You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

config.sample.php 54KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797
  1. <?php
  2. /**
  3. * This configuration file is only provided to document the different
  4. * configuration options and their usage.
  5. *
  6. * DO NOT COMPLETELY BASE YOUR CONFIGURATION FILE ON THIS SAMPLE. THIS MAY BREAK
  7. * YOUR INSTANCE. Instead, manually copy configuration switches that you
  8. * consider important for your instance to your working ``config.php``, and
  9. * apply configuration options that are pertinent for your instance.
  10. *
  11. * This file is used to generate the configuration documentation.
  12. * Please consider following requirements of the current parser:
  13. * * all comments need to start with `/**` and end with ` *\/` - each on their
  14. * own line
  15. * * add a `@see CONFIG_INDEX` to copy a previously described config option
  16. * also to this line
  17. * * everything between the ` *\/` and the next `/**` will be treated as the
  18. * config option
  19. * * use RST syntax
  20. */
  21. $CONFIG = [
  22. /**
  23. * Default Parameters
  24. *
  25. * These parameters are configured by the Nextcloud installer, and are required
  26. * for your Nextcloud server to operate.
  27. */
  28. /**
  29. * This is a unique identifier for your Nextcloud installation, created
  30. * automatically by the installer. This example is for documentation only,
  31. * and you should never use it because it will not work. A valid ``instanceid``
  32. * is created when you install Nextcloud.
  33. *
  34. * 'instanceid' => 'd3c944a9a',
  35. */
  36. 'instanceid' => '',
  37. /**
  38. * The salt used to hash all passwords, auto-generated by the Nextcloud
  39. * installer. (There are also per-user salts.) If you lose this salt you lose
  40. * all your passwords. This example is for documentation only, and you should
  41. * never use it.
  42. *
  43. * @deprecated This salt is deprecated and only used for legacy-compatibility,
  44. * developers should *NOT* use this value for anything nowadays.
  45. *
  46. * 'passwordsalt' => 'd3c944a9af095aa08f',
  47. */
  48. 'passwordsalt' => '',
  49. /**
  50. * Your list of trusted domains that users can log into. Specifying trusted
  51. * domains prevents host header poisoning. Do not remove this, as it performs
  52. * necessary security checks.
  53. * You can specify:
  54. *
  55. * - the exact hostname of your host or virtual host, e.g. demo.example.org.
  56. * - the exact hostname with permitted port, e.g. demo.example.org:443.
  57. * This disallows all other ports on this host
  58. * - use * as a wildcard, e.g. ubos-raspberry-pi*.local will allow
  59. * ubos-raspberry-pi.local and ubos-raspberry-pi-2.local
  60. * - the IP address with or without permitted port, e.g. [2001:db8::1]:8080
  61. * Using TLS certificates where commonName=<IP address> is deprecated
  62. */
  63. 'trusted_domains' =>
  64. [
  65. 'demo.example.org',
  66. 'otherdomain.example.org',
  67. '10.111.112.113',
  68. '[2001:db8::1]'
  69. ],
  70. /**
  71. * Where user files are stored. The SQLite database is also stored here, when
  72. * you use SQLite.
  73. *
  74. * Default to ``data/`` in the Nextcloud directory.
  75. */
  76. 'datadirectory' => '/var/www/nextcloud/data',
  77. /**
  78. * The current version number of your Nextcloud installation. This is set up
  79. * during installation and update, so you shouldn't need to change it.
  80. */
  81. 'version' => '',
  82. /**
  83. * Identifies the database used with this installation. See also config option
  84. * ``supportedDatabases``
  85. *
  86. * Available:
  87. * - sqlite3 (SQLite3)
  88. * - mysql (MySQL/MariaDB)
  89. * - pgsql (PostgreSQL)
  90. *
  91. * Defaults to ``sqlite3``
  92. */
  93. 'dbtype' => 'sqlite3',
  94. /**
  95. * Your host server name, for example ``localhost``, ``hostname``,
  96. * ``hostname.example.com``, or the IP address. To specify a port use
  97. * ``hostname:####``; to specify a Unix socket use
  98. * ``localhost:/path/to/socket``.
  99. */
  100. 'dbhost' => '',
  101. /**
  102. * The name of the Nextcloud database, which is set during installation. You
  103. * should not need to change this.
  104. */
  105. 'dbname' => 'nextcloud',
  106. /**
  107. * The user that Nextcloud uses to write to the database. This must be unique
  108. * across Nextcloud instances using the same SQL database. This is set up during
  109. * installation, so you shouldn't need to change it.
  110. */
  111. 'dbuser' => '',
  112. /**
  113. * The password for the database user. This is set up during installation, so
  114. * you shouldn't need to change it.
  115. */
  116. 'dbpassword' => '',
  117. /**
  118. * Prefix for the Nextcloud tables in the database.
  119. *
  120. * Default to ``oc_``
  121. */
  122. 'dbtableprefix' => '',
  123. /**
  124. * Indicates whether the Nextcloud instance was installed successfully; ``true``
  125. * indicates a successful installation, and ``false`` indicates an unsuccessful
  126. * installation.
  127. *
  128. * Defaults to ``false``
  129. */
  130. 'installed' => false,
  131. /**
  132. * User Experience
  133. *
  134. * These optional parameters control some aspects of the user interface. Default
  135. * values, where present, are shown.
  136. */
  137. /**
  138. * This sets the default language on your Nextcloud server, using ISO_639-1
  139. * language codes such as ``en`` for English, ``de`` for German, and ``fr`` for
  140. * French. It overrides automatic language detection on public pages like login
  141. * or shared items. User's language preferences configured under "personal ->
  142. * language" override this setting after they have logged in. Nextcloud has two
  143. * distinguished language codes for German, 'de' and 'de_DE'. 'de' is used for
  144. * informal German and 'de_DE' for formal German. By setting this value to 'de_DE'
  145. * you can enforce the formal version of German unless the user has chosen
  146. * something different explicitly.
  147. *
  148. * Defaults to ``en``
  149. */
  150. 'default_language' => 'en',
  151. /**
  152. * With this setting a language can be forced for all users. If a language is
  153. * forced, the users are also unable to change their language in the personal
  154. * settings. If users shall be unable to change their language, but users have
  155. * different languages, this value can be set to ``true`` instead of a language
  156. * code.
  157. *
  158. * Defaults to ``false``
  159. */
  160. 'force_language' => 'en',
  161. /**
  162. * This sets the default locale on your Nextcloud server, using ISO_639
  163. * language codes such as ``en`` for English, ``de`` for German, and ``fr`` for
  164. * French, and ISO-3166 country codes such as ``GB``, ``US``, ``CA``, as defined
  165. * in RFC 5646. It overrides automatic locale detection on public pages like
  166. * login or shared items. User's locale preferences configured under "personal
  167. * -> locale" override this setting after they have logged in.
  168. *
  169. * Defaults to ``en``
  170. */
  171. 'default_locale' => 'en_US',
  172. /**
  173. * With this setting a locale can be forced for all users. If a locale is
  174. * forced, the users are also unable to change their locale in the personal
  175. * settings. If users shall be unable to change their locale, but users have
  176. * different languages, this value can be set to ``true`` instead of a locale
  177. * code.
  178. *
  179. * Defaults to ``false``
  180. */
  181. 'force_locale' => 'en_US',
  182. /**
  183. * Set the default app to open on login. Use the app names as they appear in the
  184. * URL after clicking them in the Apps menu, such as documents, calendar, and
  185. * gallery. You can use a comma-separated list of app names, so if the first
  186. * app is not enabled for a user then Nextcloud will try the second one, and so
  187. * on. If no enabled apps are found it defaults to the Files app.
  188. *
  189. * Defaults to ``files``
  190. */
  191. 'defaultapp' => 'files',
  192. /**
  193. * ``true`` enables the Help menu item in the user menu (top right of the
  194. * Nextcloud Web interface). ``false`` removes the Help item.
  195. */
  196. 'knowledgebaseenabled' => true,
  197. /**
  198. * ``true`` allows users to change their display names (on their Personal
  199. * pages), and ``false`` prevents them from changing their display names.
  200. */
  201. 'allow_user_to_change_display_name' => true,
  202. /**
  203. * Lifetime of the remember login cookie. This should be larger than the
  204. * session_lifetime. If it is set to 0 remember me is disabled.
  205. *
  206. * Defaults to ``60*60*24*15`` seconds (15 days)
  207. */
  208. 'remember_login_cookie_lifetime' => 60*60*24*15,
  209. /**
  210. * The lifetime of a session after inactivity.
  211. *
  212. * Defaults to ``60*60*24`` seconds (24 hours)
  213. */
  214. 'session_lifetime' => 60 * 60 * 24,
  215. /**
  216. * Enable or disable session keep-alive when a user is logged in to the Web UI.
  217. * Enabling this sends a "heartbeat" to the server to keep it from timing out.
  218. *
  219. * Defaults to ``true``
  220. */
  221. 'session_keepalive' => true,
  222. /**
  223. * Enforce token authentication for clients, which blocks requests using the user
  224. * password for enhanced security. Users need to generate tokens in personal settings
  225. * which can be used as passwords on their clients.
  226. *
  227. * Defaults to ``false``
  228. */
  229. 'token_auth_enforced' => false,
  230. /**
  231. * Whether the bruteforce protection shipped with Nextcloud should be enabled or not.
  232. *
  233. * Disabling this is discouraged for security reasons.
  234. *
  235. * Defaults to ``true``
  236. */
  237. 'auth.bruteforce.protection.enabled' => true,
  238. /**
  239. * By default WebAuthn is available but it can be explicitly disabled by admins
  240. */
  241. 'auth.webauthn.enabled' => true,
  242. /**
  243. * The directory where the skeleton files are located. These files will be
  244. * copied to the data directory of new users. Leave empty to not copy any
  245. * skeleton files.
  246. * ``{lang}`` can be used as a placeholder for the language of the user.
  247. * If the directory does not exist, it falls back to non dialect (from ``de_DE``
  248. * to ``de``). If that does not exist either, it falls back to ``default``
  249. *
  250. * Defaults to ``core/skeleton`` in the Nextcloud directory.
  251. */
  252. 'skeletondirectory' => '/path/to/nextcloud/core/skeleton',
  253. /**
  254. * If your user backend does not allow password resets (e.g. when it's a
  255. * read-only user backend like LDAP), you can specify a custom link, where the
  256. * user is redirected to, when clicking the "reset password" link after a failed
  257. * login-attempt.
  258. * In case you do not want to provide any link, replace the url with 'disabled'
  259. */
  260. 'lost_password_link' => 'https://example.org/link/to/password/reset',
  261. /**
  262. * Mail Parameters
  263. *
  264. * These configure the email settings for Nextcloud notifications and password
  265. * resets.
  266. */
  267. /**
  268. * The return address that you want to appear on emails sent by the Nextcloud
  269. * server, for example ``nc-admin@example.com``, substituting your own domain,
  270. * of course.
  271. */
  272. 'mail_domain' => 'example.com',
  273. /**
  274. * FROM address that overrides the built-in ``sharing-noreply`` and
  275. * ``lostpassword-noreply`` FROM addresses.
  276. *
  277. * Defaults to different from addresses depending on the feature.
  278. */
  279. 'mail_from_address' => 'nextcloud',
  280. /**
  281. * Enable SMTP class debugging.
  282. *
  283. * Defaults to ``false``
  284. */
  285. 'mail_smtpdebug' => false,
  286. /**
  287. * Which mode to use for sending mail: ``sendmail``, ``smtp`` or ``qmail``.
  288. *
  289. * If you are using local or remote SMTP, set this to ``smtp``.
  290. *
  291. * For the ``sendmail`` option you need an installed and working email system on
  292. * the server, with ``/usr/sbin/sendmail`` installed on your Unix system.
  293. *
  294. * For ``qmail`` the binary is /var/qmail/bin/sendmail, and it must be installed
  295. * on your Unix system.
  296. *
  297. * Defaults to ``smtp``
  298. */
  299. 'mail_smtpmode' => 'smtp',
  300. /**
  301. * This depends on ``mail_smtpmode``. Specify the IP address of your mail
  302. * server host. This may contain multiple hosts separated by a semi-colon. If
  303. * you need to specify the port number append it to the IP address separated by
  304. * a colon, like this: ``127.0.0.1:24``.
  305. *
  306. * Defaults to ``127.0.0.1``
  307. */
  308. 'mail_smtphost' => '127.0.0.1',
  309. /**
  310. * This depends on ``mail_smtpmode``. Specify the port for sending mail.
  311. *
  312. * Defaults to ``25``
  313. */
  314. 'mail_smtpport' => 25,
  315. /**
  316. * This depends on ``mail_smtpmode``. This sets the SMTP server timeout, in
  317. * seconds. You may need to increase this if you are running an anti-malware or
  318. * spam scanner.
  319. *
  320. * Defaults to ``10`` seconds
  321. */
  322. 'mail_smtptimeout' => 10,
  323. /**
  324. * This depends on ``mail_smtpmode``. Specify when you are using ``ssl`` for SSL/TLS or
  325. * ``tls`` for STARTTLS, or leave empty for no encryption.
  326. *
  327. * Defaults to ``''`` (empty string)
  328. */
  329. 'mail_smtpsecure' => '',
  330. /**
  331. * This depends on ``mail_smtpmode``. Change this to ``true`` if your mail
  332. * server requires authentication.
  333. *
  334. * Defaults to ``false``
  335. */
  336. 'mail_smtpauth' => false,
  337. /**
  338. * This depends on ``mail_smtpmode``. If SMTP authentication is required, choose
  339. * the authentication type as ``LOGIN`` or ``PLAIN``.
  340. *
  341. * Defaults to ``LOGIN``
  342. */
  343. 'mail_smtpauthtype' => 'LOGIN',
  344. /**
  345. * This depends on ``mail_smtpauth``. Specify the username for authenticating to
  346. * the SMTP server.
  347. *
  348. * Defaults to ``''`` (empty string)
  349. */
  350. 'mail_smtpname' => '',
  351. /**
  352. * This depends on ``mail_smtpauth``. Specify the password for authenticating to
  353. * the SMTP server.
  354. *
  355. * Default to ``''`` (empty string)
  356. */
  357. 'mail_smtppassword' => '',
  358. /**
  359. * Replaces the default mail template layout. This can be utilized if the
  360. * options to modify the mail texts with the theming app is not enough.
  361. * The class must extend ``\OC\Mail\EMailTemplate``
  362. */
  363. 'mail_template_class' => '\OC\Mail\EMailTemplate',
  364. /**
  365. * Email will be send by default with an HTML and a plain text body. This option
  366. * allows to only send plain text emails.
  367. */
  368. 'mail_send_plaintext_only' => false,
  369. /**
  370. * This depends on ``mail_smtpmode``. Array of additional streams options that
  371. * will be passed to underlying Swift mailer implementation.
  372. * Defaults to an empty array.
  373. */
  374. 'mail_smtpstreamoptions' => [],
  375. /**
  376. * Which mode is used for sendmail/qmail: ``smtp`` or ``pipe``.
  377. *
  378. * For ``smtp`` the sendmail binary is started with the parameter ``-bs``:
  379. * - Use the SMTP protocol on standard input and output.
  380. *
  381. * For ``pipe`` the binary is started with the parameters ``-t``:
  382. * - Read message from STDIN and extract recipients.
  383. *
  384. * Defaults to ``smtp``
  385. */
  386. 'mail_sendmailmode' => 'smtp',
  387. /**
  388. * Proxy Configurations
  389. */
  390. /**
  391. * The automatic hostname detection of Nextcloud can fail in certain reverse
  392. * proxy and CLI/cron situations. This option allows you to manually override
  393. * the automatic detection; for example ``www.example.com``, or specify the port
  394. * ``www.example.com:8080``.
  395. */
  396. 'overwritehost' => '',
  397. /**
  398. * When generating URLs, Nextcloud attempts to detect whether the server is
  399. * accessed via ``https`` or ``http``. However, if Nextcloud is behind a proxy
  400. * and the proxy handles the ``https`` calls, Nextcloud would not know that
  401. * ``ssl`` is in use, which would result in incorrect URLs being generated.
  402. * Valid values are ``http`` and ``https``.
  403. */
  404. 'overwriteprotocol' => '',
  405. /**
  406. * Nextcloud attempts to detect the webroot for generating URLs automatically.
  407. * For example, if ``www.example.com/nextcloud`` is the URL pointing to the
  408. * Nextcloud instance, the webroot is ``/nextcloud``. When proxies are in use,
  409. * it may be difficult for Nextcloud to detect this parameter, resulting in
  410. * invalid URLs.
  411. */
  412. 'overwritewebroot' => '',
  413. /**
  414. * This option allows you to define a manual override condition as a regular
  415. * expression for the remote IP address. For example, defining a range of IP
  416. * addresses starting with ``10.0.0.`` and ending with 1 to 3:
  417. * ``^10\.0\.0\.[1-3]$``
  418. *
  419. * Defaults to ``''`` (empty string)
  420. */
  421. 'overwritecondaddr' => '',
  422. /**
  423. * Use this configuration parameter to specify the base URL for any URLs which
  424. * are generated within Nextcloud using any kind of command line tools (cron or
  425. * occ). The value should contain the full base URL:
  426. * ``https://www.example.com/nextcloud``
  427. *
  428. * Defaults to ``''`` (empty string)
  429. */
  430. 'overwrite.cli.url' => '',
  431. /**
  432. * To have clean URLs without `/index.php` this parameter needs to be configured.
  433. *
  434. * This parameter will be written as "RewriteBase" on update and installation of
  435. * Nextcloud to your `.htaccess` file. While this value is often simply the URL
  436. * path of the Nextcloud installation it cannot be set automatically properly in
  437. * every scenario and needs thus some manual configuration.
  438. *
  439. * In a standard Apache setup this usually equals the folder that Nextcloud is
  440. * accessible at. So if Nextcloud is accessible via "https://mycloud.org/nextcloud"
  441. * the correct value would most likely be "/nextcloud". If Nextcloud is running
  442. * under "https://mycloud.org/" then it would be "/".
  443. *
  444. * Note that the above rule is not valid in every case, as there are some rare setup
  445. * cases where this may not apply. However, to avoid any update problems this
  446. * configuration value is explicitly opt-in.
  447. *
  448. * After setting this value run `occ maintenance:update:htaccess`. Now, when the
  449. * following conditions are met Nextcloud URLs won't contain `index.php`:
  450. *
  451. * - `mod_rewrite` is installed
  452. * - `mod_env` is installed
  453. *
  454. * Defaults to ``''`` (empty string)
  455. */
  456. 'htaccess.RewriteBase' => '/',
  457. /**
  458. * For server setups, that don't have `mod_env` enabled or restricted (e.g. suEXEC)
  459. * this parameter has to be set to true and will assume mod_rewrite.
  460. *
  461. * Please check, if `mod_rewrite` is active and functional before setting this
  462. * parameter and you updated your .htaccess with `occ maintenance:update:htaccess`.
  463. * Otherwise your nextcloud installation might not be reachable anymore.
  464. * For example, try accessing resources by leaving out `index.php` in the URL.
  465. */
  466. 'htaccess.IgnoreFrontController' => false,
  467. /**
  468. * The URL of your proxy server, for example ``proxy.example.com:8081``.
  469. *
  470. * Note: Guzzle (the http library used by Nextcloud) is reading the environment
  471. * variables HTTP_PROXY (only for cli request), HTTPS_PROXY, and NO_PROXY by default.
  472. *
  473. * If you configure proxy with Nextcloud any default configuration by Guzzle
  474. * is overwritten. Make sure to set ``proxyexclude`` accordingly if necessary.
  475. *
  476. * Defaults to ``''`` (empty string)
  477. */
  478. 'proxy' => '',
  479. /**
  480. * The optional authentication for the proxy to use to connect to the internet.
  481. * The format is: ``username:password``.
  482. *
  483. * Defaults to ``''`` (empty string)
  484. */
  485. 'proxyuserpwd' => '',
  486. /**
  487. * List of host names that should not be proxied to.
  488. * For example: ``['.mit.edu', 'foo.com']``.
  489. *
  490. * Hint: Use something like ``explode(',', getenv('NO_PROXY'))`` to sync this
  491. * value with the global NO_PROXY option.
  492. *
  493. * Defaults to empty array.
  494. */
  495. 'proxyexclude' => [],
  496. /**
  497. * Deleted Items (trash bin)
  498. *
  499. * These parameters control the Deleted files app.
  500. */
  501. /**
  502. * If the trash bin app is enabled (default), this setting defines the policy
  503. * for when files and folders in the trash bin will be permanently deleted.
  504. * The app allows for two settings, a minimum time for trash bin retention,
  505. * and a maximum time for trash bin retention.
  506. * Minimum time is the number of days a file will be kept, after which it
  507. * may be deleted. Maximum time is the number of days at which it is guaranteed
  508. * to be deleted.
  509. * Both minimum and maximum times can be set together to explicitly define
  510. * file and folder deletion. For migration purposes, this setting is installed
  511. * initially set to "auto", which is equivalent to the default setting in
  512. * Nextcloud.
  513. *
  514. * Available values:
  515. *
  516. * * ``auto``
  517. * default setting. keeps files and folders in the trash bin for 30 days
  518. * and automatically deletes anytime after that if space is needed (note:
  519. * files may not be deleted if space is not needed).
  520. * * ``D, auto``
  521. * keeps files and folders in the trash bin for D+ days, delete anytime if
  522. * space needed (note: files may not be deleted if space is not needed)
  523. * * ``auto, D``
  524. * delete all files in the trash bin that are older than D days
  525. * automatically, delete other files anytime if space needed
  526. * * ``D1, D2``
  527. * keep files and folders in the trash bin for at least D1 days and
  528. * delete when exceeds D2 days
  529. * * ``disabled``
  530. * trash bin auto clean disabled, files and folders will be kept forever
  531. *
  532. * Defaults to ``auto``
  533. */
  534. 'trashbin_retention_obligation' => 'auto',
  535. /**
  536. * File versions
  537. *
  538. * These parameters control the Versions app.
  539. */
  540. /**
  541. * If the versions app is enabled (default), this setting defines the policy
  542. * for when versions will be permanently deleted.
  543. * The app allows for two settings, a minimum time for version retention,
  544. * and a maximum time for version retention.
  545. * Minimum time is the number of days a version will be kept, after which it
  546. * may be deleted. Maximum time is the number of days at which it is guaranteed
  547. * to be deleted.
  548. * Both minimum and maximum times can be set together to explicitly define
  549. * version deletion. For migration purposes, this setting is installed
  550. * initially set to "auto", which is equivalent to the default setting in
  551. * Nextcloud.
  552. *
  553. * Available values:
  554. *
  555. * * ``auto``
  556. * default setting. Automatically expire versions according to expire
  557. * rules. Please refer to :doc:`../configuration_files/file_versioning` for
  558. * more information.
  559. * * ``D, auto``
  560. * keep versions at least for D days, apply expire rules to all versions
  561. * that are older than D days
  562. * * ``auto, D``
  563. * delete all versions that are older than D days automatically, delete
  564. * other versions according to expire rules
  565. * * ``D1, D2``
  566. * keep versions for at least D1 days and delete when exceeds D2 days
  567. * * ``disabled``
  568. * versions auto clean disabled, versions will be kept forever
  569. *
  570. * Defaults to ``auto``
  571. */
  572. 'versions_retention_obligation' => 'auto',
  573. /**
  574. * Nextcloud Verifications
  575. *
  576. * Nextcloud performs several verification checks. There are two options,
  577. * ``true`` and ``false``.
  578. */
  579. /**
  580. * Checks an app before install whether it uses private APIs instead of the
  581. * proper public APIs. If this is set to true it will only allow to install or
  582. * enable apps that pass this check.
  583. *
  584. * Defaults to ``false``
  585. */
  586. 'appcodechecker' => true,
  587. /**
  588. * Check if Nextcloud is up-to-date and shows a notification if a new version is
  589. * available.
  590. *
  591. * Defaults to ``true``
  592. */
  593. 'updatechecker' => true,
  594. /**
  595. * URL that Nextcloud should use to look for updates
  596. *
  597. * Defaults to ``https://updates.nextcloud.com/updater_server/``
  598. */
  599. 'updater.server.url' => 'https://updates.nextcloud.com/updater_server/',
  600. /**
  601. * The channel that Nextcloud should use to look for updates
  602. *
  603. * Supported values:
  604. * - ``daily``
  605. * - ``beta``
  606. * - ``stable``
  607. */
  608. 'updater.release.channel' => 'stable',
  609. /**
  610. * Is Nextcloud connected to the Internet or running in a closed network?
  611. *
  612. * Defaults to ``true``
  613. */
  614. 'has_internet_connection' => true,
  615. /**
  616. * Which domains to request to determine the availability of an Internet
  617. * connection. If none of these hosts are reachable, the administration panel
  618. * will show a warning. Set to an empty list to not do any such checks (warning
  619. * will still be shown).
  620. *
  621. * Defaults to the following domains:
  622. *
  623. * - www.nextcloud.com
  624. * - www.startpage.com
  625. * - www.eff.org
  626. * - www.edri.org
  627. */
  628. 'connectivity_check_domains' => [
  629. 'www.nextcloud.com',
  630. 'www.startpage.com',
  631. 'www.eff.org',
  632. 'www.edri.org'
  633. ],
  634. /**
  635. * Allows Nextcloud to verify a working .well-known URL redirects. This is done
  636. * by attempting to make a request from JS to
  637. * https://your-domain.com/.well-known/caldav/
  638. *
  639. * Defaults to ``true``
  640. */
  641. 'check_for_working_wellknown_setup' => true,
  642. /**
  643. * This is a crucial security check on Apache servers that should always be set
  644. * to ``true``. This verifies that the ``.htaccess`` file is writable and works.
  645. * If it is not, then any options controlled by ``.htaccess``, such as large
  646. * file uploads, will not work. It also runs checks on the ``data/`` directory,
  647. * which verifies that it can't be accessed directly through the Web server.
  648. *
  649. * Defaults to ``true``
  650. */
  651. 'check_for_working_htaccess' => true,
  652. /**
  653. * In rare setups (e.g. on Openshift or docker on windows) the permissions check
  654. * might block the installation while the underlying system offers no means to
  655. * "correct" the permissions. In this case, set the value to false.
  656. *
  657. * In regular cases, if issues with permissions are encountered they should be
  658. * adjusted accordingly. Changing the flag is discouraged.
  659. *
  660. * Defaults to ``true``
  661. */
  662. 'check_data_directory_permissions' => true,
  663. /**
  664. * In certain environments it is desired to have a read-only configuration file.
  665. * When this switch is set to ``true`` Nextcloud will not verify whether the
  666. * configuration is writable. However, it will not be possible to configure
  667. * all options via the Web interface. Furthermore, when updating Nextcloud
  668. * it is required to make the configuration file writable again for the update
  669. * process.
  670. *
  671. * Defaults to ``false``
  672. */
  673. 'config_is_read_only' => false,
  674. /**
  675. * Logging
  676. */
  677. /**
  678. * This parameter determines where the Nextcloud logs are sent.
  679. * ``file``: the logs are written to file ``nextcloud.log`` in the default
  680. * Nextcloud data directory. The log file can be changed with parameter
  681. * ``logfile``.
  682. * ``syslog``: the logs are sent to the system log. This requires a syslog daemon
  683. * to be active.
  684. * ``errorlog``: the logs are sent to the PHP ``error_log`` function.
  685. * ``systemd``: the logs are sent to the Systemd journal. This requires a system
  686. * that runs Systemd and the Systemd journal. The PHP extension ``systemd``
  687. * must be installed and active.
  688. *
  689. * Defaults to ``file``
  690. */
  691. 'log_type' => 'file',
  692. /**
  693. * Name of the file to which the Nextcloud logs are written if parameter
  694. * ``log_type`` is set to ``file``.
  695. *
  696. * Defaults to ``[datadirectory]/nextcloud.log``
  697. */
  698. 'logfile' => '/var/log/nextcloud.log',
  699. /**
  700. * Log file mode for the Nextcloud loggin type in octal notation.
  701. *
  702. * Defaults to 0640 (writeable by user, readable by group).
  703. */
  704. 'logfilemode' => 0640,
  705. /**
  706. * Loglevel to start logging at. Valid values are: 0 = Debug, 1 = Info, 2 =
  707. * Warning, 3 = Error, and 4 = Fatal. The default value is Warning.
  708. *
  709. * Defaults to ``2``
  710. */
  711. 'loglevel' => 2,
  712. /**
  713. * If you maintain different instances and aggregate the logs, you may want
  714. * to distinguish between them. ``syslog_tag`` can be set per instance
  715. * with a unique id. Only available if ``log_type`` is set to ``syslog`` or
  716. * ``systemd``.
  717. *
  718. * The default value is ``Nextcloud``.
  719. */
  720. 'syslog_tag' => 'Nextcloud',
  721. /**
  722. * Log condition for log level increase based on conditions. Once one of these
  723. * conditions is met, the required log level is set to debug. This allows to
  724. * debug specific requests, users or apps
  725. *
  726. * Supported conditions:
  727. * - ``shared_secret``: if a request parameter with the name `log_secret` is set to
  728. * this value the condition is met
  729. * - ``users``: if the current request is done by one of the specified users,
  730. * this condition is met
  731. * - ``apps``: if the log message is invoked by one of the specified apps,
  732. * this condition is met
  733. *
  734. * Defaults to an empty array.
  735. */
  736. 'log.condition' => [
  737. 'shared_secret' => '57b58edb6637fe3059b3595cf9c41b9',
  738. 'users' => ['sample-user'],
  739. 'apps' => ['files'],
  740. ],
  741. /**
  742. * This uses PHP.date formatting; see http://php.net/manual/en/function.date.php
  743. *
  744. * Defaults to ISO 8601 ``2005-08-15T15:52:01+00:00`` - see \DateTime::ATOM
  745. * (https://secure.php.net/manual/en/class.datetime.php#datetime.constants.atom)
  746. */
  747. 'logdateformat' => 'F d, Y H:i:s',
  748. /**
  749. * The timezone for logfiles. You may change this; see
  750. * http://php.net/manual/en/timezones.php
  751. *
  752. * Defaults to ``UTC``
  753. */
  754. 'logtimezone' => 'Europe/Berlin',
  755. /**
  756. * Append all database queries and parameters to the log file. Use this only for
  757. * debugging, as your logfile will become huge.
  758. */
  759. 'log_query' => false,
  760. /**
  761. * Enables log rotation and limits the total size of logfiles. The default is 0,
  762. * or no rotation. Specify a size in bytes, for example 104857600 (100 megabytes
  763. * = 100 * 1024 * 1024 bytes). A new logfile is created with a new name when the
  764. * old logfile reaches your limit. If a rotated log file is already present, it
  765. * will be overwritten.
  766. *
  767. * Defaults to 100 MB
  768. */
  769. 'log_rotate_size' => 100 * 1024 * 1024,
  770. /**
  771. * Alternate Code Locations
  772. *
  773. * Some of the Nextcloud code may be stored in alternate locations.
  774. */
  775. /**
  776. * This section is for configuring the download links for Nextcloud clients, as
  777. * seen in the first-run wizard and on Personal pages.
  778. *
  779. * Defaults to:
  780. * - Desktop client: ``https://nextcloud.com/install/#install-clients``
  781. * - Android client: ``https://play.google.com/store/apps/details?id=com.nextcloud.client``
  782. * - iOS client: ``https://itunes.apple.com/us/app/nextcloud/id1125420102?mt=8``
  783. * - iOS client app id: ``1125420102``
  784. */
  785. 'customclient_desktop' =>
  786. 'https://nextcloud.com/install/#install-clients',
  787. 'customclient_android' =>
  788. 'https://play.google.com/store/apps/details?id=com.nextcloud.client',
  789. 'customclient_ios' =>
  790. 'https://itunes.apple.com/us/app/nextcloud/id1125420102?mt=8',
  791. 'customclient_ios_appid' =>
  792. '1125420102',
  793. /**
  794. * Apps
  795. *
  796. * Options for the Apps folder, Apps store, and App code checker.
  797. */
  798. /**
  799. * When enabled, admins may install apps from the Nextcloud app store.
  800. *
  801. * Defaults to ``true``
  802. */
  803. 'appstoreenabled' => true,
  804. /**
  805. * Use the ``apps_paths`` parameter to set the location of the Apps directory,
  806. * which should be scanned for available apps, and where user-specific apps
  807. * should be installed from the Apps store. The ``path`` defines the absolute
  808. * file system path to the app folder. The key ``url`` defines the HTTP Web path
  809. * to that folder, starting from the Nextcloud webroot. The key ``writable``
  810. * indicates if a Web server can write files to that folder.
  811. */
  812. 'apps_paths' => [
  813. [
  814. 'path'=> '/var/www/nextcloud/apps',
  815. 'url' => '/apps',
  816. 'writable' => true,
  817. ],
  818. ],
  819. /**
  820. * @see appcodechecker
  821. */
  822. /**
  823. * Previews
  824. *
  825. * Nextcloud supports previews of image files, the covers of MP3 files, and text
  826. * files. These options control enabling and disabling previews, and thumbnail
  827. * size.
  828. */
  829. /**
  830. * By default, Nextcloud can generate previews for the following filetypes:
  831. *
  832. * - Image files
  833. * - Covers of MP3 files
  834. * - Text documents
  835. *
  836. * Valid values are ``true``, to enable previews, or
  837. * ``false``, to disable previews
  838. *
  839. * Defaults to ``true``
  840. */
  841. 'enable_previews' => true,
  842. /**
  843. * The maximum width, in pixels, of a preview. A value of ``null`` means there
  844. * is no limit.
  845. *
  846. * Defaults to ``4096``
  847. */
  848. 'preview_max_x' => 4096,
  849. /**
  850. * The maximum height, in pixels, of a preview. A value of ``null`` means there
  851. * is no limit.
  852. *
  853. * Defaults to ``4096``
  854. */
  855. 'preview_max_y' => 4096,
  856. /**
  857. * max file size for generating image previews with imagegd (default behavior)
  858. * If the image is bigger, it'll try other preview generators, but will most
  859. * likely show the default mimetype icon. Set to -1 for no limit.
  860. *
  861. * Defaults to ``50`` megabytes
  862. */
  863. 'preview_max_filesize_image' => 50,
  864. /**
  865. * custom path for LibreOffice/OpenOffice binary
  866. *
  867. *
  868. * Defaults to ``''`` (empty string)
  869. */
  870. 'preview_libreoffice_path' => '/usr/bin/libreoffice',
  871. /**
  872. * Use this if LibreOffice/OpenOffice requires additional arguments.
  873. *
  874. * Defaults to ``''`` (empty string)
  875. */
  876. 'preview_office_cl_parameters' =>
  877. ' --headless --nologo --nofirststartwizard --invisible --norestore '.
  878. '--convert-to png --outdir ',
  879. /**
  880. * Only register providers that have been explicitly enabled
  881. *
  882. * The following providers are disabled by default due to performance or privacy
  883. * concerns:
  884. *
  885. * - OC\Preview\Illustrator
  886. * - OC\Preview\Movie
  887. * - OC\Preview\MSOffice2003
  888. * - OC\Preview\MSOffice2007
  889. * - OC\Preview\MSOfficeDoc
  890. * - OC\Preview\OpenDocument
  891. * - OC\Preview\PDF
  892. * - OC\Preview\Photoshop
  893. * - OC\Preview\Postscript
  894. * - OC\Preview\StarOffice
  895. * - OC\Preview\SVG
  896. * - OC\Preview\TIFF
  897. * - OC\Preview\Font
  898. *
  899. * The following providers are not available in Microsoft Windows:
  900. *
  901. * - OC\Preview\Movie
  902. * - OC\Preview\MSOfficeDoc
  903. * - OC\Preview\MSOffice2003
  904. * - OC\Preview\MSOffice2007
  905. * - OC\Preview\OpenDocument
  906. * - OC\Preview\StarOffice
  907. *
  908. * Defaults to the following providers:
  909. *
  910. * - OC\Preview\BMP
  911. * - OC\Preview\GIF
  912. * - OC\Preview\HEIC
  913. * - OC\Preview\JPEG
  914. * - OC\Preview\MarkDown
  915. * - OC\Preview\MP3
  916. * - OC\Preview\PNG
  917. * - OC\Preview\TXT
  918. * - OC\Preview\XBitmap
  919. */
  920. 'enabledPreviewProviders' => [
  921. 'OC\Preview\PNG',
  922. 'OC\Preview\JPEG',
  923. 'OC\Preview\GIF',
  924. 'OC\Preview\HEIC',
  925. 'OC\Preview\BMP',
  926. 'OC\Preview\XBitmap',
  927. 'OC\Preview\MP3',
  928. 'OC\Preview\TXT',
  929. 'OC\Preview\MarkDown'
  930. ],
  931. /**
  932. * LDAP
  933. *
  934. * Global settings used by LDAP User and Group Backend
  935. */
  936. /**
  937. * defines the interval in minutes for the background job that checks user
  938. * existence and marks them as ready to be cleaned up. The number is always
  939. * minutes. Setting it to 0 disables the feature.
  940. * See command line (occ) methods ``ldap:show-remnants`` and ``user:delete``
  941. *
  942. * Defaults to ``51`` minutes
  943. */
  944. 'ldapUserCleanupInterval' => 51,
  945. /**
  946. * Sort groups in the user settings by name instead of the user count
  947. *
  948. * By enabling this the user count beside the group name is disabled as well.
  949. */
  950. 'sort_groups_by_name' => false,
  951. /**
  952. * Comments
  953. *
  954. * Global settings for the Comments infrastructure
  955. */
  956. /**
  957. * Replaces the default Comments Manager Factory. This can be utilized if an
  958. * own or 3rdParty CommentsManager should be used that – for instance – uses the
  959. * filesystem instead of the database to keep the comments.
  960. *
  961. * Defaults to ``\OC\Comments\ManagerFactory``
  962. */
  963. 'comments.managerFactory' => '\OC\Comments\ManagerFactory',
  964. /**
  965. * Replaces the default System Tags Manager Factory. This can be utilized if an
  966. * own or 3rdParty SystemTagsManager should be used that – for instance – uses the
  967. * filesystem instead of the database to keep the tags.
  968. *
  969. * Defaults to ``\OC\SystemTag\ManagerFactory``
  970. */
  971. 'systemtags.managerFactory' => '\OC\SystemTag\ManagerFactory',
  972. /**
  973. * Maintenance
  974. *
  975. * These options are for halting user activity when you are performing server
  976. * maintenance.
  977. */
  978. /**
  979. * Enable maintenance mode to disable Nextcloud
  980. *
  981. * If you want to prevent users from logging in to Nextcloud before you start
  982. * doing some maintenance work, you need to set the value of the maintenance
  983. * parameter to true. Please keep in mind that users who are already logged-in
  984. * are kicked out of Nextcloud instantly.
  985. *
  986. * Defaults to ``false``
  987. */
  988. 'maintenance' => false,
  989. /**
  990. * SSL
  991. */
  992. /**
  993. * Extra SSL options to be used for configuration.
  994. *
  995. * Defaults to an empty array.
  996. */
  997. 'openssl' => [
  998. 'config' => '/absolute/location/of/openssl.cnf',
  999. ],
  1000. /**
  1001. * Memory caching backend configuration
  1002. *
  1003. * Available cache backends:
  1004. *
  1005. * * ``\OC\Memcache\APCu`` APC user backend
  1006. * * ``\OC\Memcache\ArrayCache`` In-memory array-based backend (not recommended)
  1007. * * ``\OC\Memcache\Memcached`` Memcached backend
  1008. * * ``\OC\Memcache\Redis`` Redis backend
  1009. *
  1010. * Advice on choosing between the various backends:
  1011. *
  1012. * * APCu should be easiest to install. Almost all distributions have packages.
  1013. * Use this for single user environment for all caches.
  1014. * * Use Redis or Memcached for distributed environments.
  1015. * For the local cache (you can configure two) take APCu.
  1016. */
  1017. /**
  1018. * Memory caching backend for locally stored data
  1019. *
  1020. * * Used for host-specific data, e.g. file paths
  1021. *
  1022. * Defaults to ``none``
  1023. */
  1024. 'memcache.local' => '\OC\Memcache\APCu',
  1025. /**
  1026. * Memory caching backend for distributed data
  1027. *
  1028. * * Used for installation-specific data, e.g. database caching
  1029. * * If unset, defaults to the value of memcache.local
  1030. *
  1031. * Defaults to ``none``
  1032. */
  1033. 'memcache.distributed' => '\OC\Memcache\Memcached',
  1034. /**
  1035. * Connection details for redis to use for memory caching in a single server configuration.
  1036. *
  1037. * For enhanced security it is recommended to configure Redis
  1038. * to require a password. See http://redis.io/topics/security
  1039. * for more information.
  1040. */
  1041. 'redis' => [
  1042. 'host' => 'localhost', // can also be a unix domain socket: '/tmp/redis.sock'
  1043. 'port' => 6379,
  1044. 'timeout' => 0.0,
  1045. 'password' => '', // Optional, if not defined no password will be used.
  1046. 'dbindex' => 0, // Optional, if undefined SELECT will not run and will use Redis Server's default DB Index.
  1047. ],
  1048. /**
  1049. * Connection details for a Redis Cluster
  1050. *
  1051. * Only for use with Redis Clustering, for Sentinel-based setups use the single
  1052. * server configuration above, and perform HA on the hostname.
  1053. *
  1054. * Redis Cluster support requires the php module phpredis in version 3.0.0 or
  1055. * higher.
  1056. *
  1057. * Available failover modes:
  1058. * - \RedisCluster::FAILOVER_NONE - only send commands to master nodes (default)
  1059. * - \RedisCluster::FAILOVER_ERROR - failover to slaves for read commands if master is unavailable (recommended)
  1060. * - \RedisCluster::FAILOVER_DISTRIBUTE - randomly distribute read commands across master and slaves
  1061. *
  1062. * WARNING: FAILOVER_DISTRIBUTE is a not recommended setting and we strongly
  1063. * suggest to not use it if you use Redis for file locking. Due to the way Redis
  1064. * is synchronized it could happen, that the read for an existing lock is
  1065. * scheduled to a slave that is not fully synchronized with the connected master
  1066. * which then causes a FileLocked exception.
  1067. *
  1068. * See https://redis.io/topics/cluster-spec for details about the Redis cluster
  1069. *
  1070. * Authentication works with phpredis version 4.2.1+. See
  1071. * https://github.com/phpredis/phpredis/commit/c5994f2a42b8a348af92d3acb4edff1328ad8ce1
  1072. */
  1073. 'redis.cluster' => [
  1074. 'seeds' => [ // provide some/all of the cluster servers to bootstrap discovery, port required
  1075. 'localhost:7000',
  1076. 'localhost:7001',
  1077. ],
  1078. 'timeout' => 0.0,
  1079. 'read_timeout' => 0.0,
  1080. 'failover_mode' => \RedisCluster::FAILOVER_ERROR,
  1081. 'password' => '', // Optional, if not defined no password will be used.
  1082. ],
  1083. /**
  1084. * Server details for one or more memcached servers to use for memory caching.
  1085. */
  1086. 'memcached_servers' => [
  1087. // hostname, port and optional weight. Also see:
  1088. // http://www.php.net/manual/en/memcached.addservers.php
  1089. // http://www.php.net/manual/en/memcached.addserver.php
  1090. ['localhost', 11211],
  1091. //array('other.host.local', 11211),
  1092. ],
  1093. /**
  1094. * Connection options for memcached
  1095. */
  1096. 'memcached_options' => [
  1097. // Set timeouts to 50ms
  1098. \Memcached::OPT_CONNECT_TIMEOUT => 50,
  1099. \Memcached::OPT_RETRY_TIMEOUT => 50,
  1100. \Memcached::OPT_SEND_TIMEOUT => 50,
  1101. \Memcached::OPT_RECV_TIMEOUT => 50,
  1102. \Memcached::OPT_POLL_TIMEOUT => 50,
  1103. // Enable compression
  1104. \Memcached::OPT_COMPRESSION => true,
  1105. // Turn on consistent hashing
  1106. \Memcached::OPT_LIBKETAMA_COMPATIBLE => true,
  1107. // Enable Binary Protocol
  1108. \Memcached::OPT_BINARY_PROTOCOL => true,
  1109. // Binary serializer vill be enabled if the igbinary PECL module is available
  1110. //\Memcached::OPT_SERIALIZER => \Memcached::SERIALIZER_IGBINARY,
  1111. ],
  1112. /**
  1113. * Location of the cache folder, defaults to ``data/$user/cache`` where
  1114. * ``$user`` is the current user. When specified, the format will change to
  1115. * ``$cache_path/$user`` where ``$cache_path`` is the configured cache directory
  1116. * and ``$user`` is the user.
  1117. *
  1118. * Defaults to ``''`` (empty string)
  1119. */
  1120. 'cache_path' => '',
  1121. /**
  1122. * TTL of chunks located in the cache folder before they're removed by
  1123. * garbage collection (in seconds). Increase this value if users have
  1124. * issues uploading very large files via the Nextcloud Client as upload isn't
  1125. * completed within one day.
  1126. *
  1127. * Defaults to ``60*60*24`` (1 day)
  1128. */
  1129. 'cache_chunk_gc_ttl' => 60*60*24,
  1130. /**
  1131. * Using Object Store with Nextcloud
  1132. */
  1133. /**
  1134. * This example shows how to configure Nextcloud to store all files in a
  1135. * swift object storage.
  1136. *
  1137. * It is important to note that Nextcloud in object store mode will expect
  1138. * exclusive access to the object store container because it only stores the
  1139. * binary data for each file. The metadata is currently kept in the local
  1140. * database for performance reasons.
  1141. *
  1142. * WARNING: The current implementation is incompatible with any app that uses
  1143. * direct file IO and circumvents our virtual filesystem. That includes
  1144. * Encryption and Gallery. Gallery will store thumbnails directly in the
  1145. * filesystem and encryption will cause severe overhead because key files need
  1146. * to be fetched in addition to any requested file.
  1147. *
  1148. * One way to test is applying for a trystack account at http://trystack.org/
  1149. */
  1150. 'objectstore' => [
  1151. 'class' => 'OC\\Files\\ObjectStore\\Swift',
  1152. 'arguments' => [
  1153. // trystack will use your facebook id as the user name
  1154. 'username' => 'facebook100000123456789',
  1155. // in the trystack dashboard go to user -> settings -> API Password to
  1156. // generate a password
  1157. 'password' => 'Secr3tPaSSWoRdt7',
  1158. // must already exist in the objectstore, name can be different
  1159. 'container' => 'nextcloud',
  1160. // prefix to prepend to the fileid, default is 'oid:urn:'
  1161. 'objectPrefix' => 'oid:urn:',
  1162. // create the container if it does not exist. default is false
  1163. 'autocreate' => true,
  1164. // required, dev-/trystack defaults to 'RegionOne'
  1165. 'region' => 'RegionOne',
  1166. // The Identity / Keystone endpoint
  1167. 'url' => 'http://8.21.28.222:5000/v2.0',
  1168. // required on dev-/trystack
  1169. 'tenantName' => 'facebook100000123456789',
  1170. // dev-/trystack uses swift by default, the lib defaults to 'cloudFiles'
  1171. // if omitted
  1172. 'serviceName' => 'swift',
  1173. // The Interface / url Type, optional
  1174. 'urlType' => 'internal'
  1175. ],
  1176. ],
  1177. /**
  1178. * To use swift V3
  1179. */
  1180. 'objectstore' => [
  1181. 'class' => 'OC\\Files\\ObjectStore\\Swift',
  1182. 'arguments' => [
  1183. 'autocreate' => true,
  1184. 'user' => [
  1185. 'name' => 'swift',
  1186. 'password' => 'swift',
  1187. 'domain' => [
  1188. 'name' => 'default',
  1189. ],
  1190. ],
  1191. 'scope' => [
  1192. 'project' => [
  1193. 'name' => 'service',
  1194. 'domain' => [
  1195. 'name' => 'default',
  1196. ],
  1197. ],
  1198. ],
  1199. 'tenantName' => 'service',
  1200. 'serviceName' => 'swift',
  1201. 'region' => 'regionOne',
  1202. 'url' => 'http://yourswifthost:5000/v3',
  1203. 'bucket' => 'nextcloud',
  1204. ],
  1205. ],
  1206. /**
  1207. * Sharing
  1208. *
  1209. * Global settings for Sharing
  1210. */
  1211. /**
  1212. * Replaces the default Share Provider Factory. This can be utilized if
  1213. * own or 3rdParty Share Providers are used that – for instance – use the
  1214. * filesystem instead of the database to keep the share information.
  1215. *
  1216. * Defaults to ``\OC\Share20\ProviderFactory``
  1217. */
  1218. 'sharing.managerFactory' => '\OC\Share20\ProviderFactory',
  1219. /**
  1220. * Define max number of results returned by the user search for auto-completion
  1221. * Default is unlimited (value set to 0).
  1222. */
  1223. 'sharing.maxAutocompleteResults' => 0,
  1224. /**
  1225. * Define the minimum length of the search string before we start auto-completion
  1226. * Default is no limit (value set to 0)
  1227. */
  1228. 'sharing.minSearchStringLength' => 0,
  1229. /**
  1230. * Set to true to enable that internal shares need to be accepted by the users by default.
  1231. * Users can change this for their account in their personal sharing settings
  1232. */
  1233. 'sharing.enable_share_accept' => false,
  1234. /**
  1235. * Set to true to enforce that internal shares need to be accepted
  1236. */
  1237. 'sharing.force_share_accept' => false,
  1238. /**
  1239. * All other configuration options
  1240. */
  1241. /**
  1242. * Additional driver options for the database connection, eg. to enable SSL
  1243. * encryption in MySQL or specify a custom wait timeout on a cheap hoster.
  1244. */
  1245. 'dbdriveroptions' => [
  1246. PDO::MYSQL_ATTR_SSL_CA => '/file/path/to/ca_cert.pem',
  1247. PDO::MYSQL_ATTR_INIT_COMMAND => 'SET wait_timeout = 28800'
  1248. ],
  1249. /**
  1250. * sqlite3 journal mode can be specified using this configuration parameter -
  1251. * can be 'WAL' or 'DELETE' see for more details https://www.sqlite.org/wal.html
  1252. */
  1253. 'sqlite.journal_mode' => 'DELETE',
  1254. /**
  1255. * During setup, if requirements are met (see below), this setting is set to true
  1256. * and MySQL can handle 4 byte characters instead of 3 byte characters.
  1257. *
  1258. * If you want to convert an existing 3-byte setup into a 4-byte setup please
  1259. * set the parameters in MySQL as mentioned below and run the migration command:
  1260. * ./occ db:convert-mysql-charset
  1261. * The config setting will be set automatically after a successful run.
  1262. *
  1263. * Consult the documentation for more details.
  1264. *
  1265. * MySQL requires a special setup for longer indexes (> 767 bytes) which are
  1266. * needed:
  1267. *
  1268. * [mysqld]
  1269. * innodb_large_prefix=ON
  1270. * innodb_file_format=Barracuda
  1271. * innodb_file_per_table=ON
  1272. *
  1273. * Tables will be created with
  1274. * * character set: utf8mb4
  1275. * * collation: utf8mb4_bin
  1276. * * row_format: compressed
  1277. *
  1278. * See:
  1279. * https://dev.mysql.com/doc/refman/5.7/en/charset-unicode-utf8mb4.html
  1280. * https://dev.mysql.com/doc/refman/5.7/en/innodb-parameters.html#sysvar_innodb_large_prefix
  1281. * https://mariadb.com/kb/en/mariadb/xtradbinnodb-server-system-variables/#innodb_large_prefix
  1282. * http://www.tocker.ca/2013/10/31/benchmarking-innodb-page-compression-performance.html
  1283. * http://mechanics.flite.com/blog/2014/07/29/using-innodb-large-prefix-to-avoid-error-1071/
  1284. */
  1285. 'mysql.utf8mb4' => false,
  1286. /**
  1287. * Database types that are supported for installation.
  1288. *
  1289. * Available:
  1290. * - sqlite (SQLite3)
  1291. * - mysql (MySQL)
  1292. * - pgsql (PostgreSQL)
  1293. * - oci (Oracle)
  1294. *
  1295. * Defaults to the following databases:
  1296. * - sqlite (SQLite3)
  1297. * - mysql (MySQL)
  1298. * - pgsql (PostgreSQL)
  1299. */
  1300. 'supportedDatabases' => [
  1301. 'sqlite',
  1302. 'mysql',
  1303. 'pgsql',
  1304. 'oci',
  1305. ],
  1306. /**
  1307. * Override where Nextcloud stores temporary files. Useful in situations where
  1308. * the system temporary directory is on a limited space ramdisk or is otherwise
  1309. * restricted, or if external storages which do not support streaming are in
  1310. * use.
  1311. *
  1312. * The Web server user must have write access to this directory.
  1313. */
  1314. 'tempdirectory' => '/tmp/nextcloudtemp',
  1315. /**
  1316. * Hashing
  1317. */
  1318. /**
  1319. * By default Nextcloud will use the Argon2 password hashing if available.
  1320. * However if for whatever reason you want to stick with the PASSWORD_DEFAULT
  1321. * of your php version. Then set the setting to true.
  1322. */
  1323. 'hashing_default_password' => false,
  1324. /**
  1325. *
  1326. * Nextcloud uses the Argon2 algorithm (with PHP >= 7.2) to create hashes by its
  1327. * own and exposes its configuration options as following. More information can
  1328. * be found at: https://www.php.net/manual/en/function.password-hash.php
  1329. */
  1330. /**
  1331. * The allowed maximum memory in KiB to be used by the algorithm for computing a
  1332. * hash. The smallest possible value is 8. Values that undershoot the minimum
  1333. * will be ignored in favor of the default.
  1334. */
  1335. 'hashingMemoryCost' => PASSWORD_ARGON2_DEFAULT_MEMORY_COST,
  1336. /**
  1337. * The allowed maximum time in seconds that can be used by the algorithm for
  1338. * computing a hash. The value must be an integer, and the minimum value is 1.
  1339. * Values that undershoot the minimum will be ignored in favor of the default.
  1340. */
  1341. 'hashingTimeCost' => PASSWORD_ARGON2_DEFAULT_TIME_COST,
  1342. /**
  1343. * The allowed number of CPU threads that can be used by the algorithm for
  1344. * computing a hash. The value must be an integer, and the minimum value is 1.
  1345. * Rationally it does not help to provide a number higher than the available
  1346. * threads on the machine. Values that undershoot the minimum will be ignored
  1347. * in favor of the default.
  1348. */
  1349. 'hashingThreads' => PASSWORD_ARGON2_DEFAULT_THREADS,
  1350. /**
  1351. * The hashing cost used by hashes generated by Nextcloud
  1352. * Using a higher value requires more time and CPU power to calculate the hashes
  1353. */
  1354. 'hashingCost' => 10,
  1355. /**
  1356. * Blacklist a specific file or files and disallow the upload of files
  1357. * with this name. ``.htaccess`` is blocked by default.
  1358. * WARNING: USE THIS ONLY IF YOU KNOW WHAT YOU ARE DOING.
  1359. *
  1360. * Defaults to ``array('.htaccess')``
  1361. */
  1362. 'blacklisted_files' => ['.htaccess'],
  1363. /**
  1364. * Define a default folder for shared files and folders other than root.
  1365. * Changes to this value will only have effect on new shares.
  1366. *
  1367. * Defaults to ``/``
  1368. */
  1369. 'share_folder' => '/',
  1370. /**
  1371. * If you are applying a theme to Nextcloud, enter the name of the theme here.
  1372. * The default location for themes is ``nextcloud/themes/``.
  1373. *
  1374. * Defaults to the theming app which is shipped since Nextcloud 9
  1375. */
  1376. 'theme' => '',
  1377. /**
  1378. * The default cipher for encrypting files. Currently AES-128-CFB and
  1379. * AES-256-CFB are supported.
  1380. */
  1381. 'cipher' => 'AES-256-CFB',
  1382. /**
  1383. * The minimum Nextcloud desktop client version that will be allowed to sync with
  1384. * this server instance. All connections made from earlier clients will be denied
  1385. * by the server. Defaults to the minimum officially supported Nextcloud desktop
  1386. * clientversion at the time of release of this server version.
  1387. *
  1388. * When changing this, note that older unsupported versions of the Nextcloud desktop
  1389. * client may not function as expected, and could lead to permanent data loss for
  1390. * clients or other unexpected results.
  1391. *
  1392. * Defaults to ``2.0.0``
  1393. */
  1394. 'minimum.supported.desktop.version' => '2.0.0',
  1395. /**
  1396. * EXPERIMENTAL: option whether to include external storage in quota
  1397. * calculation, defaults to false.
  1398. *
  1399. * Defaults to ``false``
  1400. */
  1401. 'quota_include_external_storage' => false,
  1402. /**
  1403. * When an external storage is unavailable for some reasons, it will be flagged
  1404. * as such for 10 minutes. When the trigger is a failed authentication attempt
  1405. * the delay is higher and can be controlled with this option. The motivation
  1406. * is to make account lock outs at Active Directories (and compatible) more
  1407. * unlikely.
  1408. *
  1409. * Defaults to ``1800`` (seconds)
  1410. */
  1411. 'external_storage.auth_availability_delay' => 1800,
  1412. /**
  1413. * Specifies how often the local filesystem (the Nextcloud data/ directory, and
  1414. * NFS mounts in data/) is checked for changes made outside Nextcloud. This
  1415. * does not apply to external storages.
  1416. *
  1417. * 0 -> Never check the filesystem for outside changes, provides a performance
  1418. * increase when it's certain that no changes are made directly to the
  1419. * filesystem
  1420. *
  1421. * 1 -> Check each file or folder at most once per request, recommended for
  1422. * general use if outside changes might happen.
  1423. *
  1424. * Defaults to ``0``
  1425. */
  1426. 'filesystem_check_changes' => 0,
  1427. /**
  1428. * By default Nextcloud will store the part files created during upload in the
  1429. * same storage as the upload target. Setting this to false will store the part
  1430. * files in the root of the users folder which might be required to work with certain
  1431. * external storage setups that have limited rename capabilities.
  1432. *
  1433. * Defaults to ``true``
  1434. */
  1435. 'part_file_in_storage' => true,
  1436. /**
  1437. * Where ``mount.json`` file should be stored, defaults to ``data/mount.json``
  1438. * in the Nextcloud directory.
  1439. *
  1440. * Defaults to ``data/mount.json`` in the Nextcloud directory.
  1441. */
  1442. 'mount_file' => '/var/www/nextcloud/data/mount.json',
  1443. /**
  1444. * When ``true``, prevent Nextcloud from changing the cache due to changes in
  1445. * the filesystem for all storage.
  1446. *
  1447. * Defaults to ``false``
  1448. */
  1449. 'filesystem_cache_readonly' => false,
  1450. /**
  1451. * Secret used by Nextcloud for various purposes, e.g. to encrypt data. If you
  1452. * lose this string there will be data corruption.
  1453. */
  1454. 'secret' => '',
  1455. /**
  1456. * List of trusted proxy servers
  1457. *
  1458. * You may set this to an array containing a combination of
  1459. * - IPv4 addresses, e.g. `192.168.2.123`
  1460. * - IPv4 ranges in CIDR notation, e.g. `192.168.2.0/24`
  1461. * - IPv6 addresses, e.g. `fd9e:21a7:a92c:2323::1`
  1462. *
  1463. * _(CIDR notation for IPv6 is currently work in progress and thus not
  1464. * available as of yet)_
  1465. *
  1466. * When an incoming request's `REMOTE_ADDR` matches any of the IP addresses
  1467. * specified here, it is assumed to be a proxy instead of a client. Thus, the
  1468. * client IP will be read from the HTTP header specified in
  1469. * `forwarded_for_headers` instead of from `REMOTE_ADDR`.
  1470. *
  1471. * So if you configure `trusted_proxies`, also consider setting
  1472. * `forwarded_for_headers` which otherwise defaults to `HTTP_X_FORWARDED_FOR`
  1473. * (the `X-Forwarded-For` header).
  1474. *
  1475. * Defaults to an empty array.
  1476. */
  1477. 'trusted_proxies' => ['203.0.113.45', '198.51.100.128', '192.168.2.0/24'],
  1478. /**
  1479. * Headers that should be trusted as client IP address in combination with
  1480. * `trusted_proxies`. If the HTTP header looks like 'X-Forwarded-For', then use
  1481. * 'HTTP_X_FORWARDED_FOR' here.
  1482. *
  1483. * If set incorrectly, a client can spoof their IP address as visible to
  1484. * Nextcloud, bypassing access controls and making logs useless!
  1485. *
  1486. * Defaults to ``'HTTP_X_FORWARDED_FOR'``
  1487. */
  1488. 'forwarded_for_headers' => ['HTTP_X_FORWARDED', 'HTTP_FORWARDED_FOR'],
  1489. /**
  1490. * max file size for animating gifs on public-sharing-site.
  1491. * If the gif is bigger, it'll show a static preview
  1492. *
  1493. * Value represents the maximum filesize in megabytes. Set to ``-1`` for
  1494. * no limit.
  1495. *
  1496. * Defaults to ``10`` megabytes
  1497. */
  1498. 'max_filesize_animated_gifs_public_sharing' => 10,
  1499. /**
  1500. * Enables transactional file locking.
  1501. * This is enabled by default.
  1502. *
  1503. * Prevents concurrent processes from accessing the same files
  1504. * at the same time. Can help prevent side effects that would
  1505. * be caused by concurrent operations. Mainly relevant for
  1506. * very large installations with many users working with
  1507. * shared files.
  1508. *
  1509. * Defaults to ``true``
  1510. */
  1511. 'filelocking.enabled' => true,
  1512. /**
  1513. * Set the lock's time-to-live in seconds.
  1514. *
  1515. * Any lock older than this will be automatically cleaned up.
  1516. *
  1517. * Defaults to ``60*60`` seconds (1 hour) or the php
  1518. * max_execution_time, whichever is higher.
  1519. */
  1520. 'filelocking.ttl' => 60*60,
  1521. /**
  1522. * Memory caching backend for file locking
  1523. *
  1524. * Because most memcache backends can clean values without warning using redis
  1525. * is highly recommended to *avoid data loss*.
  1526. *
  1527. * Defaults to ``none``
  1528. */
  1529. 'memcache.locking' => '\\OC\\Memcache\\Redis',
  1530. /**
  1531. * Enable locking debug logging
  1532. *
  1533. * Note that this can lead to a very large volume of log items being written which can lead
  1534. * to performance degradation and large log files on busy instance.
  1535. *
  1536. * Thus enabling this in production for longer periods of time is not recommended
  1537. * or should be used together with the ``log.condition`` setting.
  1538. */
  1539. 'filelocking.debug' => false,
  1540. /**
  1541. * Disable the web based updater
  1542. */
  1543. 'upgrade.disable-web' => false,
  1544. /**
  1545. * Set this Nextcloud instance to debugging mode
  1546. *
  1547. * Only enable this for local development and not in production environments
  1548. * This will disable the minifier and outputs some additional debug information
  1549. *
  1550. * Defaults to ``false``
  1551. */
  1552. 'debug' => false,
  1553. /**
  1554. * Sets the data-fingerprint of the current data served
  1555. *
  1556. * This is a property used by the clients to find out if a backup has been
  1557. * restored on the server. Once a backup is restored run
  1558. * ./occ maintenance:data-fingerprint
  1559. * To set this to a new value.
  1560. *
  1561. * Updating/Deleting this value can make connected clients stall until
  1562. * the user has resolved conflicts.
  1563. *
  1564. * Defaults to ``''`` (empty string)
  1565. */
  1566. 'data-fingerprint' => '',
  1567. /**
  1568. * This entry is just here to show a warning in case somebody copied the sample
  1569. * configuration. DO NOT ADD THIS SWITCH TO YOUR CONFIGURATION!
  1570. *
  1571. * If you, brave person, have read until here be aware that you should not
  1572. * modify *ANY* settings in this file without reading the documentation.
  1573. */
  1574. 'copied_sample_config' => true,
  1575. /**
  1576. * use a custom lookup server to publish user data
  1577. */
  1578. 'lookup_server' => 'https://lookup.nextcloud.com',
  1579. /**
  1580. * set to true if the server is used in a setup based on Nextcloud's Global Scale architecture
  1581. */
  1582. 'gs.enabled' => false,
  1583. /**
  1584. * by default federation is only used internally in a Global Scale setup
  1585. * If you want to allow federation outside of your environment set it to 'global'
  1586. */
  1587. 'gs.federation' => 'internal',
  1588. /**
  1589. * List of incompatible user agents opted out from Same Site Cookie Protection.
  1590. * Some user agents are notorious and don't really properly follow HTTP
  1591. * specifications. For those, have an opt-out.
  1592. *
  1593. * WARNING: only use this if you know what you are doing
  1594. */
  1595. 'csrf.optout' => [
  1596. '/^WebDAVFS/', // OS X Finder
  1597. '/^Microsoft-WebDAV-MiniRedir/', // Windows webdav drive
  1598. ],
  1599. /**
  1600. * By default there is on public pages a link shown that allows users to
  1601. * learn about the "simple sign up" - see https://nextcloud.com/signup/
  1602. *
  1603. * If this is set to "false" it will not show the link.
  1604. */
  1605. 'simpleSignUpLink.shown' => true,
  1606. /**
  1607. * By default autocompletion is enabled for the login form on Nextcloud's login page.
  1608. * While this is enabled, browsers are allowed to "remember" login names and such.
  1609. * Some companies require it to be disabled to comply with their security policy.
  1610. *
  1611. * Simply set this property to "false", if you want to turn this feature off.
  1612. */
  1613. 'login_form_autocomplete' => true,
  1614. ];