 'disabled'
  251. */
  252. 'lost_password_link' => 'https://example.org/link/to/password/reset',
  253. /**
  254. * Mail Parameters
  255. *
  256. * These configure the email settings for Nextcloud notifications and password
  257. * resets.
  258. */
  259. /**
  260. * The return address that you want to appear on emails sent by the Nextcloud
  261. * server, for example ``nc-admin@example.com``, substituting your own domain,
  262. * of course.
  263. */
  264. 'mail_domain' => 'example.com',
  265. /**
  266. * FROM address that overrides the built-in ``sharing-noreply`` and
  267. * ``lostpassword-noreply`` FROM addresses.
  268. *
  269. * Defaults to different from addresses depending on the feature.
  270. */
  271. 'mail_from_address' => 'nextcloud',
  272. /**
  273. * Enable SMTP class debugging.
  274. *
  275. * Defaults to ``false``
  276. */
  277. 'mail_smtpdebug' => false,
  278. /**
  279. * Which mode to use for sending mail: ``sendmail``, ``smtp`` or ``qmail``.
  280. *
  281. * If you are using local or remote SMTP, set this to ``smtp``.
  282. *
  283. * For the ``sendmail`` option you need an installed and working email system on
  284. * the server, with ``/usr/sbin/sendmail`` installed on your Unix system.
  285. *
  286. * For ``qmail`` the binary is /var/qmail/bin/sendmail, and it must be installed
  287. * on your Unix system.
  288. *
  289. * Defaults to ``smtp``
  290. */
  291. 'mail_smtpmode' => 'smtp',
  292. /**
  293. * This depends on ``mail_smtpmode``. Specify the IP address of your mail
  294. * server host. This may contain multiple hosts separated by a semi-colon. If
  295. * you need to specify the port number append it to the IP address separated by
  296. * a colon, like this: ``127.0.0.1:24``.
  297. *
  298. * Defaults to ``127.0.0.1``
  299. */
  300. 'mail_smtphost' => '127.0.0.1',
  301. /**
  302. * This depends on ``mail_smtpmode``. Specify the port for sending mail.
  303. *
  304. * Defaults to ``25``
  305. */
  306. 'mail_smtpport' => 25,
  307. /**
  308. * This depends on ``mail_smtpmode``. This sets the SMTP server timeout, in
  309. * seconds. You may need to increase this if you are running an anti-malware or
  310. * spam scanner.
  311. *
  312. * Defaults to ``10`` seconds
  313. */
  314. 'mail_smtptimeout' => 10,
  315. /**
  316. * This depends on ``mail_smtpmode``. Specify when you are using ``ssl`` for SSL/TLS or
  317. * ``tls`` for STARTTLS, or leave empty for no encryption.
  318. *
  319. * Defaults to ``''`` (empty string)
  320. */
  321. 'mail_smtpsecure' => '',
  322. /**
  323. * This depends on ``mail_smtpmode``. Change this to ``true`` if your mail
  324. * server requires authentication.
  325. *
  326. * Defaults to ``false``
  327. */
  328. 'mail_smtpauth' => false,
  329. /**
  330. * This depends on ``mail_smtpmode``. If SMTP authentication is required, choose
  331. * the authentication type as ``LOGIN`` or ``PLAIN``.
  332. *
  333. * Defaults to ``LOGIN``
  334. */
  335. 'mail_smtpauthtype' => 'LOGIN',
  336. /**
  337. * This depends on ``mail_smtpauth``. Specify the username for authenticating to
  338. * the SMTP server.
  339. *
  340. * Defaults to ``''`` (empty string)
  341. */
  342. 'mail_smtpname' => '',
  343. /**
  344. * This depends on ``mail_smtpauth``. Specify the password for authenticating to
  345. * the SMTP server.
  346. *
  347. * Default to ``''`` (empty string)
  348. */
  349. 'mail_smtppassword' => '',
  350. /**
  351. * Replaces the default mail template layout. This can be utilized if the
  352. * options to modify the mail texts with the theming app is not enough.
  353. * The class must extend ``\OC\Mail\EMailTemplate``
  354. */
  355. 'mail_template_class' => '\OC\Mail\EMailTemplate',
  356. /**
  357. * Email will be send by default with an HTML and a plain text body. This option
  358. * allows to only send plain text emails.
  359. */
  360. 'mail_send_plaintext_only' => false,
  361. /**
  362. * This depends on ``mail_smtpmode``. Array of additional streams options that
  363. * will be passed to underlying Swift mailer implementation.
  364. * Defaults to an empty array.
  365. */
  366. 'mail_smtpstreamoptions' => array(),
  367. /**
  368. * Which mode is used for sendmail/qmail: ``smtp`` or ``pipe``.
  369. *
  370. * For ``smtp`` the sendmail binary is started with the parameter ``-bs``:
  371. * - Use the SMTP protocol on standard input and output.
  372. *
  373. * For ``pipe`` the binary is started with the parameters ``-t``:
  374. * - Read message from STDIN and extract recipients.
  375. *
  376. * Defaults to ``smtp``
  377. */
  378. 'mail_sendmailmode' => 'smtp',
  379. /**
  380. * Proxy Configurations
  381. */
  382. /**
  383. * The automatic hostname detection of Nextcloud can fail in certain reverse
  384. * proxy and CLI/cron situations. This option allows you to manually override
  385. * the automatic detection; for example ``www.example.com``, or specify the port
  386. * ``www.example.com:8080``.
  387. */
  388. 'overwritehost' => '',
  389. /**
  390. * When generating URLs, Nextcloud attempts to detect whether the server is
  391. * accessed via ``https`` or ``http``. However, if Nextcloud is behind a proxy
  392. * and the proxy handles the ``https`` calls, Nextcloud would not know that
  393. * ``ssl`` is in use, which would result in incorrect URLs being generated.
  394. * Valid values are ``http`` and ``https``.
  395. */
  396. 'overwriteprotocol' => '',
  397. /**
  398. * Nextcloud attempts to detect the webroot for generating URLs automatically.
  399. * For example, if ``www.example.com/nextcloud`` is the URL pointing to the
  400. * Nextcloud instance, the webroot is ``/nextcloud``. When proxies are in use,
  401. * it may be difficult for Nextcloud to detect this parameter, resulting in
  402. * invalid URLs.
  403. */
  404. 'overwritewebroot' => '',
  405. /**
  406. * This option allows you to define a manual override condition as a regular
  407. * expression for the remote IP address. For example, defining a range of IP
  408. * addresses starting with ``10.0.0.`` and ending with 1 to 3:
  409. * ``^10\.0\.0\.[1-3]$``
  410. *
  411. * Defaults to ``''`` (empty string)
  412. */
  413. 'overwritecondaddr' => '',
  414. /**
  415. * Use this configuration parameter to specify the base URL for any URLs which
  416. * are generated within Nextcloud using any kind of command line tools (cron or
  417. * occ). The value should contain the full base URL:
  418. * ``https://www.example.com/nextcloud``
  419. *
  420. * Defaults to ``''`` (empty string)
  421. */
  422. 'overwrite.cli.url' => '',
  423. /**
  424. * To have clean URLs without `/index.php` this parameter needs to be configured.
  425. *
  426. * This parameter will be written as "RewriteBase" on update and installation of
  427. * Nextcloud to your `.htaccess` file. While this value is often simply the URL
  428. * path of the Nextcloud installation it cannot be set automatically properly in
  429. * every scenario and needs thus some manual configuration.
  430. *
  431. * In a standard Apache setup this usually equals the folder that Nextcloud is
  432. * accessible at. So if Nextcloud is accessible via "https://mycloud.org/nextcloud"
  433. * the correct value would most likely be "/nextcloud". If Nextcloud is running
  434. * under "https://mycloud.org/" then it would be "/".
  435. *
  436. * Note that the above rule is not valid in every case, as there are some rare setup
  437. * cases where this may not apply. However, to avoid any update problems this
  438. * configuration value is explicitly opt-in.
  439. *
  440. * After setting this value run `occ maintenance:update:htaccess`. Now, when the
  441. * following conditions are met Nextcloud URLs won't contain `index.php`:
  442. *
  443. * - `mod_rewrite` is installed
  444. * - `mod_env` is installed
  445. *
  446. * Defaults to ``''`` (empty string)
  447. */
  448. 'htaccess.RewriteBase' => '/',
  449. /**
  450. * For server setups, that don't have `mod_env` enabled or restricted (e.g. suEXEC)
  451. * this parameter has to be set to true and will assume mod_rewrite.
  452. *
  453. * Please check, if `mod_rewrite` is active and functional before setting this
  454. * parameter and you updated your .htaccess with `occ maintenance:update:htaccess`.
  455. * Otherwise your nextcloud installation might not be reachable anymore.
  456. * For example, try accessing resources by leaving out `index.php` in the URL.
  457. */
  458. 'htaccess.IgnoreFrontController' => false,
  459. /**
  460. * The URL of your proxy server, for example ``proxy.example.com:8081``.
  461. *
  462. * Defaults to ``''`` (empty string)
  463. */
  464. 'proxy' => '',
  465. /**
  466. * The optional authentication for the proxy to use to connect to the internet.
  467. * The format is: ``username:password``.
  468. *
  469. * Defaults to ``''`` (empty string)
  470. */
  471. 'proxyuserpwd' => '',
  472. /**
  473. * Deleted Items (trash bin)
  474. *
  475. * These parameters control the Deleted files app.
  476. */
  477. /**
  478. * If the trash bin app is enabled (default), this setting defines the policy
  479. * for when files and folders in the trash bin will be permanently deleted.
  480. * The app allows for two settings, a minimum time for trash bin retention,
  481. * and a maximum time for trash bin retention.
  482. * Minimum time is the number of days a file will be kept, after which it
  483. * may be deleted. Maximum time is the number of days at which it is guaranteed
  484. * to be deleted.
  485. * Both minimum and maximum times can be set together to explicitly define
  486. * file and folder deletion. For migration purposes, this setting is installed
  487. * initially set to "auto", which is equivalent to the default setting in
  488. * Nextcloud.
  489. *
  490. * Available values:
  491. *
  492. * * ``auto``
  493. * default setting. keeps files and folders in the trash bin for 30 days
  494. * and automatically deletes anytime after that if space is needed (note:
  495. * files may not be deleted if space is not needed).
  496. * * ``D, auto``
  497. * keeps files and folders in the trash bin for D+ days, delete anytime if
  498. * space needed (note: files may not be deleted if space is not needed)
  499. * * ``auto, D``
  500. * delete all files in the trash bin that are older than D days
  501. * automatically, delete other files anytime if space needed
  502. * * ``D1, D2``
  503. * keep files and folders in the trash bin for at least D1 days and
  504. * delete when exceeds D2 days (note: files will not be deleted automatically if space is needed)
  505. * * ``disabled``
  506. * trash bin auto clean disabled, files and folders will be kept forever
  507. *
  508. * Defaults to ``auto``
  509. */
  510. 'trashbin_retention_obligation' => 'auto',
  511. /**
  512. * File versions
  513. *
  514. * These parameters control the Versions app.
  515. */
  516. /**
  517. * If the versions app is enabled (default), this setting defines the policy
  518. * for when versions will be permanently deleted.
  519. * The app allows for two settings, a minimum time for version retention,
  520. * and a maximum time for version retention.
  521. * Minimum time is the number of days a version will be kept, after which it
  522. * may be deleted. Maximum time is the number of days at which it is guaranteed
  523. * to be deleted.
  524. * Both minimum and maximum times can be set together to explicitly define
  525. * version deletion. For migration purposes, this setting is installed
  526. * initially set to "auto", which is equivalent to the default setting in
  527. * Nextcloud.
  528. *
  529. * Available values:
  530. *
  531. * * ``auto``
  532. * default setting. Automatically expire versions according to expire
  533. * rules. Please refer to :doc:`../configuration_files/file_versioning` for
  534. * more information.
  535. * * ``D, auto``
  536. * keep versions at least for D days, apply expire rules to all versions
  537. * that are older than D days
  538. * * ``auto, D``
  539. * delete all versions that are older than D days automatically, delete
  540. * other versions according to expire rules
  541. * * ``D1, D2``
  542. * keep versions for at least D1 days and delete when exceeds D2 days
  543. * * ``disabled``
  544. * versions auto clean disabled, versions will be kept forever
  545. *
  546. * Defaults to ``auto``
  547. */
  548. 'versions_retention_obligation' => 'auto',
  549. /**
  550. * Nextcloud Verifications
  551. *
  552. * Nextcloud performs several verification checks. There are two options,
  553. * ``true`` and ``false``.
  554. */
  555. /**
  556. * Checks an app before install whether it uses private APIs instead of the
  557. * proper public APIs. If this is set to true it will only allow to install or
  558. * enable apps that pass this check.
  559. *
  560. * Defaults to ``false``
  561. */
  562. 'appcodechecker' => true,
  563. /**
  564. * Check if Nextcloud is up-to-date and shows a notification if a new version is
  565. * available.
  566. *
  567. * Defaults to ``true``
  568. */
  569. 'updatechecker' => true,
  570. /**
  571. * URL that Nextcloud should use to look for updates
  572. *
  573. * Defaults to ``https://updates.nextcloud.com/updater_server/``
  574. */
  575. 'updater.server.url' => 'https://updates.nextcloud.com/updater_server/',
  576. /**
  577. * The channel that Nextcloud should use to look for updates
  578. *
  579. * Supported values:
  580. * - ``daily``
  581. * - ``beta``
  582. * - ``stable``
  583. */
  584. 'updater.release.channel' => 'stable',
  585. /**
  586. * Is Nextcloud connected to the Internet or running in a closed network?
  587. *
  588. * Defaults to ``true``
  589. */
  590. 'has_internet_connection' => true,
  591. /**
  592. * Which domains to request to determine the availability of an Internet
  593. * connection. If none of these hosts are reachable, the administration panel
  594. * will show a warning. Set to an empty list to not do any such checks (warning
  595. * will still be shown).
  596. *
  597. * Defaults to the following domains:
  598. *
  599. * - www.nextcloud.com
  600. * - www.startpage.com
  601. * - www.eff.org
  602. * - www.edri.org
  603. */
  604. 'connectivity_check_domains' => array(
  605. 'www.nextcloud.com',
  606. 'www.startpage.com',
  607. 'www.eff.org',
  608. 'www.edri.org'
  609. ),
  610. /**
  611. * Allows Nextcloud to verify a working .well-known URL redirects. This is done
  612. * by attempting to make a request from JS to
  613. * https://your-domain.com/.well-known/caldav/
  614. *
  615. * Defaults to ``true``
  616. */
  617. 'check_for_working_wellknown_setup' => true,
  618. /**
  619. * This is a crucial security check on Apache servers that should always be set
  620. * to ``true``. This verifies that the ``.htaccess`` file is writable and works.
  621. * If it is not, then any options controlled by ``.htaccess``, such as large
  622. * file uploads, will not work. It also runs checks on the ``data/`` directory,
  623. * which verifies that it can't be accessed directly through the Web server.
  624. *
  625. * Defaults to ``true``
  626. */
  627. 'check_for_working_htaccess' => true,
  628. /**
  629. * In rare setups (e.g. on Openshift or docker on windows) the permissions check
  630. * might block the installation while the underlying system offers no means to
  631. * "correct" the permissions. In this case, set the value to false.
  632. *
  633. * In regular cases, if issues with permissions are encountered they should be
  634. * adjusted accordingly. Changing the flag is discouraged.
  635. *
  636. * Defaults to ``true``
  637. */
  638. 'check_data_directory_permissions' => true,
  639. /**
  640. * In certain environments it is desired to have a read-only configuration file.
  641. * When this switch is set to ``true`` Nextcloud will not verify whether the
  642. * configuration is writable. However, it will not be possible to configure
  643. * all options via the Web interface. Furthermore, when updating Nextcloud
  644. * it is required to make the configuration file writable again for the update
  645. * process.
  646. *
  647. * Defaults to ``false``
  648. */
  649. 'config_is_read_only' => false,
  650. /**
  651. * Logging
  652. */
  653. /**
  654. * This parameter determines where the Nextcloud logs are sent.
  655. * ``file``: the logs are written to file ``nextcloud.log`` in the default
  656. * Nextcloud data directory. The log file can be changed with parameter
  657. * ``logfile``.
  658. * ``syslog``: the logs are sent to the system log. This requires a syslog daemon
  659. * to be active.
  660. * ``errorlog``: the logs are sent to the PHP ``error_log`` function.
  661. * ``systemd``: the logs are sent to the Systemd journal. This requires a system
  662. * that runs Systemd and the Systemd journal. The PHP extension ``systemd``
  663. * must be installed and active.
  664. *
  665. * Defaults to ``file``
  666. */
  667. 'log_type' => 'file',
  668. /**
  669. * Name of the file to which the Nextcloud logs are written if parameter
  670. * ``log_type`` is set to ``file``.
  671. *
  672. * Defaults to ``[datadirectory]/nextcloud.log``
  673. */
  674. 'logfile' => '/var/log/nextcloud.log',
  675. /**
  676. * Log file mode for the Nextcloud loggin type in octal notation.
  677. *
  678. * Defaults to 0640 (writeable by user, readable by group).
  679. */
  680. 'logfilemode' => 0640,
  681. /**
  682. * Loglevel to start logging at. Valid values are: 0 = Debug, 1 = Info, 2 =
  683. * Warning, 3 = Error, and 4 = Fatal. The default value is Warning.
  684. *
  685. * Defaults to ``2``
  686. */
  687. 'loglevel' => 2,
  688. /**
  689. * If you maintain different instances and aggregate the logs, you may want
  690. * to distinguish between them. ``syslog_tag`` can be set per instance
  691. * with a unique id. Only available if ``log_type`` is set to ``syslog`` or
  692. * ``systemd``.
  693. *
  694. * The default value is ``Nextcloud``.
  695. */
  696. 'syslog_tag' => 'Nextcloud',
  697. /**
  698. * Log condition for log level increase based on conditions. Once one of these
  699. * conditions is met, the required log level is set to debug. This allows to
  700. * debug specific requests, users or apps
  701. *
  702. * Supported conditions:
  703. * - ``shared_secret``: if a request parameter with the name `log_secret` is set to
  704. * this value the condition is met
  705. * - ``users``: if the current request is done by one of the specified users,
  706. * this condition is met
  707. * - ``apps``: if the log message is invoked by one of the specified apps,
  708. * this condition is met
  709. *
  710. * Defaults to an empty array.
  711. */
  712. 'log.condition' => [
  713. 'shared_secret' => '57b58edb6637fe3059b3595cf9c41b9',
  714. 'users' => ['sample-user'],
  715. 'apps' => ['files'],
  716. ],
  717. /**
  718. * This uses PHP.date formatting; see http://php.net/manual/en/function.date.php
  719. *
  720. * Defaults to ISO 8601 ``2005-08-15T15:52:01+00:00`` - see \DateTime::ATOM
  721. * (https://secure.php.net/manual/en/class.datetime.php#datetime.constants.atom)
  722. */
  723. 'logdateformat' => 'F d, Y H:i:s',
  724. /**
  725. * The timezone for logfiles. You may change this; see
  726. * http://php.net/manual/en/timezones.php
  727. *
  728. * Defaults to ``UTC``
  729. */
  730. 'logtimezone' => 'Europe/Berlin',
  731. /**
  732. * Append all database queries and parameters to the log file. Use this only for
  733. * debugging, as your logfile will become huge.
  734. */
  735. 'log_query' => false,
  736. /**
  737. * Enables log rotation and limits the total size of logfiles. Set it to 0 for
  738. * no rotation. Specify a size in bytes, for example 104857600 (100 megabytes
  739. * = 100 * 1024 * 1024 bytes). A new logfile is created with a new name when the
  740. * old logfile reaches your limit. If a rotated log file is already present, it
  741. * will be overwritten.
  742. *
  743. * Defaults to 100 MB
  744. */
  745. 'log_rotate_size' => 100 * 1024 * 1024,
  746. /**
  747. * Alternate Code Locations
  748. *
  749. * Some of the Nextcloud code may be stored in alternate locations.
  750. */
  751. /**
  752. * This section is for configuring the download links for Nextcloud clients, as
  753. * seen in the first-run wizard and on Personal pages.
  754. *
  755. * Defaults to:
  756. * - Desktop client: ``https://nextcloud.com/install/#install-clients``
  757. * - Android client: ``https://play.google.com/store/apps/details?id=com.nextcloud.client``
  758. * - iOS client: ``https://itunes.apple.com/us/app/nextcloud/id1125420102?mt=8``
  759. * - iOS client app id: ``1125420102``
  760. */
  761. 'customclient_desktop' =>
  762. 'https://nextcloud.com/install/#install-clients',
  763. 'customclient_android' =>
  764. 'https://play.google.com/store/apps/details?id=com.nextcloud.client',
  765. 'customclient_ios' =>
  766. 'https://itunes.apple.com/us/app/nextcloud/id1125420102?mt=8',
  767. 'customclient_ios_appid' =>
  768. '1125420102',
  769. /**
  770. * Apps
  771. *
  772. * Options for the Apps folder, Apps store, and App code checker.
  773. */
  774. /**
  775. * When enabled, admins may install apps from the Nextcloud app store.
  776. *
  777. * Defaults to ``true``
  778. */
  779. 'appstoreenabled' => true,
  780. /**
  781. * Use the ``apps_paths`` parameter to set the location of the Apps directory,
  782. * which should be scanned for available apps, and where user-specific apps
  783. * should be installed from the Apps store. The ``path`` defines the absolute
  784. * file system path to the app folder. The key ``url`` defines the HTTP Web path
  785. * to that folder, starting from the Nextcloud webroot. The key ``writable``
  786. * indicates if a Web server can write files to that folder.
  787. */
  788. 'apps_paths' => array(
  789. array(
  790. 'path'=> '/var/www/nextcloud/apps',
  791. 'url' => '/apps',
  792. 'writable' => true,
  793. ),
  794. ),
  795. /**
  796. * @see appcodechecker
  797. */
  798. /**
  799. * Previews
  800. *
  801. * Nextcloud supports previews of image files, the covers of MP3 files, and text
  802. * files. These options control enabling and disabling previews, and thumbnail
  803. * size.
  804. */
  805. /**
  806. * By default, Nextcloud can generate previews for the following filetypes:
  807. *
  808. * - Image files
  809. * - Covers of MP3 files
  810. * - Text documents
  811. *
  812. * Valid values are ``true``, to enable previews, or
  813. * ``false``, to disable previews
  814. *
  815. * Defaults to ``true``
  816. */
  817. 'enable_previews' => true,
  818. /**
  819. * The maximum width, in pixels, of a preview. A value of ``null`` means there
  820. * is no limit.
  821. *
  822. * Defaults to ``4096``
  823. */
  824. 'preview_max_x' => 4096,
  825. /**
  826. * The maximum height, in pixels, of a preview. A value of ``null`` means there
  827. * is no limit.
  828. *
  829. * Defaults to ``4096``
  830. */
  831. 'preview_max_y' => 4096,
  832. /**
  833. * max file size for generating image previews with imagegd (default behavior)
  834. * If the image is bigger, it'll try other preview generators, but will most
  835. * likely show the default mimetype icon. Set to -1 for no limit.
  836. *
  837. * Defaults to ``50`` megabytes
  838. */
  839. 'preview_max_filesize_image' => 50,
  840. /**
  841. * custom path for LibreOffice/OpenOffice binary
  842. *
  843. *
  844. * Defaults to ``''`` (empty string)
  845. */
  846. 'preview_libreoffice_path' => '/usr/bin/libreoffice',
  847. /**
  848. * Use this if LibreOffice/OpenOffice requires additional arguments.
  849. *
  850. * Defaults to ``''`` (empty string)
  851. */
  852. 'preview_office_cl_parameters' =>
  853. ' --headless --nologo --nofirststartwizard --invisible --norestore '.
  854. '--convert-to png --outdir ',
  855. /**
  856. * Only register providers that have been explicitly enabled
  857. *
  858. * The following providers are disabled by default due to performance or privacy
  859. * concerns:
  860. *
  861. * - OC\Preview\Illustrator
  862. * - OC\Preview\Movie
  863. * - OC\Preview\MSOffice2003
  864. * - OC\Preview\MSOffice2007
  865. * - OC\Preview\MSOfficeDoc
  866. * - OC\Preview\OpenDocument
  867. * - OC\Preview\PDF
  868. * - OC\Preview\Photoshop
  869. * - OC\Preview\Postscript
  870. * - OC\Preview\StarOffice
  871. * - OC\Preview\SVG
  872. * - OC\Preview\TIFF
  873. * - OC\Preview\Font
  874. *
  875. * The following providers are not available in Microsoft Windows:
  876. *
  877. * - OC\Preview\Movie
  878. * - OC\Preview\MSOfficeDoc
  879. * - OC\Preview\MSOffice2003
  880. * - OC\Preview\MSOffice2007
  881. * - OC\Preview\OpenDocument
  882. * - OC\Preview\StarOffice
  883. *
  884. * Defaults to the following providers:
  885. *
  886. * - OC\Preview\BMP
  887. * - OC\Preview\GIF
  888. * - OC\Preview\HEIC
  889. * - OC\Preview\JPEG
  890. * - OC\Preview\MarkDown
  891. * - OC\Preview\MP3
  892. * - OC\Preview\PNG
  893. * - OC\Preview\TXT
  894. * - OC\Preview\XBitmap
  895. */
  896. 'enabledPreviewProviders' => array(
  897. 'OC\Preview\PNG',
  898. 'OC\Preview\JPEG',
  899. 'OC\Preview\GIF',
  900. 'OC\Preview\HEIC',
  901. 'OC\Preview\BMP',
  902. 'OC\Preview\XBitmap',
  903. 'OC\Preview\MP3',
  904. 'OC\Preview\TXT',
  905. 'OC\Preview\MarkDown'
  906. ),
  907. /**
  908. * LDAP
  909. *
  910. * Global settings used by LDAP User and Group Backend
  911. */
  912. /**
  913. * defines the interval in minutes for the background job that checks user
  914. * existence and marks them as ready to be cleaned up. The number is always
  915. * minutes. Setting it to 0 disables the feature.
  916. * See command line (occ) methods ``ldap:show-remnants`` and ``user:delete``
  917. *
  918. * Defaults to ``51`` minutes
  919. */
  920. 'ldapUserCleanupInterval' => 51,
  921. /**
  922. * Sort groups in the user settings by name instead of the user count
  923. *
  924. * By enabling this the user count beside the group name is disabled as well.
  925. */
  926. 'sort_groups_by_name' => false,
  927. /**
  928. * Comments
  929. *
  930. * Global settings for the Comments infrastructure
  931. */
  932. /**
  933. * Replaces the default Comments Manager Factory. This can be utilized if an
  934. * own or 3rdParty CommentsManager should be used that – for instance – uses the
  935. * filesystem instead of the database to keep the comments.
  936. *
  937. * Defaults to ``\OC\Comments\ManagerFactory``
  938. */
  939. 'comments.managerFactory' => '\OC\Comments\ManagerFactory',
  940. /**
  941. * Replaces the default System Tags Manager Factory. This can be utilized if an
  942. * own or 3rdParty SystemTagsManager should be used that – for instance – uses the
  943. * filesystem instead of the database to keep the tags.
  944. *
  945. * Defaults to ``\OC\SystemTag\ManagerFactory``
  946. */
  947. 'systemtags.managerFactory' => '\OC\SystemTag\ManagerFactory',
  948. /**
  949. * Maintenance
  950. *
  951. * These options are for halting user activity when you are performing server
  952. * maintenance.
  953. */
  954. /**
  955. * Enable maintenance mode to disable Nextcloud
  956. *
  957. * If you want to prevent users from logging in to Nextcloud before you start
  958. * doing some maintenance work, you need to set the value of the maintenance
  959. * parameter to true. Please keep in mind that users who are already logged-in
  960. * are kicked out of Nextcloud instantly.
  961. *
  962. * Defaults to ``false``
  963. */
  964. 'maintenance' => false,
  965. /**
  966. * SSL
  967. */
  968. /**
  969. * Extra SSL options to be used for configuration.
  970. *
  971. * Defaults to an empty array.
  972. */
  973. 'openssl' => array(
  974. 'config' => '/absolute/location/of/openssl.cnf',
  975. ),
  976. /**
  977. * Memory caching backend configuration
  978. *
  979. * Available cache backends:
  980. *
  981. * * ``\OC\Memcache\APCu`` APC user backend
  982. * * ``\OC\Memcache\ArrayCache`` In-memory array-based backend (not recommended)
  983. * * ``\OC\Memcache\Memcached`` Memcached backend
  984. * * ``\OC\Memcache\Redis`` Redis backend
  985. *
  986. * Advice on choosing between the various backends:
  987. *
  988. * * APCu should be easiest to install. Almost all distributions have packages.
  989. * Use this for single user environment for all caches.
  990. * * Use Redis or Memcached for distributed environments.
  991. * For the local cache (you can configure two) take APCu.
  992. */
  993. /**
  994. * Memory caching backend for locally stored data
  995. *
  996. * * Used for host-specific data, e.g. file paths
  997. *
  998. * Defaults to ``none``
  999. */
  1000. 'memcache.local' => '\OC\Memcache\APCu',
  1001. /**
  1002. * Memory caching backend for distributed data
  1003. *
  1004. * * Used for installation-specific data, e.g. database caching
  1005. * * If unset, defaults to the value of memcache.local
  1006. *
  1007. * Defaults to ``none``
  1008. */
  1009. 'memcache.distributed' => '\OC\Memcache\Memcached',
  1010. /**
  1011. * Connection details for redis to use for memory caching in a single server configuration.
  1012. *
  1013. * For enhanced security it is recommended to configure Redis
  1014. * to require a password. See http://redis.io/topics/security
  1015. * for more information.
  1016. */
  1017. 'redis' => [
  1018. 'host' => 'localhost', // can also be a unix domain socket: '/tmp/redis.sock'
  1019. 'port' => 6379,
  1020. 'timeout' => 0.0,
  1021. 'password' => '', // Optional, if not defined no password will be used.
  1022. 'dbindex' => 0, // Optional, if undefined SELECT will not run and will use Redis Server's default DB Index.
  1023. ],
  1024. /**
  1025. * Connection details for a Redis Cluster
  1026. *
  1027. * Only for use with Redis Clustering, for Sentinel-based setups use the single
  1028. * server configuration above, and perform HA on the hostname.
  1029. *
  1030. * Redis Cluster support requires the php module phpredis in version 3.0.0 or
  1031. * higher.
  1032. *
  1033. * Available failover modes:
  1034. * - \RedisCluster::FAILOVER_NONE - only send commands to master nodes (default)
  1035. * - \RedisCluster::FAILOVER_ERROR - failover to slaves for read commands if master is unavailable (recommended)
  1036. * - \RedisCluster::FAILOVER_DISTRIBUTE - randomly distribute read commands across master and slaves
  1037. *
  1038. * WARNING: FAILOVER_DISTRIBUTE is a not recommended setting and we strongly
  1039. * suggest to not use it if you use Redis for file locking. Due to the way Redis
  1040. * is synchronized it could happen, that the read for an existing lock is
  1041. * scheduled to a slave that is not fully synchronized with the connected master
  1042. * which then causes a FileLocked exception.
  1043. *
  1044. * See https://redis.io/topics/cluster-spec for details about the Redis cluster
  1045. *
  1046. * Authentication works with phpredis version 4.2.1+. See
  1047. * https://github.com/phpredis/phpredis/commit/c5994f2a42b8a348af92d3acb4edff1328ad8ce1
  1048. */
  1049. 'redis.cluster' => [
  1050. 'seeds' => [ // provide some/all of the cluster servers to bootstrap discovery, port required
  1051. 'localhost:7000',
  1052. 'localhost:7001',
  1053. ],
  1054. 'timeout' => 0.0,
  1055. 'read_timeout' => 0.0,
  1056. 'failover_mode' => \RedisCluster::FAILOVER_ERROR,
  1057. 'password' => '', // Optional, if not defined no password will be used.
  1058. ],
  1059. /**
  1060. * Server details for one or more memcached servers to use for memory caching.
  1061. */
  1062. 'memcached_servers' => array(
  1063. // hostname, port and optional weight. Also see:
  1064. // http://www.php.net/manual/en/memcached.addservers.php
  1065. // http://www.php.net/manual/en/memcached.addserver.php
  1066. array('localhost', 11211),
  1067. //array('other.host.local', 11211),
  1068. ),
  1069. /**
  1070. * Connection options for memcached, see http://apprize.info/php/scaling/15.html
  1071. */
  1072. 'memcached_options' => array(
  1073. // Set timeouts to 50ms
  1074. \Memcached::OPT_CONNECT_TIMEOUT => 50,
  1075. \Memcached::OPT_RETRY_TIMEOUT => 50,
  1076. \Memcached::OPT_SEND_TIMEOUT => 50,
  1077. \Memcached::OPT_RECV_TIMEOUT => 50,
  1078. \Memcached::OPT_POLL_TIMEOUT => 50,
  1079. // Enable compression
  1080. \Memcached::OPT_COMPRESSION => true,
  1081. // Turn on consistent hashing
  1082. \Memcached::OPT_LIBKETAMA_COMPATIBLE => true,
  1083. // Enable Binary Protocol
  1084. \Memcached::OPT_BINARY_PROTOCOL => true,
  1085. // Binary serializer vill be enabled if the igbinary PECL module is available
  1086. //\Memcached::OPT_SERIALIZER => \Memcached::SERIALIZER_IGBINARY,
  1087. ),
  1088. /**
  1089. * Location of the cache folder, defaults to ``data/$user/cache`` where
  1090. * ``$user`` is the current user. When specified, the format will change to
  1091. * ``$cache_path/$user`` where ``$cache_path`` is the configured cache directory
  1092. * and ``$user`` is the user.
  1093. *
  1094. * Defaults to ``''`` (empty string)
  1095. */
  1096. 'cache_path' => '',
  1097. /**
  1098. * TTL of chunks located in the cache folder before they're removed by
  1099. * garbage collection (in seconds). Increase this value if users have
  1100. * issues uploading very large files via the Nextcloud Client as upload isn't
  1101. * completed within one day.
  1102. *
  1103. * Defaults to ``60*60*24`` (1 day)
  1104. */
  1105. 'cache_chunk_gc_ttl' => 60*60*24,
  1106. /**
  1107. * Using Object Store with Nextcloud
  1108. */
  1109. /**
  1110. * This example shows how to configure Nextcloud to store all files in a
  1111. * swift object storage.
  1112. *
  1113. * It is important to note that Nextcloud in object store mode will expect
  1114. * exclusive access to the object store container because it only stores the
  1115. * binary data for each file. The metadata is currently kept in the local
  1116. * database for performance reasons.
  1117. *
  1118. * WARNING: The current implementation is incompatible with any app that uses
  1119. * direct file IO and circumvents our virtual filesystem. That includes
  1120. * Encryption and Gallery. Gallery will store thumbnails directly in the
  1121. * filesystem and encryption will cause severe overhead because key files need
  1122. * to be fetched in addition to any requested file.
  1123. *
  1124. * One way to test is applying for a trystack account at http://trystack.org/
  1125. */
  1126. 'objectstore' => [
  1127. 'class' => 'OC\\Files\\ObjectStore\\Swift',
  1128. 'arguments' => [
  1129. // trystack will use your facebook id as the user name
  1130. 'username' => 'facebook100000123456789',
  1131. // in the trystack dashboard go to user -> settings -> API Password to
  1132. // generate a password
  1133. 'password' => 'Secr3tPaSSWoRdt7',
  1134. // must already exist in the objectstore, name can be different
  1135. 'container' => 'nextcloud',
  1136. // prefix to prepend to the fileid, default is 'oid:urn:'
  1137. 'objectPrefix' => 'oid:urn:',
  1138. // create the container if it does not exist. default is false
  1139. 'autocreate' => true,
  1140. // required, dev-/trystack defaults to 'RegionOne'
  1141. 'region' => 'RegionOne',
  1142. // The Identity / Keystone endpoint
  1143. 'url' => 'http://8.21.28.222:5000/v2.0',
  1144. // required on dev-/trystack
  1145. 'tenantName' => 'facebook100000123456789',
  1146. // dev-/trystack uses swift by default, the lib defaults to 'cloudFiles'
  1147. // if omitted
  1148. 'serviceName' => 'swift',
  1149. // The Interface / url Type, optional
  1150. 'urlType' => 'internal'
  1151. ],
  1152. ],
  1153. /**
  1154. * To use swift V3
  1155. */
  1156. 'objectstore' => [
  1157. 'class' => 'OC\\Files\\ObjectStore\\Swift',
  1158. 'arguments' => [
  1159. 'autocreate' => true,
  1160. 'user' => [
  1161. 'name' => 'swift',
  1162. 'password' => 'swift',
  1163. 'domain' => [
  1164. 'name' => 'default',
  1165. ],
  1166. ],
  1167. 'scope' => [
  1168. 'project' => [
  1169. 'name' => 'service',
  1170. 'domain' => [
  1171. 'name' => 'default',
  1172. ],
  1173. ],
  1174. ],
  1175. 'tenantName' => 'service',
  1176. 'serviceName' => 'swift',
  1177. 'region' => 'regionOne',
  1178. 'url' => 'http://yourswifthost:5000/v3',
  1179. 'bucket' => 'nextcloud',
  1180. ],
  1181. ],
  1182. /**
  1183. * Sharing
  1184. *
  1185. * Global settings for Sharing
  1186. */
  1187. /**
  1188. * Replaces the default Share Provider Factory. This can be utilized if
  1189. * own or 3rdParty Share Providers are used that – for instance – use the
  1190. * filesystem instead of the database to keep the share information.
  1191. *
  1192. * Defaults to ``\OC\Share20\ProviderFactory``
  1193. */
  1194. 'sharing.managerFactory' => '\OC\Share20\ProviderFactory',
  1195. /**
  1196. * Define max number of results returned by the user search for auto-completion
  1197. * Default is unlimited (value set to 0).
  1198. */
  1199. 'sharing.maxAutocompleteResults' => 0,
  1200. /**
  1201. * Define the minimum length of the search string before we start auto-completion
  1202. * Default is no limit (value set to 0)
  1203. */
  1204. 'sharing.minSearchStringLength' => 0,
  1205. /**
  1206. * Set to true to enable that internal shares need to be accepted by the users by default.
  1207. * Users can change this for their account in their personal sharing settings
  1208. */
  1209. 'sharing.enable_share_accept' => false,
  1210. /**
  1211. * Set to true to enforce that internal shares need to be accepted
  1212. */
  1213. 'sharing.force_share_accept' => false,
  1214. /**
  1215. * Set to false to stop sending a mail when users receive a share
  1216. */
  1217. 'sharing.enable_share_mail' => true,
  1218. /**
  1219. * All other configuration options
  1220. */
  1221. /**
  1222. * Additional driver options for the database connection, eg. to enable SSL
  1223. * encryption in MySQL or specify a custom wait timeout on a cheap hoster.
  1224. */
  1225. 'dbdriveroptions' => array(
  1226. PDO::MYSQL_ATTR_SSL_CA => '/file/path/to/ca_cert.pem',
  1227. PDO::MYSQL_ATTR_INIT_COMMAND => 'SET wait_timeout = 28800'
  1228. ),
  1229. /**
  1230. * sqlite3 journal mode can be specified using this configuration parameter -
  1231. * can be 'WAL' or 'DELETE' see for more details https://www.sqlite.org/wal.html
  1232. */
  1233. 'sqlite.journal_mode' => 'DELETE',
  1234. /**
  1235. * During setup, if requirements are met (see below), this setting is set to true
  1236. * and MySQL can handle 4 byte characters instead of 3 byte characters.
  1237. *
  1238. * If you want to convert an existing 3-byte setup into a 4-byte setup please
  1239. * set the parameters in MySQL as mentioned below and run the migration command:
  1240. * ./occ db:convert-mysql-charset
  1241. * The config setting will be set automatically after a successful run.
  1242. *
  1243. * Consult the documentation for more details.
  1244. *
  1245. * MySQL requires a special setup for longer indexes (> 767 bytes) which are
  1246. * needed:
  1247. *
  1248. * [mysqld]
  1249. * innodb_large_prefix=ON
  1250. * innodb_file_format=Barracuda
  1251. * innodb_file_per_table=ON
  1252. *
  1253. * Tables will be created with
  1254. * * character set: utf8mb4
  1255. * * collation: utf8mb4_bin
  1256. * * row_format: compressed
  1257. *
  1258. * See:
  1259. * https://dev.mysql.com/doc/refman/5.7/en/charset-unicode-utf8mb4.html
  1260. * https://dev.mysql.com/doc/refman/5.7/en/innodb-parameters.html#sysvar_innodb_large_prefix
  1261. * https://mariadb.com/kb/en/mariadb/xtradbinnodb-server-system-variables/#innodb_large_prefix
  1262. * http://www.tocker.ca/2013/10/31/benchmarking-innodb-page-compression-performance.html
  1263. * http://mechanics.flite.com/blog/2014/07/29/using-innodb-large-prefix-to-avoid-error-1071/
  1264. */
  1265. 'mysql.utf8mb4' => false,
  1266. /**
  1267. * Database types that are supported for installation.
  1268. *
  1269. * Available:
  1270. * - sqlite (SQLite3)
  1271. * - mysql (MySQL)
  1272. * - pgsql (PostgreSQL)
  1273. * - oci (Oracle)
  1274. *
  1275. * Defaults to the following databases:
  1276. * - sqlite (SQLite3)
  1277. * - mysql (MySQL)
  1278. * - pgsql (PostgreSQL)
  1279. */
  1280. 'supportedDatabases' => array(
  1281. 'sqlite',
  1282. 'mysql',
  1283. 'pgsql',
  1284. 'oci',
  1285. ),
  1286. /**
  1287. * Override where Nextcloud stores temporary files. Useful in situations where
  1288. * the system temporary directory is on a limited space ramdisk or is otherwise
  1289. * restricted, or if external storages which do not support streaming are in
  1290. * use.
  1291. *
  1292. * The Web server user must have write access to this directory.
  1293. */
  1294. 'tempdirectory' => '/tmp/nextcloudtemp',
  1295. /**
  1296. * Hashing
  1297. */
  1298. /**
  1299. * By default Nextcloud will use the Argon2 password hashing if available.
  1300. * However if for whatever reason you want to stick with the PASSWORD_DEFAULT
  1301. * of your php version. Then set the setting to true.
  1302. */
  1303. 'hashing_default_password' => false,
  1304. /**
  1305. *
  1306. * Nextcloud uses the Argon2 algorithm (with PHP >= 7.2) to create hashes by its
  1307. * own and exposes its configuration options as following. More information can
  1308. * be found at: https://www.php.net/manual/en/function.password-hash.php
  1309. */
  1310. /**
  1311. * The allowed maximum memory in KiB to be used by the algorithm for computing a
  1312. * hash. The smallest possible value is 8. Values that undershoot the minimum
  1313. * will be ignored in favor of the default.
  1314. */
  1315. 'hashingMemoryCost' => PASSWORD_ARGON2_DEFAULT_MEMORY_COST,
  1316. /**
  1317. * The allowed maximum time in seconds that can be used by the algorithm for
  1318. * computing a hash. The value must be an integer, and the minimum value is 1.
  1319. * Values that undershoot the minimum will be ignored in favor of the default.
  1320. */
  1321. 'hashingTimeCost' => PASSWORD_ARGON2_DEFAULT_TIME_COST,
  1322. /**
  1323. * The allowed number of CPU threads that can be used by the algorithm for
  1324. * computing a hash. The value must be an integer, and the minimum value is 1.
  1325. * Rationally it does not help to provide a number higher than the available
  1326. * threads on the machine. Values that undershoot the minimum will be ignored
  1327. * in favor of the default.
  1328. */
  1329. 'hashingThreads' => PASSWORD_ARGON2_DEFAULT_THREADS,
  1330. /**
  1331. * The hashing cost used by hashes generated by Nextcloud
  1332. * Using a higher value requires more time and CPU power to calculate the hashes
  1333. */
  1334. 'hashingCost' => 10,
  1335. /**
  1336. * Blacklist a specific file or files and disallow the upload of files
  1337. * with this name. ``.htaccess`` is blocked by default.
  1338. * WARNING: USE THIS ONLY IF YOU KNOW WHAT YOU ARE DOING.
  1339. *
  1340. * Defaults to ``array('.htaccess')``
  1341. */
  1342. 'blacklisted_files' => array('.htaccess'),
  1343. /**
  1344. * Define a default folder for shared files and folders other than root.
  1345. * Changes to this value will only have effect on new shares.
  1346. *
  1347. * Defaults to ``/``
  1348. */
  1349. 'share_folder' => '/',
  1350. /**
  1351. * If you are applying a theme to Nextcloud, enter the name of the theme here.
  1352. * The default location for themes is ``nextcloud/themes/``.
  1353. *
  1354. * Defaults to the theming app which is shipped since Nextcloud 9
  1355. */
  1356. 'theme' => '',
  1357. /**
  1358. * The default cipher for encrypting files. Currently AES-128-CFB and
  1359. * AES-256-CFB are supported.
  1360. */
  1361. 'cipher' => 'AES-256-CFB',
  1362. /**
  1363. * The minimum Nextcloud desktop client version that will be allowed to sync with
  1364. * this server instance. All connections made from earlier clients will be denied
  1365. * by the server. Defaults to the minimum officially supported Nextcloud desktop
  1366. * clientversion at the time of release of this server version.
  1367. *
  1368. * When changing this, note that older unsupported versions of the Nextcloud desktop
  1369. * client may not function as expected, and could lead to permanent data loss for
  1370. * clients or other unexpected results.
  1371. *
  1372. * Defaults to ``2.0.0``
  1373. */
  1374. 'minimum.supported.desktop.version' => '2.0.0',
  1375. /**
  1376. * EXPERIMENTAL: option whether to include external storage in quota
  1377. * calculation, defaults to false.
  1378. *
  1379. * Defaults to ``false``
  1380. */
  1381. 'quota_include_external_storage' => false,
  1382. /**
  1383. * When an external storage is unavailable for some reasons, it will be flagged
  1384. * as such for 10 minutes. When the trigger is a failed authentication attempt
  1385. * the delay is higher and can be controlled with this option. The motivation
  1386. * is to make account lock outs at Active Directories (and compatible) more
  1387. * unlikely.
  1388. *
  1389. * Defaults to ``1800`` (seconds)
  1390. */
  1391. 'external_storage.auth_availability_delay' => 1800,
  1392. /**
  1393. * Specifies how often the local filesystem (the Nextcloud data/ directory, and
  1394. * NFS mounts in data/) is checked for changes made outside Nextcloud. This
  1395. * does not apply to external storages.
  1396. *
  1397. * 0 -> Never check the filesystem for outside changes, provides a performance
  1398. * increase when it's certain that no changes are made directly to the
  1399. * filesystem
  1400. *
  1401. * 1 -> Check each file or folder at most once per request, recommended for
  1402. * general use if outside changes might happen.
  1403. *
  1404. * Defaults to ``0``
  1405. */
  1406. 'filesystem_check_changes' => 0,
  1407. /**
  1408. * By default Nextcloud will store the part files created during upload in the
  1409. * same storage as the upload target. Setting this to false will store the part
  1410. * files in the root of the users folder which might be required to work with certain
  1411. * external storage setups that have limited rename capabilities.
  1412. *
  1413. * Defaults to ``true``
  1414. */
  1415. 'part_file_in_storage' => true,
  1416. /**
  1417. * Where ``mount.json`` file should be stored, defaults to ``data/mount.json``
  1418. * in the Nextcloud directory.
  1419. *
  1420. * Defaults to ``data/mount.json`` in the Nextcloud directory.
  1421. */
  1422. 'mount_file' => '/var/www/nextcloud/data/mount.json',
  1423. /**
  1424. * When ``true``, prevent Nextcloud from changing the cache due to changes in
  1425. * the filesystem for all storage.
  1426. *
  1427. * Defaults to ``false``
  1428. */
  1429. 'filesystem_cache_readonly' => false,
  1430. /**
  1431. * Secret used by Nextcloud for various purposes, e.g. to encrypt data. If you
  1432. * lose this string there will be data corruption.
  1433. */
  1434. 'secret' => '',
  1435. /**
  1436. * List of trusted proxy servers
  1437. *
  1438. * You may set this to an array containing a combination of
  1439. * - IPv4 addresses, e.g. `192.168.2.123`
  1440. * - IPv4 ranges in CIDR notation, e.g. `192.168.2.0/24`
  1441. * - IPv6 addresses, e.g. `fd9e:21a7:a92c:2323::1`
  1442. *
  1443. * _(CIDR notation for IPv6 is currently work in progress and thus not
  1444. * available as of yet)_
  1445. *
  1446. * When an incoming request's `REMOTE_ADDR` matches any of the IP addresses
  1447. * specified here, it is assumed to be a proxy instead of a client. Thus, the
  1448. * client IP will be read from the HTTP header specified in
  1449. * `forwarded_for_headers` instead of from `REMOTE_ADDR`.
  1450. *
  1451. * So if you configure `trusted_proxies`, also consider setting
  1452. * `forwarded_for_headers` which otherwise defaults to `HTTP_X_FORWARDED_FOR`
  1453. * (the `X-Forwarded-For` header).
  1454. *
  1455. * Defaults to an empty array.
  1456. */
  1457. 'trusted_proxies' => array('203.0.113.45', '198.51.100.128', '192.168.2.0/24'),
  1458. /**
  1459. * Headers that should be trusted as client IP address in combination with
  1460. * `trusted_proxies`. If the HTTP header looks like 'X-Forwarded-For', then use
  1461. * 'HTTP_X_FORWARDED_FOR' here.
  1462. *
  1463. * If set incorrectly, a client can spoof their IP address as visible to
  1464. * Nextcloud, bypassing access controls and making logs useless!
  1465. *
  1466. * Defaults to ``'HTTP_X_FORWARDED_FOR'``
  1467. */
  1468. 'forwarded_for_headers' => array('HTTP_X_FORWARDED', 'HTTP_FORWARDED_FOR'),
  1469. /**
  1470. * max file size for animating gifs on public-sharing-site.
  1471. * If the gif is bigger, it'll show a static preview
  1472. *
  1473. * Value represents the maximum filesize in megabytes. Set to ``-1`` for
  1474. * no limit.
  1475. *
  1476. * Defaults to ``10`` megabytes
  1477. */
  1478. 'max_filesize_animated_gifs_public_sharing' => 10,
  1479. /**
  1480. * Enables transactional file locking.
  1481. * This is enabled by default.
  1482. *
  1483. * Prevents concurrent processes from accessing the same files
  1484. * at the same time. Can help prevent side effects that would
  1485. * be caused by concurrent operations. Mainly relevant for
  1486. * very large installations with many users working with
  1487. * shared files.
  1488. *
  1489. * Defaults to ``true``
  1490. */
  1491. 'filelocking.enabled' => true,
  1492. /**
  1493. * Set the lock's time-to-live in seconds.
  1494. *
  1495. * Any lock older than this will be automatically cleaned up.
  1496. *
  1497. * Defaults to ``60*60`` seconds (1 hour) or the php
  1498. * max_execution_time, whichever is higher.
  1499. */
  1500. 'filelocking.ttl' => 60*60,
  1501. /**
  1502. * Memory caching backend for file locking
  1503. *
  1504. * Because most memcache backends can clean values without warning using redis
  1505. * is highly recommended to *avoid data loss*.
  1506. *
  1507. * Defaults to ``none``
  1508. */
  1509. 'memcache.locking' => '\\OC\\Memcache\\Redis',
  1510. /**
  1511. * Enable locking debug logging
  1512. *
  1513. * Note that this can lead to a very large volume of log items being written which can lead
  1514. * to performance degradation and large log files on busy instance.
  1515. *
  1516. * Thus enabling this in production for longer periods of time is not recommended
  1517. * or should be used together with the ``log.condition`` setting.
  1518. */
  1519. 'filelocking.debug' => false,
  1520. /**
  1521. * Disable the web based updater
  1522. */
  1523. 'upgrade.disable-web' => false,
  1524. /**
  1525. * Set this Nextcloud instance to debugging mode
  1526. *
  1527. * Only enable this for local development and not in production environments
  1528. * This will disable the minifier and outputs some additional debug information
  1529. *
  1530. * Defaults to ``false``
  1531. */
  1532. 'debug' => false,
  1533. /**
  1534. * Sets the data-fingerprint of the current data served
  1535. *
  1536. * This is a property used by the clients to find out if a backup has been
  1537. * restored on the server. Once a backup is restored run
  1538. * ./occ maintenance:data-fingerprint
  1539. * To set this to a new value.
  1540. *
  1541. * Updating/Deleting this value can make connected clients stall until
  1542. * the user has resolved conflicts.
  1543. *
  1544. * Defaults to ``''`` (empty string)
  1545. */
  1546. 'data-fingerprint' => '',
  1547. /**
  1548. * This entry is just here to show a warning in case somebody copied the sample
  1549. * configuration. DO NOT ADD THIS SWITCH TO YOUR CONFIGURATION!
  1550. *
  1551. * If you, brave person, have read until here be aware that you should not
  1552. * modify *ANY* settings in this file without reading the documentation.
  1553. */
  1554. 'copied_sample_config' => true,
  1555. /**
  1556. * use a custom lookup server to publish user data
  1557. */
  1558. 'lookup_server' => 'https://lookup.nextcloud.com',
  1559. /**
  1560. * set to true if the server is used in a setup based on Nextcloud's Global Scale architecture
  1561. */
  1562. 'gs.enabled' => false,
  1563. /**
  1564. * by default federation is only used internally in a Global Scale setup
  1565. * If you want to allow federation outside of your environment set it to 'global'
  1566. */
  1567. 'gs.federation' => 'internal',
  1568. /**
  1569. * List of incompatible user agents opted out from Same Site Cookie Protection.
  1570. * Some user agents are notorious and don't really properly follow HTTP
  1571. * specifications. For those, have an opt-out.
  1572. *
  1573. * WARNING: only use this if you know what you are doing
  1574. */
  1575. 'csrf.optout' => array(
  1576. '/^WebDAVFS/', // OS X Finder
  1577. '/^Microsoft-WebDAV-MiniRedir/', // Windows webdav drive
  1578. ),
  1579. /**
  1580. * By default there is on public pages a link shown that allows users to
  1581. * learn about the "simple sign up" - see https://nextcloud.com/signup/
  1582. *
  1583. * If this is set to "false" it will not show the link.
  1584. */
  1585. 'simpleSignUpLink.shown' => true,
  1586. /**
  1587. * By default autocompletion is enabled for the login form on Nextcloud's login page.
  1588. * While this is enabled, browsers are allowed to "remember" login names and such.
  1589. * Some companies require it to be disabled to comply with their security policy.
  1590. *
  1591. * Simply set this property to "false", if you want to turn this feature off.
  1592. */
  1593. 'login_form_autocomplete' => true,
  1594. );