You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

config.sample.php 76KB

Do not automatically try to enable index.php-less URLs (#24539) The current logic for mod_rewrite relies on the fact that people have properly configured ownCloud, basically it reads from the `overwrite.cli.ur l` entry and then derives the `RewriteBase` from it. This usually works. However, since the ownCloud packages seem to install themselves at `/owncloud` (because subfolders are cool or so…) _a lot_ of people have just created a new Virtual Host for it or have simply symlinked the path etc. This means that `overwrite.cli.url` is wrong, which fails hard if it is used as RewriteBase since Apache does not know where it should serve files from. In the end the ownCloud instance will not be accessible anymore and users will be frustrated. Also some shared hosters like 1&1 (because using shared hosters is so awesome… ;-)) have somewhat dubious Apache configurations or use versions of mod_rewrite from the mediveal age. (because updating is money or so…) Anyhow. This makes this explicitly an opt-in configuration flag. If `htaccess.RewriteBase` is set then it will configure index.php-less URLs, if admins set that after installation and don't want to wait until the next ownCloud version they can run `occ maintenance:update:htaccess`. For ownCloud 9.0 we also have to add a repair step to make sure that instances that already have a RewriteBase configured continue to use it by copying it into the config file. That way all existing URLs stay valid. That one is not in this PR since this is unneccessary in master. Effectively this reduces another risk of breakage when updating from ownCloud 8 to ownCloud 9. Fixes https://github.com/owncloud/core/issues/24525, https://github.com/owncloud/core/issues/24426 and probably some more.
8 years ago
Do not automatically try to enable index.php-less URLs (#24539) The current logic for mod_rewrite relies on the fact that people have properly configured ownCloud, basically it reads from the `overwrite.cli.ur l` entry and then derives the `RewriteBase` from it. This usually works. However, since the ownCloud packages seem to install themselves at `/owncloud` (because subfolders are cool or so…) _a lot_ of people have just created a new Virtual Host for it or have simply symlinked the path etc. This means that `overwrite.cli.url` is wrong, which fails hard if it is used as RewriteBase since Apache does not know where it should serve files from. In the end the ownCloud instance will not be accessible anymore and users will be frustrated. Also some shared hosters like 1&1 (because using shared hosters is so awesome… ;-)) have somewhat dubious Apache configurations or use versions of mod_rewrite from the mediveal age. (because updating is money or so…) Anyhow. This makes this explicitly an opt-in configuration flag. If `htaccess.RewriteBase` is set then it will configure index.php-less URLs, if admins set that after installation and don't want to wait until the next ownCloud version they can run `occ maintenance:update:htaccess`. For ownCloud 9.0 we also have to add a repair step to make sure that instances that already have a RewriteBase configured continue to use it by copying it into the config file. That way all existing URLs stay valid. That one is not in this PR since this is unneccessary in master. Effectively this reduces another risk of breakage when updating from ownCloud 8 to ownCloud 9. Fixes https://github.com/owncloud/core/issues/24525, https://github.com/owncloud/core/issues/24426 and probably some more.
8 years ago
Do not automatically try to enable index.php-less URLs (#24539) The current logic for mod_rewrite relies on the fact that people have properly configured ownCloud, basically it reads from the `overwrite.cli.ur l` entry and then derives the `RewriteBase` from it. This usually works. However, since the ownCloud packages seem to install themselves at `/owncloud` (because subfolders are cool or so…) _a lot_ of people have just created a new Virtual Host for it or have simply symlinked the path etc. This means that `overwrite.cli.url` is wrong, which fails hard if it is used as RewriteBase since Apache does not know where it should serve files from. In the end the ownCloud instance will not be accessible anymore and users will be frustrated. Also some shared hosters like 1&1 (because using shared hosters is so awesome… ;-)) have somewhat dubious Apache configurations or use versions of mod_rewrite from the mediveal age. (because updating is money or so…) Anyhow. This makes this explicitly an opt-in configuration flag. If `htaccess.RewriteBase` is set then it will configure index.php-less URLs, if admins set that after installation and don't want to wait until the next ownCloud version they can run `occ maintenance:update:htaccess`. For ownCloud 9.0 we also have to add a repair step to make sure that instances that already have a RewriteBase configured continue to use it by copying it into the config file. That way all existing URLs stay valid. That one is not in this PR since this is unneccessary in master. Effectively this reduces another risk of breakage when updating from ownCloud 8 to ownCloud 9. Fixes https://github.com/owncloud/core/issues/24525, https://github.com/owncloud/core/issues/24426 and probably some more.
8 years ago
Do not automatically try to enable index.php-less URLs (#24539) The current logic for mod_rewrite relies on the fact that people have properly configured ownCloud, basically it reads from the `overwrite.cli.ur l` entry and then derives the `RewriteBase` from it. This usually works. However, since the ownCloud packages seem to install themselves at `/owncloud` (because subfolders are cool or so…) _a lot_ of people have just created a new Virtual Host for it or have simply symlinked the path etc. This means that `overwrite.cli.url` is wrong, which fails hard if it is used as RewriteBase since Apache does not know where it should serve files from. In the end the ownCloud instance will not be accessible anymore and users will be frustrated. Also some shared hosters like 1&1 (because using shared hosters is so awesome… ;-)) have somewhat dubious Apache configurations or use versions of mod_rewrite from the mediveal age. (because updating is money or so…) Anyhow. This makes this explicitly an opt-in configuration flag. If `htaccess.RewriteBase` is set then it will configure index.php-less URLs, if admins set that after installation and don't want to wait until the next ownCloud version they can run `occ maintenance:update:htaccess`. For ownCloud 9.0 we also have to add a repair step to make sure that instances that already have a RewriteBase configured continue to use it by copying it into the config file. That way all existing URLs stay valid. That one is not in this PR since this is unneccessary in master. Effectively this reduces another risk of breakage when updating from ownCloud 8 to ownCloud 9. Fixes https://github.com/owncloud/core/issues/24525, https://github.com/owncloud/core/issues/24426 and probably some more.
8 years ago
Do not automatically try to enable index.php-less URLs (#24539) The current logic for mod_rewrite relies on the fact that people have properly configured ownCloud, basically it reads from the `overwrite.cli.ur l` entry and then derives the `RewriteBase` from it. This usually works. However, since the ownCloud packages seem to install themselves at `/owncloud` (because subfolders are cool or so…) _a lot_ of people have just created a new Virtual Host for it or have simply symlinked the path etc. This means that `overwrite.cli.url` is wrong, which fails hard if it is used as RewriteBase since Apache does not know where it should serve files from. In the end the ownCloud instance will not be accessible anymore and users will be frustrated. Also some shared hosters like 1&1 (because using shared hosters is so awesome… ;-)) have somewhat dubious Apache configurations or use versions of mod_rewrite from the mediveal age. (because updating is money or so…) Anyhow. This makes this explicitly an opt-in configuration flag. If `htaccess.RewriteBase` is set then it will configure index.php-less URLs, if admins set that after installation and don't want to wait until the next ownCloud version they can run `occ maintenance:update:htaccess`. For ownCloud 9.0 we also have to add a repair step to make sure that instances that already have a RewriteBase configured continue to use it by copying it into the config file. That way all existing URLs stay valid. That one is not in this PR since this is unneccessary in master. Effectively this reduces another risk of breakage when updating from ownCloud 8 to ownCloud 9. Fixes https://github.com/owncloud/core/issues/24525, https://github.com/owncloud/core/issues/24426 and probably some more.
8 years ago
Do not automatically try to enable index.php-less URLs (#24539) The current logic for mod_rewrite relies on the fact that people have properly configured ownCloud, basically it reads from the `overwrite.cli.ur l` entry and then derives the `RewriteBase` from it. This usually works. However, since the ownCloud packages seem to install themselves at `/owncloud` (because subfolders are cool or so…) _a lot_ of people have just created a new Virtual Host for it or have simply symlinked the path etc. This means that `overwrite.cli.url` is wrong, which fails hard if it is used as RewriteBase since Apache does not know where it should serve files from. In the end the ownCloud instance will not be accessible anymore and users will be frustrated. Also some shared hosters like 1&1 (because using shared hosters is so awesome… ;-)) have somewhat dubious Apache configurations or use versions of mod_rewrite from the mediveal age. (because updating is money or so…) Anyhow. This makes this explicitly an opt-in configuration flag. If `htaccess.RewriteBase` is set then it will configure index.php-less URLs, if admins set that after installation and don't want to wait until the next ownCloud version they can run `occ maintenance:update:htaccess`. For ownCloud 9.0 we also have to add a repair step to make sure that instances that already have a RewriteBase configured continue to use it by copying it into the config file. That way all existing URLs stay valid. That one is not in this PR since this is unneccessary in master. Effectively this reduces another risk of breakage when updating from ownCloud 8 to ownCloud 9. Fixes https://github.com/owncloud/core/issues/24525, https://github.com/owncloud/core/issues/24426 and probably some more.
8 years ago
7 years ago
7 years ago
2 years ago
LDAP User Cleanup: Port from stable7 without further adjustements LDAP User Cleanup background job for user clean up adjust user backend for clean up register background job remove dead code dependency injection make Helper non-static for proper testing check whether it is OK to run clean up job. Do not forget to pass arguments. use correct method to get the config from server methods can be private, proper indirect testing is given no automatic user deletion make limit readable for test purposes make method less complex add first tests let preferences accept limit and offset for getUsersForValue DI via constructor does not work for background jobs after detecting, now we have retrieving deleted users and their details we need this method to be public for now finalize export method, add missing getter clean up namespaces and get rid of unnecessary files helper is not static anymore cleanup according to scrutinizer add cli tool to show deleted users uses are necessary after recent namespace change also remove user from mappings table on deletion add occ command to delete users fix use statement improve output big fixes / improvements PHP doc return true in userExists early for cleaning up deleted users bump version control state and interval with one config.php setting, now ldapUserCleanupInterval. 0 will disable it. enabled by default. improve doc rename cli method to be consistent with others introduce ldapUserCleanupInterval in sample config don't show last login as unix epoche start when no login happend less log output consistent namespace for OfflineUser rename GarbageCollector to DeletedUsersIndex and move it to user subdir fix unit tests add tests for deleteUser more test adjustements Conflicts: apps/user_ldap/ajax/clearMappings.php apps/user_ldap/appinfo/app.php apps/user_ldap/lib/access.php apps/user_ldap/lib/helper.php apps/user_ldap/tests/helper.php core/register_command.php lib/private/preferences.php lib/private/user.php add ldap:check-user to check user existance on the fly Conflicts: apps/user_ldap/lib/helper.php forgotten file PHPdoc fixes, no code change and don't forget to adjust tests
9 years ago
LDAP User Cleanup: Port from stable7 without further adjustements LDAP User Cleanup background job for user clean up adjust user backend for clean up register background job remove dead code dependency injection make Helper non-static for proper testing check whether it is OK to run clean up job. Do not forget to pass arguments. use correct method to get the config from server methods can be private, proper indirect testing is given no automatic user deletion make limit readable for test purposes make method less complex add first tests let preferences accept limit and offset for getUsersForValue DI via constructor does not work for background jobs after detecting, now we have retrieving deleted users and their details we need this method to be public for now finalize export method, add missing getter clean up namespaces and get rid of unnecessary files helper is not static anymore cleanup according to scrutinizer add cli tool to show deleted users uses are necessary after recent namespace change also remove user from mappings table on deletion add occ command to delete users fix use statement improve output big fixes / improvements PHP doc return true in userExists early for cleaning up deleted users bump version control state and interval with one config.php setting, now ldapUserCleanupInterval. 0 will disable it. enabled by default. improve doc rename cli method to be consistent with others introduce ldapUserCleanupInterval in sample config don't show last login as unix epoche start when no login happend less log output consistent namespace for OfflineUser rename GarbageCollector to DeletedUsersIndex and move it to user subdir fix unit tests add tests for deleteUser more test adjustements Conflicts: apps/user_ldap/ajax/clearMappings.php apps/user_ldap/appinfo/app.php apps/user_ldap/lib/access.php apps/user_ldap/lib/helper.php apps/user_ldap/tests/helper.php core/register_command.php lib/private/preferences.php lib/private/user.php add ldap:check-user to check user existance on the fly Conflicts: apps/user_ldap/lib/helper.php forgotten file PHPdoc fixes, no code change and don't forget to adjust tests
9 years ago
LDAP User Cleanup: Port from stable7 without further adjustements LDAP User Cleanup background job for user clean up adjust user backend for clean up register background job remove dead code dependency injection make Helper non-static for proper testing check whether it is OK to run clean up job. Do not forget to pass arguments. use correct method to get the config from server methods can be private, proper indirect testing is given no automatic user deletion make limit readable for test purposes make method less complex add first tests let preferences accept limit and offset for getUsersForValue DI via constructor does not work for background jobs after detecting, now we have retrieving deleted users and their details we need this method to be public for now finalize export method, add missing getter clean up namespaces and get rid of unnecessary files helper is not static anymore cleanup according to scrutinizer add cli tool to show deleted users uses are necessary after recent namespace change also remove user from mappings table on deletion add occ command to delete users fix use statement improve output big fixes / improvements PHP doc return true in userExists early for cleaning up deleted users bump version control state and interval with one config.php setting, now ldapUserCleanupInterval. 0 will disable it. enabled by default. improve doc rename cli method to be consistent with others introduce ldapUserCleanupInterval in sample config don't show last login as unix epoche start when no login happend less log output consistent namespace for OfflineUser rename GarbageCollector to DeletedUsersIndex and move it to user subdir fix unit tests add tests for deleteUser more test adjustements Conflicts: apps/user_ldap/ajax/clearMappings.php apps/user_ldap/appinfo/app.php apps/user_ldap/lib/access.php apps/user_ldap/lib/helper.php apps/user_ldap/tests/helper.php core/register_command.php lib/private/preferences.php lib/private/user.php add ldap:check-user to check user existance on the fly Conflicts: apps/user_ldap/lib/helper.php forgotten file PHPdoc fixes, no code change and don't forget to adjust tests
9 years ago
8 years ago
8 years ago
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441
  1. <?php
  2. /**
  3. * This configuration file is only provided to document the different
  4. * configuration options and their usage.
  5. *
  6. * DO NOT COMPLETELY BASE YOUR CONFIGURATION FILE ON THIS SAMPLE. THIS MAY BREAK
  7. * YOUR INSTANCE. Instead, manually copy configuration switches that you
  8. * consider important for your instance to your working ``config.php``, and
  9. * apply configuration options that are pertinent for your instance.
  10. *
  11. * This file is used to generate the configuration documentation.
  12. * Please consider following requirements of the current parser:
  13. * * all comments need to start with `/**` and end with ` *\/` - each on their
  14. * own line
  15. * * add a `@see CONFIG_INDEX` to copy a previously described config option
  16. * also to this line
  17. * * everything between the ` *\/` and the next `/**` will be treated as the
  18. * config option
  19. * * use RST syntax
  20. */
  21. $CONFIG = [
  22. /**
  23. * Default Parameters
  24. *
  25. * These parameters are configured by the Nextcloud installer, and are required
  26. * for your Nextcloud server to operate.
  27. */
  28. /**
  29. * This is a unique identifier for your Nextcloud installation, created
  30. * automatically by the installer. This example is for documentation only,
  31. * and you should never use it because it will not work. A valid ``instanceid``
  32. * is created when you install Nextcloud.
  33. *
  34. * 'instanceid' => 'd3c944a9a',
  35. */
  36. 'instanceid' => '',
  37. /**
  38. * The salt used to hash all passwords, auto-generated by the Nextcloud
  39. * installer. (There are also per-user salts.) If you lose this salt you lose
  40. * all your passwords. This example is for documentation only, and you should
  41. * never use it.
  42. *
  43. * @deprecated This salt is deprecated and only used for legacy-compatibility,
  44. * developers should *NOT* use this value for anything nowadays.
  45. *
  46. * 'passwordsalt' => 'd3c944a9af095aa08f',
  47. */
  48. 'passwordsalt' => '',
  49. /**
  50. * Secret used by Nextcloud for various purposes, e.g. to encrypt data. If you
  51. * lose this string there will be data corruption.
  52. */
  53. 'secret' => '',
  54. /**
  55. * Your list of trusted domains that users can log into. Specifying trusted
  56. * domains prevents host header poisoning. Do not remove this, as it performs
  57. * necessary security checks.
  58. * You can specify:
  59. *
  60. * - the exact hostname of your host or virtual host, e.g. demo.example.org.
  61. * - the exact hostname with permitted port, e.g. demo.example.org:443.
  62. * This disallows all other ports on this host
  63. * - use * as a wildcard, e.g. ubos-raspberry-pi*.local will allow
  64. * ubos-raspberry-pi.local and ubos-raspberry-pi-2.local
  65. * - the IP address with or without permitted port, e.g. [2001:db8::1]:8080
  66. * Using TLS certificates where commonName=<IP address> is deprecated
  67. */
  68. 'trusted_domains' =>
  69. [
  70. 'demo.example.org',
  71. 'otherdomain.example.org',
  72. '10.111.112.113',
  73. '[2001:db8::1]'
  74. ],
  75. /**
  76. * Where user files are stored. The SQLite database is also stored here, when
  77. * you use SQLite.
  78. *
  79. * Default to ``data/`` in the Nextcloud directory.
  80. */
  81. 'datadirectory' => '/var/www/nextcloud/data',
  82. /**
  83. * The current version number of your Nextcloud installation. This is set up
  84. * during installation and update, so you shouldn't need to change it.
  85. */
  86. 'version' => '',
  87. /**
  88. * Identifies the database used with this installation. See also config option
  89. * ``supportedDatabases``
  90. *
  91. * Available:
  92. * - sqlite3 (SQLite3)
  93. * - mysql (MySQL/MariaDB)
  94. * - pgsql (PostgreSQL)
  95. *
  96. * Defaults to ``sqlite3``
  97. */
  98. 'dbtype' => 'sqlite3',
  99. /**
  100. * Your host server name, for example ``localhost``, ``hostname``,
  101. * ``hostname.example.com``, or the IP address.
  102. * To specify a port use ``hostname:####``, for IPv6 addresses use the URI notation ``[ip]:port``.
  103. * To specify a Unix socket use ``/path/to/directory/containing/socket``, e.g. ``/run/postgresql/``.
  104. */
  105. 'dbhost' => '',
  106. /**
  107. * The name of the Nextcloud database, which is set during installation. You
  108. * should not need to change this.
  109. */
  110. 'dbname' => 'nextcloud',
  111. /**
  112. * The user that Nextcloud uses to write to the database. This must be unique
  113. * across Nextcloud instances using the same SQL database. This is set up during
  114. * installation, so you shouldn't need to change it.
  115. */
  116. 'dbuser' => '',
  117. /**
  118. * The password for the database user. This is set up during installation, so
  119. * you shouldn't need to change it.
  120. */
  121. 'dbpassword' => '',
  122. /**
  123. * Prefix for the Nextcloud tables in the database.
  124. *
  125. * Default to ``oc_``
  126. */
  127. 'dbtableprefix' => 'oc_',
  128. /**
  129. * Enable persistent connexions to the database.
  130. * This setting uses the "persistent" option from doctrine dbal, which in turn
  131. * uses the PDO::ATTR_PERSISTENT option from the pdo driver.
  132. */
  133. 'dbpersistent' => '',
  134. /**
  135. * Specify read only replicas to be used by Nextcloud when querying the database
  136. */
  137. 'dbreplica' => [
  138. ['user' => 'nextcloud', 'password' => 'password1', 'host' => 'replica1', 'dbname' => ''],
  139. ['user' => 'nextcloud', 'password' => 'password2', 'host' => 'replica2', 'dbname' => ''],
  140. ],
  141. /**
  142. * Add request id to the database query in a comment.
  143. *
  144. * This can be enabled to assist in mapping database logs to Nextcloud logs.
  145. */
  146. 'db.log_request_id' => false,
  147. /**
  148. * Indicates whether the Nextcloud instance was installed successfully; ``true``
  149. * indicates a successful installation, and ``false`` indicates an unsuccessful
  150. * installation.
  151. *
  152. * Defaults to ``false``
  153. */
  154. 'installed' => false,
  155. /**
  156. * User Experience
  157. *
  158. * These optional parameters control some aspects of the user interface. Default
  159. * values, where present, are shown.
  160. */
  161. /**
  162. * This sets the default language on your Nextcloud server, using ISO_639-1
  163. * language codes such as ``en`` for English, ``de`` for German, and ``fr`` for
  164. * French. The default_language parameter is only used, when the browser does
  165. * not send any language, and the user hasn’t configured own language
  166. * preferences.
  167. *
  168. * Nextcloud has two distinguished language codes for German, 'de' and 'de_DE'.
  169. * 'de' is used for informal German and 'de_DE' for formal German. By setting
  170. * this value to 'de_DE' you can enforce the formal version of German unless
  171. * the user has chosen something different explicitly.
  172. *
  173. * Defaults to ``en``
  174. */
  175. 'default_language' => 'en',
  176. /**
  177. * With this setting a language can be forced for all users. If a language is
  178. * forced, the users are also unable to change their language in the personal
  179. * settings. If users shall be unable to change their language, but users have
  180. * different languages, this value can be set to ``true`` instead of a language
  181. * code.
  182. *
  183. * Defaults to ``false``
  184. */
  185. 'force_language' => 'en',
  186. /**
  187. * This sets the default locale on your Nextcloud server, using ISO_639
  188. * language codes such as ``en`` for English, ``de`` for German, and ``fr`` for
  189. * French, and ISO-3166 country codes such as ``GB``, ``US``, ``CA``, as defined
  190. * in RFC 5646. It overrides automatic locale detection on public pages like
  191. * login or shared items. User's locale preferences configured under "personal
  192. * -> locale" override this setting after they have logged in.
  193. *
  194. * Defaults to ``en``
  195. */
  196. 'default_locale' => 'en_US',
  197. /**
  198. * This sets the default region for phone numbers on your Nextcloud server,
  199. * using ISO 3166-1 country codes such as ``DE`` for Germany, ``FR`` for France, …
  200. * It is required to allow inserting phone numbers in the user profiles starting
  201. * without the country code (e.g. +49 for Germany).
  202. *
  203. * No default value!
  204. */
  205. 'default_phone_region' => 'GB',
  206. /**
  207. * With this setting a locale can be forced for all users. If a locale is
  208. * forced, the users are also unable to change their locale in the personal
  209. * settings. If users shall be unable to change their locale, but users have
  210. * different languages, this value can be set to ``true`` instead of a locale
  211. * code.
  212. *
  213. * Defaults to ``false``
  214. */
  215. 'force_locale' => 'en_US',
  216. /**
  217. * This sets the default timezone on your Nextcloud server, using IANA
  218. * identifiers like ``Europe/Berlin`` or ``Pacific/Auckland``. The default
  219. * timezone parameter is only used when the timezone of the user can't be
  220. * determined.
  221. *
  222. * Defaults to ``UTC``
  223. */
  224. 'default_timezone' => 'Europe/Berlin',
  225. /**
  226. * ``true`` enables the Help menu item in the user menu (top right of the
  227. * Nextcloud Web interface). ``false`` removes the Help item.
  228. */
  229. 'knowledgebaseenabled' => true,
  230. /**
  231. * ``true`` embeds the documentation in an iframe inside Nextcloud.
  232. * ``false`` only shows buttons to the online documentation.
  233. */
  234. 'knowledgebase.embedded' => false,
  235. /**
  236. * ``true`` allows users to change their display names (on their Personal
  237. * pages), and ``false`` prevents them from changing their display names.
  238. */
  239. 'allow_user_to_change_display_name' => true,
  240. /**
  241. * The directory where the skeleton files are located. These files will be
  242. * copied to the data directory of new users. Leave empty to not copy any
  243. * skeleton files.
  244. * ``{lang}`` can be used as a placeholder for the language of the user.
  245. * If the directory does not exist, it falls back to non dialect (from ``de_DE``
  246. * to ``de``). If that does not exist either, it falls back to ``default``
  247. *
  248. * Defaults to ``core/skeleton`` in the Nextcloud directory.
  249. */
  250. 'skeletondirectory' => '/path/to/nextcloud/core/skeleton',
  251. /**
  252. * The directory where the template files are located. These files will be
  253. * copied to the template directory of new users. Leave empty to not copy any
  254. * template files.
  255. * ``{lang}`` can be used as a placeholder for the language of the user.
  256. * If the directory does not exist, it falls back to non dialect (from ``de_DE``
  257. * to ``de``). If that does not exist either, it falls back to ``default``
  258. *
  259. * If this is not set creating a template directory will only happen if no custom
  260. * ``skeletondirectory`` is defined, otherwise the shipped templates will be used
  261. * to create a template directory for the user.
  262. */
  263. 'templatedirectory' => '/path/to/nextcloud/templates',
  264. /**
  265. * User session
  266. */
  267. /**
  268. * Lifetime of the remember login cookie. This should be larger than the
  269. * session_lifetime. If it is set to 0 remember me is disabled.
  270. *
  271. * Defaults to ``60*60*24*15`` seconds (15 days)
  272. */
  273. 'remember_login_cookie_lifetime' => 60*60*24*15,
  274. /**
  275. * The lifetime of a session after inactivity.
  276. *
  277. * The maximum possible time is limited by the session.gc_maxlifetime php.ini setting
  278. * which would overwrite this option if it is less than the value in the config.php
  279. *
  280. * Defaults to ``60*60*24`` seconds (24 hours)
  281. */
  282. 'session_lifetime' => 60 * 60 * 24,
  283. /**
  284. * The timeout in seconds for requests to servers made by the DAV component (e.g., needed for federated shares).
  285. */
  286. 'davstorage.request_timeout' => 30,
  287. /**
  288. * `true` enabled a relaxed session timeout, where the session timeout would no longer be
  289. * handled by Nextcloud but by either the PHP garbage collection or the expiration of
  290. * potential other session backends like redis.
  291. *
  292. * This may lead to sessions being available for longer than what session_lifetime uses but
  293. * comes with performance benefits as sessions are no longer a locking operation for concurrent
  294. * requests.
  295. */
  296. 'session_relaxed_expiry' => false,
  297. /**
  298. * Enable or disable session keep-alive when a user is logged in to the Web UI.
  299. * Enabling this sends a "heartbeat" to the server to keep it from timing out.
  300. *
  301. * Defaults to ``true``
  302. */
  303. 'session_keepalive' => true,
  304. /**
  305. * Enable or disable the automatic logout after session_lifetime, even if session
  306. * keepalive is enabled. This will make sure that an inactive browser will be logged out
  307. * even if requests to the server might extend the session lifetime.
  308. *
  309. * Defaults to ``false``
  310. */
  311. 'auto_logout' => false,
  312. /**
  313. * Enforce token authentication for clients, which blocks requests using the user
  314. * password for enhanced security. Users need to generate tokens in personal settings
  315. * which can be used as passwords on their clients.
  316. *
  317. * Defaults to ``false``
  318. */
  319. 'token_auth_enforced' => false,
  320. /**
  321. * The interval at which token activity should be updated.
  322. * Increasing this value means that the last activity on the security page gets
  323. * more outdated.
  324. *
  325. * Tokens are still checked every 5 minutes for validity
  326. * max value: 300
  327. *
  328. * Defaults to ``300``
  329. */
  330. 'token_auth_activity_update' => 60,
  331. /**
  332. * Whether the brute force protection shipped with Nextcloud should be enabled or not.
  333. *
  334. * Disabling this is discouraged for security reasons.
  335. *
  336. * Defaults to ``true``
  337. */
  338. 'auth.bruteforce.protection.enabled' => true,
  339. /**
  340. * Whether the brute force protection shipped with Nextcloud should be set to testing mode.
  341. *
  342. * In testing mode brute force attempts are still recorded, but the requests do
  343. * not sleep/wait for the specified time. They will still abort with
  344. * "429 Too Many Requests" when the maximum delay is reached.
  345. * Enabling this is discouraged for security reasons
  346. * and should only be done for debugging and on CI when running tests.
  347. *
  348. * Defaults to ``false``
  349. */
  350. 'auth.bruteforce.protection.testing' => false,
  351. /**
  352. * Whether the rate limit protection shipped with Nextcloud should be enabled or not.
  353. *
  354. * Disabling this is discouraged for security reasons.
  355. *
  356. * Defaults to ``true``
  357. */
  358. 'ratelimit.protection.enabled' => true,
  359. /**
  360. * By default, WebAuthn is available, but it can be explicitly disabled by admins
  361. */
  362. 'auth.webauthn.enabled' => true,
  363. /**
  364. * Whether encrypted password should be stored in the database
  365. *
  366. * The passwords are only decrypted using the login token stored uniquely in the
  367. * clients and allow to connect to external storages, autoconfigure mail account in
  368. * the mail app and periodically check if the password it still valid.
  369. *
  370. * This might be desirable to disable this functionality when using one time
  371. * passwords or when having a password policy enforcing long passwords (> 300
  372. * characters).
  373. *
  374. * By default, the passwords are stored encrypted in the database.
  375. *
  376. * WARNING: If disabled, password changes on the user back-end (e.g. on LDAP) no
  377. * longer log connected clients out automatically. Users can still disconnect
  378. * the clients by deleting the app token from the security settings.
  379. */
  380. 'auth.storeCryptedPassword' => true,
  381. /**
  382. * By default, the login form is always available. There are cases (SSO) where an
  383. * admin wants to avoid users entering their credentials to the system if the SSO
  384. * app is unavailable.
  385. *
  386. * This will show an error. But the direct login still works with adding ?direct=1
  387. */
  388. 'hide_login_form' => false,
  389. /**
  390. * If your user backend does not allow password resets (e.g. when it's a
  391. * read-only user backend like LDAP), you can specify a custom link, where the
  392. * user is redirected to, when clicking the "reset password" link after a failed
  393. * login-attempt.
  394. * In case you do not want to provide any link, replace the url with 'disabled'
  395. */
  396. 'lost_password_link' => 'https://example.org/link/to/password/reset',
  397. /**
  398. * URL to use as target for the logo link in the header (top-left logo)
  399. *
  400. * Defaults to the base URL of your Nextcloud instance
  401. */
  402. 'logo_url' => 'https://example.org',
  403. /**
  404. * Mail Parameters
  405. *
  406. * These configure the email settings for Nextcloud notifications and password
  407. * resets.
  408. */
  409. /**
  410. * The return address that you want to appear on emails sent by the Nextcloud
  411. * server, for example ``nc-admin@example.com``, substituting your own domain,
  412. * of course.
  413. */
  414. 'mail_domain' => 'example.com',
  415. /**
  416. * FROM address that overrides the built-in ``sharing-noreply`` and
  417. * ``lostpassword-noreply`` FROM addresses.
  418. *
  419. * Defaults to different from addresses depending on the feature.
  420. */
  421. 'mail_from_address' => 'nextcloud',
  422. /**
  423. * Enable SMTP class debugging.
  424. *
  425. * Defaults to ``false``
  426. */
  427. 'mail_smtpdebug' => false,
  428. /**
  429. * Which mode to use for sending mail: ``sendmail``, ``smtp`` or ``qmail``.
  430. *
  431. * If you are using local or remote SMTP, set this to ``smtp``.
  432. *
  433. * For the ``sendmail`` option you need an installed and working email system on
  434. * the server, with ``/usr/sbin/sendmail`` installed on your Unix system.
  435. *
  436. * For ``qmail`` the binary is /var/qmail/bin/sendmail, and it must be installed
  437. * on your Unix system.
  438. *
  439. * Defaults to ``smtp``
  440. */
  441. 'mail_smtpmode' => 'smtp',
  442. /**
  443. * This depends on ``mail_smtpmode``. Specify the IP address of your mail
  444. * server host. This may contain multiple hosts separated by a semicolon. If
  445. * you need to specify the port number append it to the IP address separated by
  446. * a colon, like this: ``127.0.0.1:24``.
  447. *
  448. * Defaults to ``127.0.0.1``
  449. */
  450. 'mail_smtphost' => '127.0.0.1',
  451. /**
  452. * This depends on ``mail_smtpmode``. Specify the port for sending mail.
  453. *
  454. * Defaults to ``25``
  455. */
  456. 'mail_smtpport' => 25,
  457. /**
  458. * This depends on ``mail_smtpmode``. This sets the SMTP server timeout, in
  459. * seconds. You may need to increase this if you are running an anti-malware or
  460. * spam scanner.
  461. *
  462. * Defaults to ``10`` seconds
  463. */
  464. 'mail_smtptimeout' => 10,
  465. /**
  466. * This depends on ``mail_smtpmode``. Specify ``ssl`` when you are using SSL/TLS. Any other value will be ignored.
  467. *
  468. * If the server advertises STARTTLS capabilities, they might be used, but they cannot be enforced by
  469. * this config option.
  470. *
  471. * Defaults to ``''`` (empty string)
  472. */
  473. 'mail_smtpsecure' => '',
  474. /**
  475. *
  476. * This depends on ``mail_smtpmode``. Change this to ``true`` if your mail
  477. * server requires authentication.
  478. *
  479. * Defaults to ``false``
  480. */
  481. 'mail_smtpauth' => false,
  482. /**
  483. * This depends on ``mail_smtpauth``. Specify the username for authenticating to
  484. * the SMTP server.
  485. *
  486. * Defaults to ``''`` (empty string)
  487. */
  488. 'mail_smtpname' => '',
  489. /**
  490. * This depends on ``mail_smtpauth``. Specify the password for authenticating to
  491. * the SMTP server.
  492. *
  493. * Default to ``''`` (empty string)
  494. */
  495. 'mail_smtppassword' => '',
  496. /**
  497. * Replaces the default mail template layout. This can be utilized if the
  498. * options to modify the mail texts with the theming app is not enough.
  499. * The class must extend ``\OC\Mail\EMailTemplate``
  500. */
  501. 'mail_template_class' => '\OC\Mail\EMailTemplate',
  502. /**
  503. * Email will be sent by default with an HTML and a plain text body. This option
  504. * allows to only send plain text emails.
  505. */
  506. 'mail_send_plaintext_only' => false,
  507. /**
  508. * This depends on ``mail_smtpmode``. Array of additional streams options that
  509. * will be passed to underlying Swift mailer implementation.
  510. * Defaults to an empty array.
  511. */
  512. 'mail_smtpstreamoptions' => [],
  513. /**
  514. * Which mode is used for sendmail/qmail: ``smtp`` or ``pipe``.
  515. *
  516. * For ``smtp`` the sendmail binary is started with the parameter ``-bs``:
  517. * - Use the SMTP protocol on standard input and output.
  518. *
  519. * For ``pipe`` the binary is started with the parameters ``-t``:
  520. * - Read message from STDIN and extract recipients.
  521. *
  522. * Defaults to ``smtp``
  523. */
  524. 'mail_sendmailmode' => 'smtp',
  525. /**
  526. * Proxy Configurations
  527. */
  528. /**
  529. * The automatic hostname detection of Nextcloud can fail in certain reverse
  530. * proxy and CLI/cron situations. This option allows you to manually override
  531. * the automatic detection; for example ``www.example.com``, or specify the port
  532. * ``www.example.com:8080``.
  533. */
  534. 'overwritehost' => '',
  535. /**
  536. * When generating URLs, Nextcloud attempts to detect whether the server is
  537. * accessed via ``https`` or ``http``. However, if Nextcloud is behind a proxy
  538. * and the proxy handles the ``https`` calls, Nextcloud would not know that
  539. * ``ssl`` is in use, which would result in incorrect URLs being generated.
  540. * Valid values are ``http`` and ``https``.
  541. */
  542. 'overwriteprotocol' => '',
  543. /**
  544. * Nextcloud attempts to detect the webroot for generating URLs automatically.
  545. * For example, if ``www.example.com/nextcloud`` is the URL pointing to the
  546. * Nextcloud instance, the webroot is ``/nextcloud``. When proxies are in use,
  547. * it may be difficult for Nextcloud to detect this parameter, resulting in
  548. * invalid URLs.
  549. */
  550. 'overwritewebroot' => '',
  551. /**
  552. * This option allows you to define a manual override condition as a regular
  553. * expression for the remote IP address. For example, defining a range of IP
  554. * addresses starting with ``10.0.0.`` and ending with 1 to 3:
  555. * ``^10\.0\.0\.[1-3]$``
  556. *
  557. * Defaults to ``''`` (empty string)
  558. */
  559. 'overwritecondaddr' => '',
  560. /**
  561. * Use this configuration parameter to specify the base URL for any URLs which
  562. * are generated within Nextcloud using any kind of command line tools (cron or
  563. * occ). The value should contain the full base URL:
  564. * ``https://www.example.com/nextcloud``
  565. *
  566. * Defaults to ``''`` (empty string)
  567. */
  568. 'overwrite.cli.url' => '',
  569. /**
  570. * To have clean URLs without `/index.php` this parameter needs to be configured.
  571. *
  572. * This parameter will be written as "RewriteBase" on update and installation of
  573. * Nextcloud to your `.htaccess` file. While this value is often simply the URL
  574. * path of the Nextcloud installation it cannot be set automatically properly in
  575. * every scenario and needs thus some manual configuration.
  576. *
  577. * In a standard Apache setup this usually equals the folder that Nextcloud is
  578. * accessible at. So if Nextcloud is accessible via "https://mycloud.org/nextcloud"
  579. * the correct value would most likely be "/nextcloud". If Nextcloud is running
  580. * under "https://mycloud.org/" then it would be "/".
  581. *
  582. * Note that the above rule is not valid in every case, as there are some rare setup
  583. * cases where this may not apply. However, to avoid any update problems this
  584. * configuration value is explicitly opt-in.
  585. *
  586. * After setting this value run `occ maintenance:update:htaccess`. Now, when the
  587. * following conditions are met Nextcloud URLs won't contain `index.php`:
  588. *
  589. * - `mod_rewrite` is installed
  590. * - `mod_env` is installed
  591. *
  592. * Defaults to ``''`` (empty string)
  593. */
  594. 'htaccess.RewriteBase' => '/',
  595. /**
  596. * For server setups, that don't have `mod_env` enabled or restricted (e.g. suEXEC)
  597. * this parameter has to be set to true and will assume mod_rewrite.
  598. *
  599. * Please check, if `mod_rewrite` is active and functional before setting this
  600. * parameter, and you updated your .htaccess with `occ maintenance:update:htaccess`.
  601. * Otherwise, your nextcloud installation might not be reachable anymore.
  602. * For example, try accessing resources by leaving out `index.php` in the URL.
  603. */
  604. 'htaccess.IgnoreFrontController' => false,
  605. /**
  606. * The URL of your proxy server, for example ``proxy.example.com:8081``.
  607. *
  608. * Note: Guzzle (the http library used by Nextcloud) is reading the environment
  609. * variables HTTP_PROXY (only for cli request), HTTPS_PROXY, and NO_PROXY by default.
  610. *
  611. * If you configure proxy with Nextcloud any default configuration by Guzzle
  612. * is overwritten. Make sure to set ``proxyexclude`` accordingly if necessary.
  613. *
  614. * Defaults to ``''`` (empty string)
  615. */
  616. 'proxy' => '',
  617. /**
  618. * The optional authentication for the proxy to use to connect to the internet.
  619. * The format is: ``username:password``.
  620. *
  621. * Defaults to ``''`` (empty string)
  622. */
  623. 'proxyuserpwd' => '',
  624. /**
  625. * List of host names that should not be proxied to.
  626. * For example: ``['.mit.edu', 'foo.com']``.
  627. *
  628. * Hint: Use something like ``explode(',', getenv('NO_PROXY'))`` to sync this
  629. * value with the global NO_PROXY option.
  630. *
  631. * Defaults to empty array.
  632. */
  633. 'proxyexclude' => [],
  634. /**
  635. * Allow remote servers with local addresses e.g. in federated shares, webcal services and more
  636. *
  637. * Defaults to false
  638. */
  639. 'allow_local_remote_servers' => true,
  640. /**
  641. * Deleted Items (trash bin)
  642. *
  643. * These parameters control the Deleted files app.
  644. */
  645. /**
  646. * If the trash bin app is enabled (default), this setting defines the policy
  647. * for when files and folders in the trash bin will be permanently deleted.
  648. * The app allows for two settings, a minimum time for trash bin retention,
  649. * and a maximum time for trash bin retention.
  650. *
  651. * Minimum time is the number of days a file will be kept, after which it
  652. * *may be* deleted. A file may be deleted after the minimum number of days
  653. * is expired if space is needed. The file will not be deleted if space is
  654. * not needed.
  655. *
  656. * Whether "space is needed" depends on whether a user quota is defined or not:
  657. *
  658. * * If no user quota is defined, the available space on the Nextcloud data
  659. * partition sets the limit for the trashbin
  660. * (issues: see https://github.com/nextcloud/server/issues/28451).
  661. * * If a user quota is defined, 50% of the user's remaining quota space sets
  662. * the limit for the trashbin.
  663. *
  664. * Maximum time is the number of days at which it is *guaranteed
  665. * to be* deleted. There is no further dependency on the available space.
  666. *
  667. * Both minimum and maximum times can be set together to explicitly define
  668. * file and folder deletion. For migration purposes, this setting is installed
  669. * initially set to "auto", which is equivalent to the default setting in
  670. * Nextcloud.
  671. *
  672. * Available values (D1 and D2 are configurable numbers):
  673. *
  674. * * ``auto``
  675. * default setting. keeps files and folders in the trash bin for 30 days
  676. * and automatically deletes anytime after that if space is needed (note:
  677. * files may not be deleted if space is not needed).
  678. * * ``D1, auto``
  679. * keeps files and folders in the trash bin for D1+ days, delete anytime if
  680. * space needed (note: files may not be deleted if space is not needed)
  681. * * ``auto, D2``
  682. * delete all files in the trash bin that are older than D2 days
  683. * automatically, delete other files anytime if space needed
  684. * * ``D1, D2``
  685. * keep files and folders in the trash bin for at least D1 days and
  686. * delete when exceeds D2 days (note: files will not be deleted automatically if space is needed)
  687. * * ``disabled``
  688. * trash bin auto clean disabled, files and folders will be kept forever
  689. *
  690. * Defaults to ``auto``
  691. */
  692. 'trashbin_retention_obligation' => 'auto',
  693. /**
  694. * File versions
  695. *
  696. * These parameters control the Versions app.
  697. */
  698. /**
  699. * If the versions app is enabled (default), this setting defines the policy
  700. * for when versions will be permanently deleted.
  701. * The app allows for two settings, a minimum time for version retention,
  702. * and a maximum time for version retention.
  703. * Minimum time is the number of days a version will be kept, after which it
  704. * may be deleted. Maximum time is the number of days at which it is guaranteed
  705. * to be deleted.
  706. * Both minimum and maximum times can be set together to explicitly define
  707. * version deletion. For migration purposes, this setting is installed
  708. * initially set to "auto", which is equivalent to the default setting in
  709. * Nextcloud.
  710. *
  711. * Available values:
  712. *
  713. * * ``auto``
  714. * default setting. Automatically expire versions according to expire
  715. * rules. Please refer to :doc:`../configuration_files/file_versioning` for
  716. * more information.
  717. * * ``D, auto``
  718. * keep versions at least for D days, apply expiration rules to all versions
  719. * that are older than D days
  720. * * ``auto, D``
  721. * delete all versions that are older than D days automatically, delete
  722. * other versions according to expire rules
  723. * * ``D1, D2``
  724. * keep versions for at least D1 days and delete when exceeds D2 days
  725. * * ``disabled``
  726. * versions auto clean disabled, versions will be kept forever
  727. *
  728. * Defaults to ``auto``
  729. */
  730. 'versions_retention_obligation' => 'auto',
  731. /**
  732. * Nextcloud Verifications
  733. *
  734. * Nextcloud performs several verification checks. There are two options,
  735. * ``true`` and ``false``.
  736. */
  737. /**
  738. * Checks an app before install whether it uses private APIs instead of the
  739. * proper public APIs. If this is set to true it will only allow to install or
  740. * enable apps that pass this check.
  741. *
  742. * Defaults to ``false``
  743. */
  744. 'appcodechecker' => true,
  745. /**
  746. * Check if Nextcloud is up-to-date and shows a notification if a new version is
  747. * available. It sends current version, php version, installation and last update
  748. * time and release channel to the updater server which responds with the latest
  749. * available version based on those metrics.
  750. *
  751. * Defaults to ``true``
  752. */
  753. 'updatechecker' => true,
  754. /**
  755. * URL that Nextcloud should use to look for updates
  756. *
  757. * Defaults to ``https://updates.nextcloud.com/updater_server/``
  758. */
  759. 'updater.server.url' => 'https://updates.nextcloud.com/updater_server/',
  760. /**
  761. * The channel that Nextcloud should use to look for updates
  762. *
  763. * Supported values:
  764. *
  765. * - ``daily``
  766. * - ``beta``
  767. * - ``stable``
  768. */
  769. 'updater.release.channel' => 'stable',
  770. /**
  771. * Is Nextcloud connected to the Internet or running in a closed network?
  772. *
  773. * Defaults to ``true``
  774. */
  775. 'has_internet_connection' => true,
  776. /**
  777. * Which domains to request to determine the availability of an Internet
  778. * connection. If none of these hosts are reachable, the administration panel
  779. * will show a warning. Set to an empty list to not do any such checks (warning
  780. * will still be shown).
  781. * If no protocol is provided, both http and https will be tested.
  782. * For example, 'http://www.nextcloud.com' and 'https://www.nextcloud.com'
  783. * will be tested for 'www.nextcloud.com'
  784. * If a protocol is provided, only this one will be tested.
  785. *
  786. * Defaults to the following domains:
  787. *
  788. * - www.nextcloud.com
  789. * - www.startpage.com
  790. * - www.eff.org
  791. * - www.edri.org
  792. */
  793. 'connectivity_check_domains' => [
  794. 'www.nextcloud.com',
  795. 'www.startpage.com',
  796. 'www.eff.org',
  797. 'www.edri.org'
  798. ],
  799. /**
  800. * Allows Nextcloud to verify a working .well-known URL redirects. This is done
  801. * by attempting to make a request from JS to
  802. * https://your-domain.com/.well-known/caldav/
  803. *
  804. * Defaults to ``true``
  805. */
  806. 'check_for_working_wellknown_setup' => true,
  807. /**
  808. * This is a crucial security check on Apache servers that should always be set
  809. * to ``true``. This verifies that the ``.htaccess`` file is writable and works.
  810. * If it is not, then any options controlled by ``.htaccess``, such as large
  811. * file uploads, will not work. It also runs checks on the ``data/`` directory,
  812. * which verifies that it can't be accessed directly through the Web server.
  813. *
  814. * Defaults to ``true``
  815. */
  816. 'check_for_working_htaccess' => true,
  817. /**
  818. * In rare setups (e.g. on Openshift or Docker on Windows) the permissions check
  819. * might block the installation while the underlying system offers no means to
  820. * "correct" the permissions. In this case, set the value to false.
  821. *
  822. * In regular cases, if issues with permissions are encountered they should be
  823. * adjusted accordingly. Changing the flag is discouraged.
  824. *
  825. * Defaults to ``true``
  826. */
  827. 'check_data_directory_permissions' => true,
  828. /**
  829. * In certain environments it is desired to have a read-only configuration file.
  830. * When this switch is set to ``true``, writing to the config file will be
  831. * forbidden. Therefore, it will not be possible to configure all options via
  832. * the Web interface. Furthermore, when updating Nextcloud it is required to
  833. * make the configuration file writable again and to set this switch to ``false``
  834. * for the update process.
  835. *
  836. * Defaults to ``false``
  837. */
  838. 'config_is_read_only' => false,
  839. /**
  840. * Logging
  841. */
  842. /**
  843. * This parameter determines where the Nextcloud logs are sent.
  844. * ``file``: the logs are written to file ``nextcloud.log`` in the default
  845. * Nextcloud data directory. The log file can be changed with parameter
  846. * ``logfile``.
  847. * ``syslog``: the logs are sent to the system log. This requires a syslog daemon
  848. * to be active.
  849. * ``errorlog``: the logs are sent to the PHP ``error_log`` function.
  850. * ``systemd``: the logs are sent to the Systemd journal. This requires a system
  851. * that runs Systemd and the Systemd journal. The PHP extension ``systemd``
  852. * must be installed and active.
  853. *
  854. * Defaults to ``file``
  855. */
  856. 'log_type' => 'file',
  857. /**
  858. * This parameter determines where the audit logs are sent. See ``log_type`` for more information.
  859. *
  860. * Defaults to ``file``
  861. */
  862. 'log_type_audit' => 'file',
  863. /**
  864. * Name of the file to which the Nextcloud logs are written if parameter
  865. * ``log_type`` is set to ``file``.
  866. *
  867. * Defaults to ``[datadirectory]/nextcloud.log``
  868. */
  869. 'logfile' => '/var/log/nextcloud.log',
  870. /**
  871. * Name of the file to which the audit logs are written if parameter
  872. * ``log_type`` is set to ``file``.
  873. *
  874. * Defaults to ``[datadirectory]/audit.log``
  875. */
  876. 'logfile_audit' => '/var/log/audit.log',
  877. /**
  878. * Log file mode for the Nextcloud logging type in octal notation.
  879. *
  880. * Defaults to 0640 (writeable by user, readable by group).
  881. */
  882. 'logfilemode' => 0640,
  883. /**
  884. * Loglevel to start logging at. Valid values are: 0 = Debug, 1 = Info, 2 =
  885. * Warning, 3 = Error, and 4 = Fatal. The default value is Warning.
  886. *
  887. * Defaults to ``2``
  888. */
  889. 'loglevel' => 2,
  890. /**
  891. * Loglevel used by the frontend to start logging at. The same values as
  892. * for ``loglevel`` can be used. If not set it defaults to the value
  893. * configured for ``loglevel`` or Warning if that is not set either.
  894. *
  895. * Defaults to ``2``
  896. */
  897. 'loglevel_frontend' => 2,
  898. /**
  899. * Loglevel used by the dirty database query detection. Useful to identify
  900. * potential database bugs in production. Set this to loglevel or higher to
  901. * see dirty queries in the logs.
  902. *
  903. * Defaults to ``0`` (debug)
  904. */
  905. 'loglevel_dirty_database_queries' => 0,
  906. /**
  907. * If you maintain different instances and aggregate the logs, you may want
  908. * to distinguish between them. ``syslog_tag`` can be set per instance
  909. * with a unique id. Only available if ``log_type`` is set to ``syslog`` or
  910. * ``systemd``.
  911. *
  912. * The default value is ``Nextcloud``.
  913. */
  914. 'syslog_tag' => 'Nextcloud',
  915. /**
  916. * If you maintain different instances and aggregate the logs, you may want
  917. * to distinguish between them. ``syslog_tag_audit`` can be set per instance
  918. * with a unique id. Only available if ``log_type`` is set to ``syslog`` or
  919. * ``systemd``.
  920. *
  921. * The default value is the value of ``syslog_tag``.
  922. */
  923. 'syslog_tag_audit' => 'Nextcloud',
  924. /**
  925. * Log condition for log level increase based on conditions. Once one of these
  926. * conditions is met, the required log level is set to debug. This allows to
  927. * debug specific requests, users or apps
  928. *
  929. * Supported conditions:
  930. * - ``shared_secret``: if a request parameter with the name `log_secret` is set to
  931. * this value the condition is met
  932. * - ``users``: if the current request is done by one of the specified users,
  933. * this condition is met
  934. * - ``apps``: if the log message is invoked by one of the specified apps,
  935. * this condition is met
  936. *
  937. * Defaults to an empty array.
  938. */
  939. 'log.condition' => [
  940. 'shared_secret' => '57b58edb6637fe3059b3595cf9c41b9',
  941. 'users' => ['sample-user'],
  942. 'apps' => ['files'],
  943. ],
  944. /**
  945. * Enables logging a backtrace with each log line. Normally, only Exceptions
  946. * are carrying backtrace information which are logged automatically. This
  947. * switch turns them on for any log message. Enabling this option will lead
  948. * to increased log data size.
  949. *
  950. * Defaults to ``false``.
  951. */
  952. 'log.backtrace' => false,
  953. /**
  954. * This uses PHP.date formatting; see https://www.php.net/manual/en/function.date.php
  955. *
  956. * Defaults to ISO 8601 ``2005-08-15T15:52:01+00:00`` - see \DateTime::ATOM
  957. * (https://www.php.net/manual/en/class.datetime.php#datetime.constants.atom)
  958. */
  959. 'logdateformat' => 'F d, Y H:i:s',
  960. /**
  961. * The timezone for logfiles. You may change this; see
  962. * https://www.php.net/manual/en/timezones.php
  963. *
  964. * Defaults to ``UTC``
  965. */
  966. 'logtimezone' => 'Europe/Berlin',
  967. /**
  968. * Append all database queries and parameters to the log file. Use this only for
  969. * debugging, as your logfile will become huge.
  970. */
  971. 'log_query' => false,
  972. /**
  973. * Enables log rotation and limits the total size of logfiles. Set it to 0 for
  974. * no rotation. Specify a size in bytes, for example 104857600 (100 megabytes
  975. * = 100 * 1024 * 1024 bytes). A new logfile is created with a new name when the
  976. * old logfile reaches your limit. If a rotated log file is already present, it
  977. * will be overwritten.
  978. *
  979. * Defaults to 100 MB
  980. */
  981. 'log_rotate_size' => 100 * 1024 * 1024,
  982. /**
  983. * Enable built-in profiler. Helpful when trying to debug performance
  984. * issues.
  985. *
  986. * Note that this has a performance impact and shouldn't be enabled
  987. * on production.
  988. */
  989. 'profiler' => false,
  990. /**
  991. * Alternate Code Locations
  992. *
  993. * Some Nextcloud code may be stored in alternate locations.
  994. */
  995. /**
  996. * This section is for configuring the download links for Nextcloud clients, as
  997. * seen in the first-run wizard and on Personal pages.
  998. *
  999. * Defaults to:
  1000. *
  1001. * - Desktop client: ``https://nextcloud.com/install/#install-clients``
  1002. * - Android client: ``https://play.google.com/store/apps/details?id=com.nextcloud.client``
  1003. * - iOS client: ``https://itunes.apple.com/us/app/nextcloud/id1125420102?mt=8``
  1004. * - iOS client app id: ``1125420102``
  1005. */
  1006. 'customclient_desktop' =>
  1007. 'https://nextcloud.com/install/#install-clients',
  1008. 'customclient_android' =>
  1009. 'https://play.google.com/store/apps/details?id=com.nextcloud.client',
  1010. 'customclient_ios' =>
  1011. 'https://itunes.apple.com/us/app/nextcloud/id1125420102?mt=8',
  1012. 'customclient_ios_appid' =>
  1013. '1125420102',
  1014. /**
  1015. * Apps
  1016. *
  1017. * Options for the Apps folder, Apps store, and App code checker.
  1018. */
  1019. /**
  1020. * Set the default app to open on login. Use the app names as they appear in the
  1021. * URL after clicking them in the Apps menu, such as documents, calendar, and
  1022. * gallery. You can use a comma-separated list of app names, so if the first
  1023. * app is not enabled for a user then Nextcloud will try the second one, and so
  1024. * on. If no enabled apps are found it defaults to the dashboard app.
  1025. *
  1026. * Defaults to ``dashboard,files``
  1027. */
  1028. 'defaultapp' => 'dashboard,files',
  1029. /**
  1030. * When enabled, admins may install apps from the Nextcloud app store.
  1031. *
  1032. * Defaults to ``true``
  1033. */
  1034. 'appstoreenabled' => true,
  1035. /**
  1036. * Enables the installation of apps from a self-hosted apps store.
  1037. * Requires that at least one of the configured apps directories is writeable.
  1038. *
  1039. * Defaults to ``https://apps.nextcloud.com/api/v1``
  1040. */
  1041. 'appstoreurl' => 'https://apps.nextcloud.com/api/v1',
  1042. /**
  1043. * Filters allowed installable apps from the appstore.
  1044. * Empty array will prevent all apps from the store to be found.
  1045. */
  1046. 'appsallowlist' => [],
  1047. /**
  1048. * Use the ``apps_paths`` parameter to set the location of the Apps directory,
  1049. * which should be scanned for available apps, and where user-specific apps
  1050. * should be installed from the Apps store. The ``path`` defines the absolute
  1051. * file system path to the app folder. The key ``url`` defines the HTTP Web path
  1052. * to that folder, starting from the Nextcloud webroot. The key ``writable``
  1053. * indicates if a Web server can write files to that folder.
  1054. */
  1055. 'apps_paths' => [
  1056. [
  1057. 'path'=> '/var/www/nextcloud/apps',
  1058. 'url' => '/apps',
  1059. 'writable' => true,
  1060. ],
  1061. ],
  1062. /**
  1063. * @see appcodechecker
  1064. */
  1065. /**
  1066. * Previews
  1067. *
  1068. * Nextcloud supports previews of image files, the covers of MP3 files, and text
  1069. * files. These options control enabling and disabling previews, and thumbnail
  1070. * size.
  1071. */
  1072. /**
  1073. * By default, Nextcloud can generate previews for the following filetypes:
  1074. *
  1075. * - Image files
  1076. * - Covers of MP3 files
  1077. * - Text documents
  1078. *
  1079. * Valid values are ``true``, to enable previews, or
  1080. * ``false``, to disable previews
  1081. *
  1082. * Defaults to ``true``
  1083. */
  1084. 'enable_previews' => true,
  1085. /**
  1086. * Number of all preview requests being processed concurrently,
  1087. * including previews that need to be newly generated, and those that have
  1088. * been generated.
  1089. *
  1090. * This should be greater than 'preview_concurrency_new'.
  1091. * If unspecified, defaults to twice the value of 'preview_concurrency_new'.
  1092. */
  1093. 'preview_concurrency_all' => 8,
  1094. /**
  1095. * Number of new previews that are being concurrently generated.
  1096. *
  1097. * Depending on the max preview size set by 'preview_max_x' and 'preview_max_y',
  1098. * the generation process can consume considerable CPU and memory resources.
  1099. * It's recommended to limit this to be no greater than the number of CPU cores.
  1100. * If unspecified, defaults to the number of CPU cores, or 4 if that cannot
  1101. * be determined.
  1102. */
  1103. 'preview_concurrency_new' => 4,
  1104. /**
  1105. * The maximum width, in pixels, of a preview. A value of ``null`` means there
  1106. * is no limit.
  1107. *
  1108. * Defaults to ``4096``
  1109. */
  1110. 'preview_max_x' => 4096,
  1111. /**
  1112. * The maximum height, in pixels, of a preview. A value of ``null`` means there
  1113. * is no limit.
  1114. *
  1115. * Defaults to ``4096``
  1116. */
  1117. 'preview_max_y' => 4096,
  1118. /**
  1119. * Max file size for generating image previews with imagegd (default behavior).
  1120. * If the image is bigger, it'll try other preview generators, but will most
  1121. * likely either show the default mimetype icon or not display the image at all.
  1122. * Set to ``-1`` for no limit and try to generate image previews on all file sizes.
  1123. *
  1124. * Defaults to ``50`` megabytes
  1125. */
  1126. 'preview_max_filesize_image' => 50,
  1127. /**
  1128. * max memory for generating image previews with imagegd (default behavior)
  1129. * Reads the image dimensions from the header and assumes 32 bits per pixel.
  1130. * If creating the image would allocate more memory, preview generation will
  1131. * be disabled and the default mimetype icon is shown. Set to -1 for no limit.
  1132. *
  1133. * Defaults to ``256`` megabytes
  1134. */
  1135. 'preview_max_memory' => 256,
  1136. /**
  1137. * custom path for LibreOffice/OpenOffice binary
  1138. *
  1139. *
  1140. * Defaults to ``''`` (empty string)
  1141. */
  1142. 'preview_libreoffice_path' => '/usr/bin/libreoffice',
  1143. /**
  1144. * custom path for ffmpeg binary
  1145. *
  1146. * Defaults to ``null`` and falls back to searching ``avconv`` and ``ffmpeg`` in the configured ``PATH`` environment
  1147. */
  1148. 'preview_ffmpeg_path' => '/usr/bin/ffmpeg',
  1149. /**
  1150. * Set the URL of the Imaginary service to send image previews to.
  1151. * Also requires the ``OC\Preview\Imaginary`` provider to be enabled.
  1152. *
  1153. * See https://github.com/h2non/imaginary
  1154. */
  1155. 'preview_imaginary_url' => 'http://previews_hpb:8088/',
  1156. /**
  1157. * If you want set a api key for imaginary.
  1158. */
  1159. 'preview_imaginary_key' => 'secret',
  1160. /**
  1161. * Only register providers that have been explicitly enabled
  1162. *
  1163. * The following providers are disabled by default due to performance or privacy
  1164. * concerns:
  1165. *
  1166. * - ``OC\Preview\Font``
  1167. * - ``OC\Preview\HEIC``
  1168. * - ``OC\Preview\Illustrator``
  1169. * - ``OC\Preview\Movie``
  1170. * - ``OC\Preview\MSOffice2003``
  1171. * - ``OC\Preview\MSOffice2007``
  1172. * - ``OC\Preview\MSOfficeDoc``
  1173. * - ``OC\Preview\PDF``
  1174. * - ``OC\Preview\Photoshop``
  1175. * - ``OC\Preview\Postscript``
  1176. * - ``OC\Preview\StarOffice``
  1177. * - ``OC\Preview\SVG``
  1178. * - ``OC\Preview\TIFF``
  1179. * - ``OC\Preview\EMF``
  1180. *
  1181. *
  1182. * Defaults to the following providers:
  1183. *
  1184. * - ``OC\Preview\BMP``
  1185. * - ``OC\Preview\GIF``
  1186. * - ``OC\Preview\JPEG``
  1187. * - ``OC\Preview\Krita``
  1188. * - ``OC\Preview\MarkDown``
  1189. * - ``OC\Preview\MP3``
  1190. * - ``OC\Preview\OpenDocument``
  1191. * - ``OC\Preview\PNG``
  1192. * - ``OC\Preview\TXT``
  1193. * - ``OC\Preview\XBitmap``
  1194. */
  1195. 'enabledPreviewProviders' => [
  1196. 'OC\Preview\BMP',
  1197. 'OC\Preview\GIF',
  1198. 'OC\Preview\JPEG',
  1199. 'OC\Preview\Krita',
  1200. 'OC\Preview\MarkDown',
  1201. 'OC\Preview\MP3',
  1202. 'OC\Preview\OpenDocument',
  1203. 'OC\Preview\PNG',
  1204. 'OC\Preview\TXT',
  1205. 'OC\Preview\XBitmap',
  1206. ],
  1207. /**
  1208. * LDAP
  1209. *
  1210. * Global settings used by LDAP User and Group Backend
  1211. */
  1212. /**
  1213. * defines the interval in minutes for the background job that checks user
  1214. * existence and marks them as ready to be cleaned up. The number is always
  1215. * minutes. Setting it to 0 disables the feature.
  1216. * See command line (occ) methods ``ldap:show-remnants`` and ``user:delete``
  1217. *
  1218. * Defaults to ``51`` minutes
  1219. */
  1220. 'ldapUserCleanupInterval' => 51,
  1221. /**
  1222. * Sort groups in the user settings by name instead of the user count
  1223. *
  1224. * By enabling this the user count beside the group name is disabled as well.
  1225. * @deprecated since Nextcloud 29 - Use the frontend instead or set the app config value `group.sortBy` for `core` to `2`
  1226. */
  1227. 'sort_groups_by_name' => false,
  1228. /**
  1229. * Comments
  1230. *
  1231. * Global settings for the Comments infrastructure
  1232. */
  1233. /**
  1234. * Replaces the default Comments Manager Factory. This can be utilized if an
  1235. * own or 3rdParty CommentsManager should be used that – for instance – uses the
  1236. * filesystem instead of the database to keep the comments.
  1237. *
  1238. * Defaults to ``\OC\Comments\ManagerFactory``
  1239. */
  1240. 'comments.managerFactory' => '\OC\Comments\ManagerFactory',
  1241. /**
  1242. * Replaces the default System Tags Manager Factory. This can be utilized if an
  1243. * own or 3rdParty SystemTagsManager should be used that – for instance – uses the
  1244. * filesystem instead of the database to keep the tags.
  1245. *
  1246. * Defaults to ``\OC\SystemTag\ManagerFactory``
  1247. */
  1248. 'systemtags.managerFactory' => '\OC\SystemTag\ManagerFactory',
  1249. /**
  1250. * Maintenance
  1251. *
  1252. * These options are for halting user activity when you are performing server
  1253. * maintenance.
  1254. */
  1255. /**
  1256. * Enable maintenance mode to disable Nextcloud
  1257. *
  1258. * If you want to prevent users from logging in to Nextcloud before you start
  1259. * doing some maintenance work, you need to set the value of the maintenance
  1260. * parameter to true. Please keep in mind that users who are already logged-in
  1261. * are kicked out of Nextcloud instantly.
  1262. *
  1263. * Defaults to ``false``
  1264. */
  1265. 'maintenance' => false,
  1266. /**
  1267. * UTC Hour for maintenance windows
  1268. *
  1269. * Some background jobs only run once a day. When an hour is defined for this config,
  1270. * the background jobs which advertise themselves as not time sensitive will be
  1271. * delayed during the "working" hours and only run in the 4 hours after the given time.
  1272. * This is e.g. used for activity expiration, suspicious login training and update checks.
  1273. *
  1274. * A value of 1 e.g. will only run these background jobs between 01:00am UTC and 05:00am UTC.
  1275. *
  1276. * Defaults to ``100`` which disables the feature
  1277. */
  1278. 'maintenance_window_start' => 1,
  1279. /**
  1280. * Log all LDAP requests into a file
  1281. *
  1282. * Warning: This heavily decreases the performance of the server and is only
  1283. * meant to debug/profile the LDAP interaction manually.
  1284. * Also, it might log sensitive data into a plain text file.
  1285. */
  1286. 'ldap_log_file' => '',
  1287. /**
  1288. * SSL
  1289. */
  1290. /**
  1291. * Extra SSL options to be used for configuration.
  1292. *
  1293. * Defaults to an empty array.
  1294. */
  1295. 'openssl' => [
  1296. 'config' => '/absolute/location/of/openssl.cnf',
  1297. ],
  1298. /**
  1299. * Memory caching backend configuration
  1300. *
  1301. * Available cache backends:
  1302. *
  1303. * * ``\OC\Memcache\APCu`` APC user backend
  1304. * * ``\OC\Memcache\ArrayCache`` In-memory array-based backend (not recommended)
  1305. * * ``\OC\Memcache\Memcached`` Memcached backend
  1306. * * ``\OC\Memcache\Redis`` Redis backend
  1307. *
  1308. * Advice on choosing between the various backends:
  1309. *
  1310. * * APCu should be easiest to install. Almost all distributions have packages.
  1311. * Use this for single user environment for all caches.
  1312. * * Use Redis or Memcached for distributed environments.
  1313. * For the local cache (you can configure two) take APCu.
  1314. */
  1315. /**
  1316. * Memory caching backend for locally stored data
  1317. *
  1318. * * Used for host-specific data, e.g. file paths
  1319. *
  1320. * Defaults to ``none``
  1321. */
  1322. 'memcache.local' => '\OC\Memcache\APCu',
  1323. /**
  1324. * Memory caching backend for distributed data
  1325. *
  1326. * * Used for installation-specific data, e.g. database caching
  1327. * * If unset, defaults to the value of memcache.local
  1328. *
  1329. * Defaults to ``none``
  1330. */
  1331. 'memcache.distributed' => '\OC\Memcache\Memcached',
  1332. /**
  1333. * Connection details for redis to use for memory caching in a single server configuration.
  1334. *
  1335. * For enhanced security it is recommended to configure Redis
  1336. * to require a password. See http://redis.io/topics/security
  1337. * for more information.
  1338. *
  1339. * We also support redis SSL/TLS encryption as of version 6.
  1340. * See https://redis.io/topics/encryption for more information.
  1341. */
  1342. 'redis' => [
  1343. 'host' => 'localhost', // can also be a unix domain socket: '/tmp/redis.sock'
  1344. 'port' => 6379,
  1345. 'timeout' => 0.0,
  1346. 'read_timeout' => 0.0,
  1347. 'user' => '', // Optional: if not defined, no password will be used.
  1348. 'password' => '', // Optional: if not defined, no password will be used.
  1349. 'dbindex' => 0, // Optional: if undefined SELECT will not run and will use Redis Server's default DB Index.
  1350. // If redis in-transit encryption is enabled, provide certificates
  1351. // SSL context https://www.php.net/manual/en/context.ssl.php
  1352. 'ssl_context' => [
  1353. 'local_cert' => '/certs/redis.crt',
  1354. 'local_pk' => '/certs/redis.key',
  1355. 'cafile' => '/certs/ca.crt'
  1356. ]
  1357. ],
  1358. /**
  1359. * Connection details for a Redis Cluster.
  1360. *
  1361. * Redis Cluster support requires the php module phpredis in version 3.0.0 or
  1362. * higher.
  1363. *
  1364. * Available failover modes:
  1365. * - \RedisCluster::FAILOVER_NONE - only send commands to master nodes (default)
  1366. * - \RedisCluster::FAILOVER_ERROR - failover to slaves for read commands if master is unavailable (recommended)
  1367. * - \RedisCluster::FAILOVER_DISTRIBUTE - randomly distribute read commands across master and slaves
  1368. *
  1369. * WARNING: FAILOVER_DISTRIBUTE is a not recommended setting, and we strongly
  1370. * suggest to not use it if you use Redis for file locking. Due to the way Redis
  1371. * is synchronized it could happen, that the read for an existing lock is
  1372. * scheduled to a slave that is not fully synchronized with the connected master
  1373. * which then causes a FileLocked exception.
  1374. *
  1375. * See https://redis.io/topics/cluster-spec for details about the Redis cluster
  1376. *
  1377. * Authentication works with phpredis version 4.2.1+. See
  1378. * https://github.com/phpredis/phpredis/commit/c5994f2a42b8a348af92d3acb4edff1328ad8ce1
  1379. */
  1380. 'redis.cluster' => [
  1381. 'seeds' => [ // provide some or all of the cluster servers to bootstrap discovery, port required
  1382. 'localhost:7000',
  1383. 'localhost:7001',
  1384. ],
  1385. 'timeout' => 0.0,
  1386. 'read_timeout' => 0.0,
  1387. 'failover_mode' => \RedisCluster::FAILOVER_ERROR,
  1388. 'user' => '', // Optional: if not defined, no password will be used.
  1389. 'password' => '', // Optional: if not defined, no password will be used.
  1390. // If redis in-transit encryption is enabled, provide certificates
  1391. // SSL context https://www.php.net/manual/en/context.ssl.php
  1392. 'ssl_context' => [
  1393. 'local_cert' => '/certs/redis.crt',
  1394. 'local_pk' => '/certs/redis.key',
  1395. 'cafile' => '/certs/ca.crt'
  1396. ]
  1397. ],
  1398. /**
  1399. * Server details for one or more memcached servers to use for memory caching.
  1400. */
  1401. 'memcached_servers' => [
  1402. // hostname, port and optional weight
  1403. // or path and port 0 for unix socket. Also see:
  1404. // https://www.php.net/manual/en/memcached.addservers.php
  1405. // https://www.php.net/manual/en/memcached.addserver.php
  1406. ['localhost', 11211],
  1407. //array('other.host.local', 11211),
  1408. ],
  1409. /**
  1410. * Connection options for memcached
  1411. */
  1412. 'memcached_options' => [
  1413. // Set timeouts to 50ms
  1414. \Memcached::OPT_CONNECT_TIMEOUT => 50,
  1415. \Memcached::OPT_RETRY_TIMEOUT => 50,
  1416. \Memcached::OPT_SEND_TIMEOUT => 50,
  1417. \Memcached::OPT_RECV_TIMEOUT => 50,
  1418. \Memcached::OPT_POLL_TIMEOUT => 50,
  1419. // Enable compression
  1420. \Memcached::OPT_COMPRESSION => true,
  1421. // Turn on consistent hashing
  1422. \Memcached::OPT_LIBKETAMA_COMPATIBLE => true,
  1423. // Enable Binary Protocol
  1424. \Memcached::OPT_BINARY_PROTOCOL => true,
  1425. // Binary serializer vill be enabled if the igbinary PECL module is available
  1426. //\Memcached::OPT_SERIALIZER => \Memcached::SERIALIZER_IGBINARY,
  1427. ],
  1428. /**
  1429. * Location of the cache folder, defaults to ``data/$user/cache`` where
  1430. * ``$user`` is the current user. When specified, the format will change to
  1431. * ``$cache_path/$user`` where ``$cache_path`` is the configured cache directory
  1432. * and ``$user`` is the user.
  1433. *
  1434. * Defaults to ``''`` (empty string)
  1435. */
  1436. 'cache_path' => '',
  1437. /**
  1438. * TTL of chunks located in the cache folder before they're removed by
  1439. * garbage collection (in seconds). Increase this value if users have
  1440. * issues uploading very large files via the Nextcloud Client as upload isn't
  1441. * completed within one day.
  1442. *
  1443. * Defaults to ``60*60*24`` (1 day)
  1444. */
  1445. 'cache_chunk_gc_ttl' => 60*60*24,
  1446. /**
  1447. * Using Object Store with Nextcloud
  1448. */
  1449. /**
  1450. * This example shows how to configure Nextcloud to store all files in a
  1451. * swift object storage.
  1452. *
  1453. * It is important to note that Nextcloud in object store mode will expect
  1454. * exclusive access to the object store container because it only stores the
  1455. * binary data for each file. The metadata is currently kept in the local
  1456. * database for performance reasons.
  1457. *
  1458. * WARNING: The current implementation is incompatible with any app that uses
  1459. * direct file IO and circumvents our virtual filesystem. That includes
  1460. * Encryption and Gallery. Gallery will store thumbnails directly in the
  1461. * filesystem and encryption will cause severe overhead because key files need
  1462. * to be fetched in addition to any requested file.
  1463. *
  1464. */
  1465. 'objectstore' => [
  1466. 'class' => 'OC\\Files\\ObjectStore\\Swift',
  1467. 'arguments' => [
  1468. // trystack will use your facebook id as the username
  1469. 'username' => 'facebook100000123456789',
  1470. // in the trystack dashboard go to user -> settings -> API Password to
  1471. // generate a password
  1472. 'password' => 'Secr3tPaSSWoRdt7',
  1473. // must already exist in the objectstore, name can be different
  1474. 'container' => 'nextcloud',
  1475. // prefix to prepend to the fileid, default is 'oid:urn:'
  1476. 'objectPrefix' => 'oid:urn:',
  1477. // create the container if it does not exist. default is false
  1478. 'autocreate' => true,
  1479. // required, dev-/trystack defaults to 'RegionOne'
  1480. 'region' => 'RegionOne',
  1481. // The Identity / Keystone endpoint
  1482. 'url' => 'http://8.21.28.222:5000/v2.0',
  1483. // uploadPartSize: size of the uploaded chunks, defaults to 524288000
  1484. 'uploadPartSize' => 524288000,
  1485. // required on dev-/trystack
  1486. 'tenantName' => 'facebook100000123456789',
  1487. // dev-/trystack uses swift by default, the lib defaults to 'cloudFiles'
  1488. // if omitted
  1489. 'serviceName' => 'swift',
  1490. // The Interface / url Type, optional
  1491. 'urlType' => 'internal'
  1492. ],
  1493. ],
  1494. /**
  1495. * To use swift V3
  1496. */
  1497. 'objectstore' => [
  1498. 'class' => 'OC\\Files\\ObjectStore\\Swift',
  1499. 'arguments' => [
  1500. 'autocreate' => true,
  1501. 'user' => [
  1502. 'name' => 'swift',
  1503. 'password' => 'swift',
  1504. 'domain' => [
  1505. 'name' => 'default',
  1506. ],
  1507. ],
  1508. 'scope' => [
  1509. 'project' => [
  1510. 'name' => 'service',
  1511. 'domain' => [
  1512. 'name' => 'default',
  1513. ],
  1514. ],
  1515. ],
  1516. 'tenantName' => 'service',
  1517. 'serviceName' => 'swift',
  1518. 'region' => 'regionOne',
  1519. 'url' => 'http://yourswifthost:5000/v3',
  1520. 'bucket' => 'nextcloud',
  1521. ],
  1522. ],
  1523. /**
  1524. * If this is set to true and a multibucket object store is configured then
  1525. * newly created previews are put into 256 dedicated buckets.
  1526. *
  1527. * Those buckets are named like the mulibucket version but with the postfix
  1528. * ``-preview-NUMBER`` where NUMBER is between 0 and 255.
  1529. *
  1530. * Keep in mind that only previews of files are put in there that don't have
  1531. * some already. Otherwise, the old bucket will be used.
  1532. *
  1533. * To migrate existing previews to this new multibucket distribution of previews
  1534. * use the occ command ``preview:repair``. For now this will only migrate
  1535. * previews that were generated before Nextcloud 19 in the flat
  1536. * ``appdata_INSTANCEID/previews/FILEID`` folder structure.
  1537. */
  1538. 'objectstore.multibucket.preview-distribution' => false,
  1539. /**
  1540. * Sharing
  1541. *
  1542. * Global settings for Sharing
  1543. */
  1544. /**
  1545. * Replaces the default Share Provider Factory. This can be utilized if
  1546. * own or 3rdParty Share Providers are used that – for instance – use the
  1547. * filesystem instead of the database to keep the share information.
  1548. *
  1549. * Defaults to ``\OC\Share20\ProviderFactory``
  1550. */
  1551. 'sharing.managerFactory' => '\OC\Share20\ProviderFactory',
  1552. /**
  1553. * Enables expiration for link share passwords sent by email (sharebymail).
  1554. * The passwords will expire after the configured interval, the users can
  1555. * still request a new one in the public link page.
  1556. */
  1557. 'sharing.enable_mail_link_password_expiration' => false,
  1558. /**
  1559. * Expiration interval for passwords, in seconds.
  1560. */
  1561. 'sharing.mail_link_password_expiration_interval' => 3600,
  1562. /**
  1563. * Define max number of results returned by the search for auto-completion of
  1564. * users, groups, etc. The value must not be lower than 0 (for unlimited).
  1565. *
  1566. * If more, different sources are requested (e.g. different user backends; or
  1567. * both users and groups), the value is applied per source and might not be
  1568. * truncated after collecting the results. I.e. more results can appear than
  1569. * configured here.
  1570. *
  1571. * Default is 25.
  1572. */
  1573. 'sharing.maxAutocompleteResults' => 25,
  1574. /**
  1575. * Define the minimum length of the search string before we start auto-completion
  1576. * Default is no limit (value set to 0)
  1577. */
  1578. 'sharing.minSearchStringLength' => 0,
  1579. /**
  1580. * Set to true to enable that internal shares need to be accepted by the users by default.
  1581. * Users can change this for their account in their personal sharing settings
  1582. */
  1583. 'sharing.enable_share_accept' => false,
  1584. /**
  1585. * Set to true to enforce that internal shares need to be accepted
  1586. */
  1587. 'sharing.force_share_accept' => false,
  1588. /**
  1589. * Set to ``false``, to prevent users from setting a custom share_folder
  1590. */
  1591. 'sharing.allow_custom_share_folder' => true,
  1592. /**
  1593. * Define a default folder for shared files and folders other than root.
  1594. * Changes to this value will only have effect on new shares.
  1595. *
  1596. * Defaults to ``/``
  1597. */
  1598. 'share_folder' => '/',
  1599. /**
  1600. * Set to ``false``, to stop sending a mail when users receive a share
  1601. */
  1602. 'sharing.enable_share_mail' => true,
  1603. /**
  1604. * Set to true to enable the feature to add exceptions for share password enforcement
  1605. */
  1606. 'sharing.allow_disabled_password_enforcement_groups' => false,
  1607. /**
  1608. * Set to true to always transfer incoming shares by default
  1609. * when running "occ files:transfer-ownership".
  1610. * Defaults to false, so incoming shares are not transferred if not specifically requested
  1611. * by a command line argument.
  1612. */
  1613. 'transferIncomingShares' => false,
  1614. /**
  1615. * Hashing
  1616. */
  1617. /**
  1618. * By default, Nextcloud will use the Argon2 password hashing if available.
  1619. * However, if for whatever reason you want to stick with the PASSWORD_DEFAULT
  1620. * of your php version. Then set the setting to true.
  1621. *
  1622. * Nextcloud uses the Argon2 algorithm (with PHP >= 7.2) to create hashes by its
  1623. * own and exposes its configuration options as following. More information can
  1624. * be found at: https://www.php.net/manual/en/function.password-hash.php
  1625. */
  1626. 'hashing_default_password' => false,
  1627. /**
  1628. * The number of CPU threads to be used by the algorithm for computing a hash.
  1629. * The value must be an integer, and the minimum value is 1. Rationally it does
  1630. * not help to provide a number higher than the available threads on the machine.
  1631. * Values that undershoot the minimum will be ignored in favor of the minimum.
  1632. */
  1633. 'hashingThreads' => PASSWORD_ARGON2_DEFAULT_THREADS,
  1634. /**
  1635. * The memory in KiB to be used by the algorithm for computing a hash. The value
  1636. * must be an integer, and the minimum value is 8 times the number of CPU threads.
  1637. * Values that undershoot the minimum will be ignored in favor of the minimum.
  1638. */
  1639. 'hashingMemoryCost' => PASSWORD_ARGON2_DEFAULT_MEMORY_COST,
  1640. /**
  1641. * The number of iterations that are used by the algorithm for computing a hash.
  1642. * The value must be an integer, and the minimum value is 1. Values that
  1643. * undershoot the minimum will be ignored in favor of the minimum.
  1644. */
  1645. 'hashingTimeCost' => PASSWORD_ARGON2_DEFAULT_TIME_COST,
  1646. /**
  1647. * The hashing cost used by hashes generated by Nextcloud
  1648. * Using a higher value requires more time and CPU power to calculate the hashes
  1649. */
  1650. 'hashingCost' => 10,
  1651. /**
  1652. * All other configuration options
  1653. */
  1654. /**
  1655. * Additional driver options for the database connection, e.g. to enable SSL
  1656. * encryption in MySQL or specify a custom wait timeout on a cheap hoster.
  1657. *
  1658. * When setting up TLS/SSL for encrypting the connections, you need to ensure that
  1659. * the passed keys and certificates are readable by the PHP process. In addition,
  1660. * PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT might need to be set to false, if the
  1661. * database servers certificates CN does not match with the hostname used to connect.
  1662. * The standard behavior here is different from the MySQL/MariaDB CLI client, which
  1663. * does not verify the server cert except --ssl-verify-server-cert is passed manually.
  1664. */
  1665. 'dbdriveroptions' => [
  1666. PDO::MYSQL_ATTR_SSL_CA => '/file/path/to/ca_cert.pem',
  1667. PDO::MYSQL_ATTR_SSL_KEY => '/file/path/to/mysql-client-key.pem',
  1668. PDO::MYSQL_ATTR_SSL_CERT => '/file/path/to/mysql-client-cert.pem',
  1669. PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT => false,
  1670. PDO::MYSQL_ATTR_INIT_COMMAND => 'SET wait_timeout = 28800'
  1671. ],
  1672. /**
  1673. * sqlite3 journal mode can be specified using this configuration parameter -
  1674. * can be 'WAL' or 'DELETE' see for more details https://www.sqlite.org/wal.html
  1675. */
  1676. 'sqlite.journal_mode' => 'DELETE',
  1677. /**
  1678. * During setup, if requirements are met (see below), this setting is set to true
  1679. * and MySQL can handle 4 byte characters instead of 3 byte characters.
  1680. *
  1681. * If you want to convert an existing 3-byte setup into a 4-byte setup please
  1682. * set the parameters in MySQL as mentioned below and run the migration command:
  1683. * ./occ db:convert-mysql-charset
  1684. * The config setting will be set automatically after a successful run.
  1685. *
  1686. * Consult the documentation for more details.
  1687. *
  1688. * MySQL requires a special setup for longer indexes (> 767 bytes) which are
  1689. * needed:
  1690. *
  1691. * [mysqld]
  1692. * innodb_large_prefix=ON
  1693. * innodb_file_format=Barracuda
  1694. * innodb_file_per_table=ON
  1695. *
  1696. * Tables will be created with
  1697. * * character set: utf8mb4
  1698. * * collation: utf8mb4_bin
  1699. * * row_format: dynamic
  1700. *
  1701. * See:
  1702. * https://dev.mysql.com/doc/refman/5.7/en/charset-unicode-utf8mb4.html
  1703. * https://dev.mysql.com/doc/refman/5.7/en/innodb-parameters.html#sysvar_innodb_large_prefix
  1704. * https://mariadb.com/kb/en/mariadb/xtradbinnodb-server-system-variables/#innodb_large_prefix
  1705. * http://www.tocker.ca/2013/10/31/benchmarking-innodb-page-compression-performance.html
  1706. * http://mechanics.flite.com/blog/2014/07/29/using-innodb-large-prefix-to-avoid-error-1071/
  1707. */
  1708. 'mysql.utf8mb4' => false,
  1709. /**
  1710. * For search queries in the database, a default collation – depending on the
  1711. * character set – is chosen. In some cases a different behaviour is desired,
  1712. * for instances when an accent sensitive search is desired.
  1713. *
  1714. * MariaDB and MySQL have an overlap in available collations, but also
  1715. * incompatible ones, also depending on the version of the database server.
  1716. *
  1717. * This option allows to override the automatic choice. Example:
  1718. *
  1719. * 'mysql.collation' => 'utf8mb4_0900_as_ci',
  1720. *
  1721. * This setting has no effect on setup or creating tables. In those cases
  1722. * always utf8[mb4]_bin is being used. This setting is only taken into
  1723. * consideration in SQL queries that utilize LIKE comparison operators.
  1724. */
  1725. 'mysql.collation' => null,
  1726. /**
  1727. * Database types that are supported for installation.
  1728. *
  1729. * Available:
  1730. * - sqlite (SQLite3)
  1731. * - mysql (MySQL)
  1732. * - pgsql (PostgreSQL)
  1733. * - oci (Oracle)
  1734. *
  1735. * Defaults to the following databases:
  1736. * - sqlite (SQLite3)
  1737. * - mysql (MySQL)
  1738. * - pgsql (PostgreSQL)
  1739. */
  1740. 'supportedDatabases' => [
  1741. 'sqlite',
  1742. 'mysql',
  1743. 'pgsql',
  1744. 'oci',
  1745. ],
  1746. /**
  1747. * Override where Nextcloud stores temporary files. Useful in situations where
  1748. * the system temporary directory is on a limited space ramdisk or is otherwise
  1749. * restricted, or if external storage which do not support streaming are in
  1750. * use.
  1751. *
  1752. * The Web server user/PHP must have write access to this directory.
  1753. * Additionally you have to make sure that your PHP configuration considers this a valid
  1754. * tmp directory, by setting the TMP, TMPDIR, and TEMP variables to the required directories.
  1755. * On top of that you might be required to grant additional permissions in AppArmor or SELinux.
  1756. */
  1757. 'tempdirectory' => '/tmp/nextcloudtemp',
  1758. /**
  1759. * Override where Nextcloud stores update files while updating. Useful in situations
  1760. * where the default `datadirectory` is on network disk like NFS, or is otherwise
  1761. * restricted. Defaults to the value of `datadirectory` if unset.
  1762. *
  1763. * If set, the value MUST be located _outside_ of the installation directory of Nextcloud and
  1764. * writable by the Web server user.
  1765. *
  1766. */
  1767. 'updatedirectory' => '',
  1768. /**
  1769. * Blacklist a specific file or files and disallow the upload of files
  1770. * with this name. ``.htaccess`` is blocked by default.
  1771. * WARNING: USE THIS ONLY IF YOU KNOW WHAT YOU ARE DOING.
  1772. *
  1773. * Defaults to ``array('.htaccess')``
  1774. */
  1775. 'blacklisted_files' => ['.htaccess'],
  1776. /**
  1777. * Blacklist characters from being used in filenames. This is useful if you
  1778. * have a filesystem or OS which does not support certain characters like windows.
  1779. *
  1780. * The '/' and '\' characters are always forbidden.
  1781. *
  1782. * Example for windows systems: ``array('?', '<', '>', ':', '*', '|', '"', chr(0), "\n", "\r")``
  1783. * see https://en.wikipedia.org/wiki/Comparison_of_file_systems#Limits
  1784. *
  1785. * Defaults to ``array()``
  1786. */
  1787. 'forbidden_chars' => [],
  1788. /**
  1789. * If you are applying a theme to Nextcloud, enter the name of the theme here.
  1790. * The default location for themes is ``nextcloud/themes/``.
  1791. *
  1792. * Defaults to the theming app which is shipped since Nextcloud 9
  1793. */
  1794. 'theme' => '',
  1795. /**
  1796. * Enforce the user theme. This will disable the user theming settings
  1797. * This must be a valid ITheme ID.
  1798. * E.g. dark, dark-highcontrast, default, light, light-highcontrast, opendyslexic
  1799. */
  1800. 'enforce_theme' => '',
  1801. /**
  1802. * The default cipher for encrypting files. Currently supported are:
  1803. * - AES-256-CTR
  1804. * - AES-128-CTR
  1805. * - AES-256-CFB
  1806. * - AES-128-CFB
  1807. *
  1808. * Defaults to ``AES-256-CTR``
  1809. */
  1810. 'cipher' => 'AES-256-CTR',
  1811. /**
  1812. * Use the legacy base64 format for encrypted files instead of the more space-efficient
  1813. * binary format. The option affects only newly written files, existing encrypted files
  1814. * will not be touched and will remain readable whether they use the new format or not.
  1815. *
  1816. * Defaults to ``false``
  1817. */
  1818. 'encryption.use_legacy_base64_encoding' => false,
  1819. /**
  1820. * The minimum Nextcloud desktop client version that will be allowed to sync with
  1821. * this server instance. All connections made from earlier clients will be denied
  1822. * by the server. Defaults to the minimum officially supported Nextcloud desktop
  1823. * client version at the time of release of this server version.
  1824. *
  1825. * When changing this, note that older unsupported versions of the Nextcloud desktop
  1826. * client may not function as expected, and could lead to permanent data loss for
  1827. * clients or other unexpected results.
  1828. *
  1829. * Defaults to ``2.3.0``
  1830. */
  1831. 'minimum.supported.desktop.version' => '2.3.0',
  1832. /**
  1833. * Option to allow local storage to contain symlinks.
  1834. * WARNING: Not recommended. This would make it possible for Nextcloud to access
  1835. * files outside the data directory and could be considered a security risk.
  1836. *
  1837. * Defaults to ``false``
  1838. */
  1839. 'localstorage.allowsymlinks' => false,
  1840. /**
  1841. * Nextcloud overrides umask to ensure suitable access permissions
  1842. * regardless of webserver/php-fpm configuration and worker state.
  1843. * WARNING: Modifying this value has security implications and
  1844. * may soft-break the installation.
  1845. *
  1846. * Most installs shall not modify this value.
  1847. *
  1848. * Defaults to ``0022``
  1849. */
  1850. 'localstorage.umask' => 0022,
  1851. /**
  1852. * This options allows storage systems that don't allow to modify existing files
  1853. * to overcome this limitation by removing the files before overwriting.
  1854. *
  1855. * Defaults to ``false``
  1856. */
  1857. 'localstorage.unlink_on_truncate' => false,
  1858. /**
  1859. * EXPERIMENTAL: option whether to include external storage in quota
  1860. * calculation, defaults to false.
  1861. *
  1862. * Defaults to ``false``
  1863. */
  1864. 'quota_include_external_storage' => false,
  1865. /**
  1866. * When an external storage is unavailable for some reasons, it will be flagged
  1867. * as such for 10 minutes. When the trigger is a failed authentication attempt
  1868. * the delay is higher and can be controlled with this option. The motivation
  1869. * is to make account lock outs at Active Directories (and compatible) more
  1870. * unlikely.
  1871. *
  1872. * Defaults to ``1800`` (seconds)
  1873. */
  1874. 'external_storage.auth_availability_delay' => 1800,
  1875. /**
  1876. * Allows to create external storages of type "Local" in the web interface and APIs.
  1877. *
  1878. * When disabled, it is still possible to create local storages with occ using
  1879. * the following command:
  1880. *
  1881. * % php occ files_external:create /mountpoint local null::null -c datadir=/path/to/data
  1882. *
  1883. * Defaults to ``true``
  1884. *
  1885. */
  1886. 'files_external_allow_create_new_local' => true,
  1887. /**
  1888. * Specifies how often the local filesystem (the Nextcloud data/ directory, and
  1889. * NFS mounts in data/) is checked for changes made outside Nextcloud. This
  1890. * does not apply to external storage.
  1891. *
  1892. * 0 -> Never check the filesystem for outside changes, provides a performance
  1893. * increase when it's certain that no changes are made directly to the
  1894. * filesystem
  1895. *
  1896. * 1 -> Check each file or folder at most once per request, recommended for
  1897. * general use if outside changes might happen.
  1898. *
  1899. * Defaults to ``0``
  1900. */
  1901. 'filesystem_check_changes' => 0,
  1902. /**
  1903. * By default, Nextcloud will store the part files created during upload in the
  1904. * same storage as the upload target. Setting this to false will store the part
  1905. * files in the root of the users folder which might be required to work with certain
  1906. * external storage setups that have limited rename capabilities.
  1907. *
  1908. * Defaults to ``true``
  1909. */
  1910. 'part_file_in_storage' => true,
  1911. /**
  1912. * Where ``mount.json`` file should be stored, defaults to ``data/mount.json``
  1913. * in the Nextcloud directory.
  1914. *
  1915. * Defaults to ``data/mount.json`` in the Nextcloud directory.
  1916. */
  1917. 'mount_file' => '/var/www/nextcloud/data/mount.json',
  1918. /**
  1919. * When ``true``, prevent Nextcloud from changing the cache due to changes in
  1920. * the filesystem for all storage.
  1921. *
  1922. * Defaults to ``false``
  1923. */
  1924. 'filesystem_cache_readonly' => false,
  1925. /**
  1926. * List of trusted proxy servers
  1927. *
  1928. * You may set this to an array containing a combination of
  1929. * - IPv4 addresses, e.g. `192.168.2.123`
  1930. * - IPv4 ranges in CIDR notation, e.g. `192.168.2.0/24`
  1931. * - IPv6 addresses, e.g. `fd9e:21a7:a92c:2323::1`
  1932. * - IPv6 ranges in CIDR notation, e.g. `2001:db8:85a3:8d3:1319:8a20::/95`
  1933. *
  1934. * When an incoming request's `REMOTE_ADDR` matches any of the IP addresses
  1935. * specified here, it is assumed to be a proxy instead of a client. Thus, the
  1936. * client IP will be read from the HTTP header specified in
  1937. * `forwarded_for_headers` instead of from `REMOTE_ADDR`.
  1938. *
  1939. * So if you configure `trusted_proxies`, also consider setting
  1940. * `forwarded_for_headers` which otherwise defaults to `HTTP_X_FORWARDED_FOR`
  1941. * (the `X-Forwarded-For` header).
  1942. *
  1943. * Defaults to an empty array.
  1944. */
  1945. 'trusted_proxies' => ['203.0.113.45', '198.51.100.128', '192.168.2.0/24'],
  1946. /**
  1947. * Headers that should be trusted as client IP address in combination with
  1948. * `trusted_proxies`. If the HTTP header looks like 'X-Forwarded-For', then use
  1949. * 'HTTP_X_FORWARDED_FOR' here.
  1950. *
  1951. * If set incorrectly, a client can spoof their IP address as visible to
  1952. * Nextcloud, bypassing access controls and making logs useless!
  1953. *
  1954. * Defaults to ``'HTTP_X_FORWARDED_FOR'``
  1955. */
  1956. 'forwarded_for_headers' => ['HTTP_X_FORWARDED', 'HTTP_FORWARDED_FOR'],
  1957. /**
  1958. * max file size for animating gifs on public-sharing-site.
  1959. * If the gif is bigger, it'll show a static preview
  1960. *
  1961. * Value represents the maximum filesize in megabytes. Set to ``-1`` for
  1962. * no limit.
  1963. *
  1964. * Defaults to ``10`` megabytes
  1965. */
  1966. 'max_filesize_animated_gifs_public_sharing' => 10,
  1967. /**
  1968. * Enables transactional file locking.
  1969. * This is enabled by default.
  1970. *
  1971. * Prevents concurrent processes from accessing the same files
  1972. * at the same time. Can help prevent side effects that would
  1973. * be caused by concurrent operations. Mainly relevant for
  1974. * very large installations with many users working with
  1975. * shared files.
  1976. *
  1977. * Defaults to ``true``
  1978. */
  1979. 'filelocking.enabled' => true,
  1980. /**
  1981. * Set the lock's time-to-live in seconds.
  1982. *
  1983. * Any lock older than this will be automatically cleaned up.
  1984. *
  1985. * Defaults to ``60*60`` seconds (1 hour) or the php
  1986. * max_execution_time, whichever is higher.
  1987. */
  1988. 'filelocking.ttl' => 60*60,
  1989. /**
  1990. * Memory caching backend for file locking
  1991. *
  1992. * Because most memcache backends can clean values without warning using redis
  1993. * is highly recommended to *avoid data loss*.
  1994. *
  1995. * Defaults to ``none``
  1996. */
  1997. 'memcache.locking' => '\\OC\\Memcache\\Redis',
  1998. /**
  1999. * Enable locking debug logging
  2000. *
  2001. * Note that this can lead to a very large volume of log items being written which can lead
  2002. * to performance degradation and large log files on busy instance.
  2003. *
  2004. * Thus enabling this in production for longer periods of time is not recommended
  2005. * or should be used together with the ``log.condition`` setting.
  2006. */
  2007. 'filelocking.debug' => false,
  2008. /**
  2009. * Disable the web based updater
  2010. */
  2011. 'upgrade.disable-web' => false,
  2012. /**
  2013. * Allows to modify the cli-upgrade link in order to link to a different documentation
  2014. */
  2015. 'upgrade.cli-upgrade-link' => '',
  2016. /**
  2017. * Set this Nextcloud instance to debugging mode
  2018. *
  2019. * Only enable this for local development and not in production environments
  2020. * This will disable the minifier and outputs some additional debug information
  2021. *
  2022. * Defaults to ``false``
  2023. */
  2024. 'debug' => false,
  2025. /**
  2026. * Sets the data-fingerprint of the current data served
  2027. *
  2028. * This is a property used by the clients to find out if a backup has been
  2029. * restored on the server. Once a backup is restored run
  2030. * ./occ maintenance:data-fingerprint
  2031. * To set this to a new value.
  2032. *
  2033. * Updating/Deleting this value can make connected clients stall until
  2034. * the user has resolved conflicts.
  2035. *
  2036. * Defaults to ``''`` (empty string)
  2037. */
  2038. 'data-fingerprint' => '',
  2039. /**
  2040. * This entry is just here to show a warning in case somebody copied the sample
  2041. * configuration. DO NOT ADD THIS SWITCH TO YOUR CONFIGURATION!
  2042. *
  2043. * If you, brave person, have read until here be aware that you should not
  2044. * modify *ANY* settings in this file without reading the documentation.
  2045. */
  2046. 'copied_sample_config' => true,
  2047. /**
  2048. * use a custom lookup server to publish user data
  2049. */
  2050. 'lookup_server' => 'https://lookup.nextcloud.com',
  2051. /**
  2052. * set to true if the server is used in a setup based on Nextcloud's Global Scale architecture
  2053. */
  2054. 'gs.enabled' => false,
  2055. /**
  2056. * by default federation is only used internally in a Global Scale setup
  2057. * If you want to allow federation outside your environment set it to 'global'
  2058. */
  2059. 'gs.federation' => 'internal',
  2060. /**
  2061. * List of incompatible user agents opted out from Same Site Cookie Protection.
  2062. * Some user agents are notorious and don't really properly follow HTTP
  2063. * specifications. For those, have an opt-out.
  2064. *
  2065. * WARNING: only use this if you know what you are doing
  2066. */
  2067. 'csrf.optout' => [
  2068. '/^WebDAVFS/', // OS X Finder
  2069. '/^Microsoft-WebDAV-MiniRedir/', // Windows webdav drive
  2070. ],
  2071. /**
  2072. * By default, there is on public pages a link shown that allows users to
  2073. * learn about the "simple sign up" - see https://nextcloud.com/signup/
  2074. *
  2075. * If this is set to "false" it will not show the link.
  2076. */
  2077. 'simpleSignUpLink.shown' => true,
  2078. /**
  2079. * By default, autocompletion is enabled for the login form on Nextcloud's login page.
  2080. * While this is enabled, browsers are allowed to "remember" login names and such.
  2081. * Some companies require it to be disabled to comply with their security policy.
  2082. *
  2083. * Simply set this property to "false", if you want to turn this feature off.
  2084. */
  2085. 'login_form_autocomplete' => true,
  2086. /**
  2087. * Timeout for the login form, after this time the login form is reset.
  2088. * This prevents password leaks on public devices if the user forgots to clear the form.
  2089. *
  2090. * Default is 5 minutes (300 seconds), a value of 0 means no timeout.
  2091. */
  2092. 'login_form_timeout' => 300,
  2093. /**
  2094. * If your user is using an outdated or unsupported browser, a warning will be shown
  2095. * to offer some guidance to upgrade or switch and ensure a proper Nextcloud experience.
  2096. * They can still bypass it after they have read the warning.
  2097. *
  2098. * Simply set this property to "true", if you want to turn this feature off.
  2099. */
  2100. 'no_unsupported_browser_warning' => false,
  2101. /**
  2102. * Disable background scanning of files
  2103. *
  2104. * By default, a background job runs every 10 minutes and execute a background
  2105. * scan to sync filesystem and database. Only users with unscanned files
  2106. * (size < 0 in filecache) are included. Maximum 500 users per job.
  2107. *
  2108. * Defaults to ``false``
  2109. */
  2110. 'files_no_background_scan' => false,
  2111. /**
  2112. * Log all queries into a file
  2113. *
  2114. * Warning: This heavily decreases the performance of the server and is only
  2115. * meant to debug/profile the query interaction manually.
  2116. * Also, it might log sensitive data into a plain text file.
  2117. */
  2118. 'query_log_file' => '',
  2119. /**
  2120. * Log all redis requests into a file
  2121. *
  2122. * Warning: This heavily decreases the performance of the server and is only
  2123. * meant to debug/profile the redis interaction manually.
  2124. * Also, it might log sensitive data into a plain text file.
  2125. */
  2126. 'redis_log_file' => '',
  2127. /**
  2128. * Enable diagnostics event logging
  2129. *
  2130. * If enabled the timings of common execution steps will be logged to the
  2131. * Nextcloud log at debug level. log.condition is useful to enable this on
  2132. * production systems to only log under some conditions
  2133. */
  2134. 'diagnostics.logging' => true,
  2135. /**
  2136. * Limit diagnostics event logging to events longer than the configured threshold in ms
  2137. *
  2138. * when set to 0 no diagnostics events will be logged
  2139. */
  2140. 'diagnostics.logging.threshold' => 0,
  2141. /**
  2142. * Enable profile globally
  2143. *
  2144. * Defaults to ``true``
  2145. */
  2146. 'profile.enabled' => true,
  2147. /**
  2148. * Allows to override the default scopes for Account data.
  2149. * The list of overridable properties and valid values for scopes are in
  2150. * ``OCP\Accounts\IAccountManager``. Values added here are merged with
  2151. * default values, which are in ``OC\Accounts\AccountManager``.
  2152. *
  2153. * For instance, if the phone property should default to the private scope
  2154. * instead of the local one:
  2155. *
  2156. * ::
  2157. *
  2158. * [
  2159. * \OCP\Accounts\IAccountManager::PROPERTY_PHONE => \OCP\Accounts\IAccountManager::SCOPE_PRIVATE
  2160. * ]
  2161. *
  2162. */
  2163. 'account_manager.default_property_scope' => [],
  2164. /**
  2165. * Enable the deprecated Projects feature,
  2166. * superseded by Related resources as of Nextcloud 25
  2167. *
  2168. * Defaults to ``false``
  2169. */
  2170. 'projects.enabled' => false,
  2171. /**
  2172. * Enable the bulk upload feature.
  2173. *
  2174. * Defaults to ``true``
  2175. */
  2176. 'bulkupload.enabled' => true,
  2177. /**
  2178. * Enables fetching open graph metadata from remote urls
  2179. *
  2180. * Defaults to ``true``
  2181. */
  2182. 'reference_opengraph' => true,
  2183. /**
  2184. * Enable use of old unified search
  2185. *
  2186. * Defaults to ``false``
  2187. */
  2188. 'unified_search.enabled' => false,
  2189. /**
  2190. * Enable features that are do respect accessibility standards yet.
  2191. *
  2192. * Defaults to ``true``
  2193. */
  2194. 'enable_non-accessible_features' => true,
  2195. ];