# vim:set sw=4 ts=4 sts=4 ft=perl expandtab: { #################### # Hypnotoad settings #################### # see http://mojolicio.us/perldoc/Mojo/Server/Hypnotoad for a full list of settings hypnotoad => { # array of IP addresses and ports you want to listen to # you can specify a unix socket too, like 'http+unix://%2Ftmp%2Flufi.sock' listen => ['http://127.0.0.1:__PORT__'], # if you use Lufi behind a reverse proxy like Nginx, you want to set proxy to 1 # if you use Lufi directly, let it commented proxy => 1, # Please read http://mojolicious.org/perldoc/Mojo/Server/Hypnotoad#workers # to adjust this to your server workers => 30, clients => 1, }, # put a way to contact you here and uncomment it # you can put some HTML in it # MANDATORY contact => 'Contact page', # put an URL or an email address to receive file reports and uncomment it # it's for make reporting illegal files easy for users # MANDATORY report => 'webmaster@__DOMAIN__', # array of random strings used to encrypt cookies # optional, default is ['fdjsofjoihrei'], PLEASE, CHANGE IT secrets => ['__SECRET__'], # choose a theme. See the available themes in `themes` directory # optional, default is 'default' #theme => 'default', # length of the random URL # optional, default is 8 #length => 8, # how many URLs will be provisioned in a batch ? # optional, default is 5 #provis_step => 5, # max number of URLs to be provisioned # optional, default is 100 #provisioning => 100, # length of the modify/delete token # optional, default is 32 #token_length => 32, # max file size, in octets # you can write it 100*1024*1024 # optional, no default max_file_size => __MAX_FILE_SIZE__*1024*1024, # if you want to have piwik statistics, provide a piwik image tracker # only the image tracker is allowed, no javascript # optional, no default #piwik_img => 'https://piwik.example.org/piwik.php?idsite=1&rec=1', # broadcast_message which will displayed on the index page # optional, no default #broadcast_message => 'Maintenance', # default time limit for files # valid values are 0, 1, 7, 30 and 365 # optional, default is 0 (no limit) default_delay => 365, # number of days after which the images will be deleted, even if they were uploaded with "no delay" (or value superior to max_delay) # a warning message will be displayed on homepage # optional, default is 0 (no limit) #max_delay => 0, # size thresholds: if you want to define max delays for different sizes of file # the keys are size in Bytes, you can't have 10*1000*10000 as key # if a file is smaller than the smallest configured size, it will have a expiration delay of max_delay (see above) # optional, default is using max_delay (see above) for all sizes #delay_for_size => { # 10000000 => 90, # between 10MB and 50MB => max is 90 days, less than 10MB => max is max_delay (see above) # 50000000 => 60, # between 50MB ans 1GB => max is 60 days # 1000000000 => 2, # more than 1GB => max is 2 days #}, # URL sub-directory in which you want Lufi to be accessible # example: you want to have Lufi under https://example.org/lufi/ # => set prefix to '/lufi' or to '/lufi/', it doesn't matter # optional, defaut is / prefix => '__PATH__', # array of authorized domains for API calls. # if you want to authorize everyone to use the API: ['*'] # optional, no domains allowed by default #allowed_domains => ['http://1.example.com', 'http://2.example.com'], # if set, the shortened URLs will use this domain # optional #fixed_domain => 'example.org', # Mail configuration # See https://metacpan.org/pod/Mojolicious::Plugin::Mail#EXAMPLES # Optional, default to sendmail method with no arguments #mail => { # # Valid values are 'sendmail' and 'smtp' # how => 'smtp', # howargs => ['smtp.example.org'] #}, # Email sender address # Optional, default to no-reply@lufi.io #mail_sender => 'no-reply@lufi.io', # choose what database you want to use # valid choices are sqlite, postgresql and mysql (all lowercase) # optional, default is sqlite dbtype => 'postgresql', # SQLite ONLY - only used if dbtype is set to sqlite # define a path to the SQLite database # you can define it relative to lufi directory or set an absolute path # remember that it has to be in a directory writable by Lufi user # optional, default is lufi.db #db_path => 'lufi.db', # PostgreSQL ONLY - only used if dbtype is set to postgresql # these are the credentials to access the PostgreSQL database # mandatory if you choosed postgresql as dbtype pgdb => { database => '__DB_NAME__', host => 'localhost', # optional, default is 5432 #port => 5432, user => '__DB_USER__', pwd => '__DB_PWD__', # https://mojolicious.org/perldoc/Mojo/Pg#max_connections # optional, default is 1 #max_connections => 1, }, # MySQL ONLY - only used if dbtype is set to mysql # these are the credentials to access the MySQL database # mandatory if you choosed mysql as dbtype #mysqldb => { # database => 'lufi', # host => 'localhost', # # optional, default is 3306 # #port => 3306, # user => 'DBUSER', # pwd => 'DBPASSWORD', # # https://metacpan.org/pod/Mojo::mysql#max_connections # # optional, default is 5 (set to 0 to disable persistent connections) # #max_connections => 5, #}, # define a path to the upload directory, where the uploaded files will be stored # you can define it relative to lufi directory or set an absolute path # remember that it has to be in a directory writable by Lufi user # DO NOT CHANGE THIS IF FILES HAVE BEEN ALREADY UPLOADED: THEY WILL NOT BE DOWNLOADABLE ANYMORE # optional, default is 'files' #upload_dir => 'files', # set `ldap` if you want that only authenticated users can upload files # please note that everybody can still download files # optional, no default __IS_PUBLIC__ldap => { __IS_PUBLIC__ uri => 'ldap://localhost:389', # server URI __IS_PUBLIC__ user_tree => 'dc=yunohost,dc=org', # search base DN __IS_PUBLIC__ bind_dn => 'ou=users,dc=yunohost,dc=org', # search bind DN __IS_PUBLIC__ #bind_pwd => 'secr3t', # search bind password __IS_PUBLIC__ user_attr => 'uid', # user attribute (uid, mail, sAMAccountName, etc.) __IS_PUBLIC__ #user_filter => '(!(uid=ldap_user))', # user filter (to exclude some users, etc.) __IS_PUBLIC__ # optional start_tls configuration. See https://metacpan.org/pod/distribution/perl-ldap/lib/Net/LDAP.pod#start_tls __IS_PUBLIC__ # don't set or uncomment if you don't want to configure it __IS_PUBLIC__ #start_tls => { __IS_PUBLIC__ # verify => 'optional', __IS_PUBLIC__ # clientcert => '/etc/ssl/certs/ca-bundle.pem' __IS_PUBLIC__ #} __IS_PUBLIC__}, # set `htpasswd` if you want to use an htpasswd file instead of ldap # see 'man htpasswd' to know how to create such file #htpasswd => 'lufi.passwd', # if you've set ldap above, the session will last `session_duration` seconds before # the user needs to reauthenticate # optional, default is 3600 #session_duration => 3600, # allow to add a password on files, asked before allowing to download files # optional, default is 0 allow_pwd_on_files => 1, # force all files to be in "Burn after reading mode" # optional, default is 0 #force_burn_after_reading => 0, # if set, the files' URLs will always use this domain # optional, no default #fixed_domain => 'example.org', # abuse reasons # set an integer in the abuse field of a file in the database and it will not be downloadable anymore # the reason will be displayed to the downloader, according to the reasons you will configure here. # optional, no default #abuse => { # 0 => 'Copyright infringment', # 1 => 'Illegal content', #}, # Content-Security-Policy header that will be sent by Lufi # Set to '' to disable CSP header # https://content-security-policy.com/ provides a good documentation about CSP. # https://report-uri.com/home/generate provides a tool to generate a CSP header. # optional, default is "base-uri 'self'; connect-src 'self' ws://YOUR_HOST; default-src 'none'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' blob:; media-src blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'" #csp => "", # X-Frame-Options header that will be sent by Lufi # Valid values are: 'DENY', 'SAMEORIGIN', 'ALLOW-FROM https://example.com/' # Set to '' to disable X-Frame-Options header # See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options # Please note that this will add a "frame-ancestors" directive to the CSP header (see above) accordingly # to the chosen setting (See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors) # optional, default is 'DENY' #x_frame_options => 'DENY', # X-Content-Type-Options that will be sent by Lufi # See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options # Set to '' to disable X-Content-Type-Options header # optional, default is 'nosniff' #x_content_type_options => 'nosniff', # X-XSS-Protection that will be sent by Lufi # See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection # Set to '' to disable X-XSS-Protection header # optional, default is '1; mode=block' #x_xss_protection => '1; mode=block', ######################### # Lufi cron jobs settings ######################### # number of days senders' IP addresses are kept in database # after that delay, they will be deleted from database (used with script/lufi cron cleanbdd) # optional, default is 365 #keep_ip_during => 365, # max size of the files directory, in octets # used by script/lufi cron watch to trigger an action # optional, no default #max_total_size => 10*1024*1024*1024, # default action when files directory is over max_total_size (used with script/lufi cron watch) # valid values are 'warn', 'stop-upload' and 'delete' # please, see readme # optional, default is 'warn' #policy_when_full => 'warn', # images which are not viewed since delete_no_longer_viewed_files days will be deleted by the cron cleanfiles task # if delete_no_longer_viewed_files is not set, the no longer viewed files will NOT be deleted # optional, no default #delete_no_longer_viewed_files => 90, };