Merge remote-tracking branch 'remotes/origin/develop' into 2168-media-preview-proxy
[akkoma] / config / config.exs
1 # .i;;;;i.
2 # iYcviii;vXY:
3 # .YXi .i1c.
4 # .YC. . in7.
5 # .vc. ...... ;1c.
6 # i7, .. .;1;
7 # i7, .. ... .Y1i
8 # ,7v .6MMM@; .YX,
9 # .7;. ..IMMMMMM1 :t7.
10 # .;Y. ;$MMMMMM9. :tc.
11 # vY. .. .nMMM@MMU. ;1v.
12 # i7i ... .#MM@M@C. .....:71i
13 # it: .... $MMM@9;.,i;;;i,;tti
14 # :t7. ..... 0MMMWv.,iii:::,,;St.
15 # .nC. ..... IMMMQ..,::::::,.,czX.
16 # .ct: ....... .ZMMMI..,:::::::,,:76Y.
17 # c2: ......,i..Y$M@t..:::::::,,..inZY
18 # vov ......:ii..c$MBc..,,,,,,,,,,..iI9i
19 # i9Y ......iii:..7@MA,..,,,,,,,,,....;AA:
20 # iIS. ......:ii::..;@MI....,............;Ez.
21 # .I9. ......:i::::...8M1..................C0z.
22 # .z9; ......:i::::,.. .i:...................zWX.
23 # vbv ......,i::::,,. ................. :AQY
24 # c6Y. .,...,::::,,..:t0@@QY. ................ :8bi
25 # :6S. ..,,...,:::,,,..EMMMMMMI. ............... .;bZ,
26 # :6o, .,,,,..:::,,,..i#MMMMMM#v................. YW2.
27 # .n8i ..,,,,,,,::,,,,.. tMMMMM@C:.................. .1Wn
28 # 7Uc. .:::,,,,,::,,,,.. i1t;,..................... .UEi
29 # 7C...::::::::::::,,,,.. .................... vSi.
30 # ;1;...,,::::::,......... .................. Yz:
31 # v97,......... .voC.
32 # izAotX7777777777777777777777777777777777777777Y7n92:
33 # .;CoIIIIIUAA666666699999ZZZZZZZZZZZZZZZZZZZZ6ov.
34 #
35 # !!! ATTENTION !!!
36 # DO NOT EDIT THIS FILE! THIS FILE CONTAINS THE DEFAULT VALUES FOR THE CON-
37 # FIGURATION! EDIT YOUR SECRET FILE (either prod.secret.exs, dev.secret.exs).
38 #
39 # This file is responsible for configuring your application
40 # and its dependencies with the aid of the Mix.Config module.
41 #
42 # This configuration file is loaded before any dependency and
43 # is restricted to this project.
44 use Mix.Config
45
46 # General application configuration
47 config :pleroma, ecto_repos: [Pleroma.Repo]
48
49 config :pleroma, Pleroma.Repo,
50 types: Pleroma.PostgresTypes,
51 telemetry_event: [Pleroma.Repo.Instrumenter],
52 migration_lock: nil
53
54 config :pleroma, Pleroma.Captcha,
55 enabled: true,
56 seconds_valid: 300,
57 method: Pleroma.Captcha.Native
58
59 config :pleroma, Pleroma.Captcha.Kocaptcha, endpoint: "https://captcha.kotobank.ch"
60
61 # Upload configuration
62 config :pleroma, Pleroma.Upload,
63 uploader: Pleroma.Uploaders.Local,
64 filters: [Pleroma.Upload.Filter.Dedupe],
65 link_name: false,
66 proxy_remote: false,
67 proxy_opts: [
68 redirect_on_failure: false,
69 max_body_length: 25 * 1_048_576,
70 http: [
71 follow_redirect: true,
72 pool: :upload
73 ]
74 ],
75 filename_display_max_length: 30
76
77 config :pleroma, Pleroma.Uploaders.Local, uploads: "uploads"
78
79 config :pleroma, Pleroma.Uploaders.S3,
80 bucket: nil,
81 streaming_enabled: true,
82 public_endpoint: "https://s3.amazonaws.com"
83
84 config :pleroma, :emoji,
85 shortcode_globs: ["/emoji/custom/**/*.png"],
86 pack_extensions: [".png", ".gif"],
87 groups: [
88 Custom: ["/emoji/*.png", "/emoji/**/*.png"]
89 ],
90 default_manifest: "https://git.pleroma.social/pleroma/emoji-index/raw/master/index.json",
91 shared_pack_cache_seconds_per_file: 60
92
93 config :pleroma, :uri_schemes,
94 valid_schemes: [
95 "https",
96 "http",
97 "dat",
98 "dweb",
99 "gopher",
100 "hyper",
101 "ipfs",
102 "ipns",
103 "irc",
104 "ircs",
105 "magnet",
106 "mailto",
107 "mumble",
108 "ssb",
109 "xmpp"
110 ]
111
112 websocket_config = [
113 path: "/websocket",
114 serializer: [
115 {Phoenix.Socket.V1.JSONSerializer, "~> 1.0.0"},
116 {Phoenix.Socket.V2.JSONSerializer, "~> 2.0.0"}
117 ],
118 timeout: 60_000,
119 transport_log: false,
120 compress: false
121 ]
122
123 # Configures the endpoint
124 config :pleroma, Pleroma.Web.Endpoint,
125 instrumenters: [Pleroma.Web.Endpoint.Instrumenter],
126 url: [host: "localhost"],
127 http: [
128 ip: {127, 0, 0, 1},
129 dispatch: [
130 {:_,
131 [
132 {"/api/v1/streaming", Pleroma.Web.MastodonAPI.WebsocketHandler, []},
133 {"/websocket", Phoenix.Endpoint.CowboyWebSocket,
134 {Phoenix.Transports.WebSocket,
135 {Pleroma.Web.Endpoint, Pleroma.Web.UserSocket, websocket_config}}},
136 {:_, Phoenix.Endpoint.Cowboy2Handler, {Pleroma.Web.Endpoint, []}}
137 ]}
138 ]
139 ],
140 protocol: "https",
141 secret_key_base: "aK4Abxf29xU9TTDKre9coZPUgevcVCFQJe/5xP/7Lt4BEif6idBIbjupVbOrbKxl",
142 signing_salt: "CqaoopA2",
143 render_errors: [view: Pleroma.Web.ErrorView, accepts: ~w(json)],
144 pubsub: [name: Pleroma.PubSub, adapter: Phoenix.PubSub.PG2],
145 secure_cookie_flag: true,
146 extra_cookie_attrs: [
147 "SameSite=Lax"
148 ]
149
150 # Configures Elixir's Logger
151 config :logger, :console,
152 level: :debug,
153 format: "\n$time $metadata[$level] $message\n",
154 metadata: [:request_id]
155
156 config :logger, :ex_syslogger,
157 level: :debug,
158 ident: "pleroma",
159 format: "$metadata[$level] $message",
160 metadata: [:request_id]
161
162 config :quack,
163 level: :warn,
164 meta: [:all],
165 webhook_url: "https://hooks.slack.com/services/YOUR-KEY-HERE"
166
167 config :mime, :types, %{
168 "application/xml" => ["xml"],
169 "application/xrd+xml" => ["xrd+xml"],
170 "application/jrd+json" => ["jrd+json"],
171 "application/activity+json" => ["activity+json"],
172 "application/ld+json" => ["activity+json"]
173 }
174
175 config :tesla, adapter: Tesla.Adapter.Gun
176
177 # Configures http settings, upstream proxy etc.
178 config :pleroma, :http,
179 proxy_url: nil,
180 send_user_agent: true,
181 user_agent: :default,
182 adapter: []
183
184 config :pleroma, :instance,
185 name: "Pleroma",
186 email: "example@example.com",
187 notify_email: "noreply@example.com",
188 description: "Pleroma: An efficient and flexible fediverse server",
189 background_image: "/images/city.jpg",
190 instance_thumbnail: "/instance/thumbnail.jpeg",
191 limit: 5_000,
192 description_limit: 5_000,
193 chat_limit: 5_000,
194 remote_limit: 100_000,
195 upload_limit: 16_000_000,
196 avatar_upload_limit: 2_000_000,
197 background_upload_limit: 4_000_000,
198 banner_upload_limit: 4_000_000,
199 poll_limits: %{
200 max_options: 20,
201 max_option_chars: 200,
202 min_expiration: 0,
203 max_expiration: 365 * 24 * 60 * 60
204 },
205 registrations_open: true,
206 invites_enabled: false,
207 account_activation_required: false,
208 federating: true,
209 federation_incoming_replies_max_depth: 100,
210 federation_reachability_timeout_days: 7,
211 federation_publisher_modules: [
212 Pleroma.Web.ActivityPub.Publisher
213 ],
214 allow_relay: true,
215 public: true,
216 quarantined_instances: [],
217 managed_config: true,
218 static_dir: "instance/static/",
219 allowed_post_formats: [
220 "text/plain",
221 "text/html",
222 "text/markdown",
223 "text/bbcode"
224 ],
225 autofollowed_nicknames: [],
226 max_pinned_statuses: 1,
227 attachment_links: false,
228 welcome_user_nickname: nil,
229 welcome_message: nil,
230 max_report_comment_size: 1000,
231 safe_dm_mentions: false,
232 healthcheck: false,
233 remote_post_retention_days: 90,
234 skip_thread_containment: true,
235 limit_to_local_content: :unauthenticated,
236 user_bio_length: 5000,
237 user_name_length: 100,
238 max_account_fields: 10,
239 max_remote_account_fields: 20,
240 account_field_name_length: 512,
241 account_field_value_length: 2048,
242 external_user_synchronization: true,
243 extended_nickname_format: true,
244 cleanup_attachments: false,
245 multi_factor_authentication: [
246 totp: [
247 # digits 6 or 8
248 digits: 6,
249 period: 30
250 ],
251 backup_codes: [
252 number: 5,
253 length: 16
254 ]
255 ]
256
257 config :pleroma, :feed,
258 post_title: %{
259 max_length: 100,
260 omission: "..."
261 }
262
263 config :pleroma, :markup,
264 # XXX - unfortunately, inline images must be enabled by default right now, because
265 # of custom emoji. Issue #275 discusses defanging that somehow.
266 allow_inline_images: true,
267 allow_headings: false,
268 allow_tables: false,
269 allow_fonts: false,
270 scrub_policy: [
271 Pleroma.HTML.Scrubber.Default,
272 Pleroma.HTML.Transform.MediaProxy
273 ]
274
275 config :pleroma, :frontend_configurations,
276 pleroma_fe: %{
277 alwaysShowSubjectInput: true,
278 background: "/images/city.jpg",
279 collapseMessageWithSubject: false,
280 disableChat: false,
281 greentext: false,
282 hideFilteredStatuses: false,
283 hideMutedPosts: false,
284 hidePostStats: false,
285 hideSitename: false,
286 hideUserStats: false,
287 loginMethod: "password",
288 logo: "/static/logo.png",
289 logoMargin: ".1em",
290 logoMask: true,
291 minimalScopesMode: false,
292 noAttachmentLinks: false,
293 nsfwCensorImage: "",
294 postContentType: "text/plain",
295 redirectRootLogin: "/main/friends",
296 redirectRootNoLogin: "/main/all",
297 scopeCopy: true,
298 sidebarRight: false,
299 showFeaturesPanel: true,
300 showInstanceSpecificPanel: false,
301 subjectLineBehavior: "email",
302 theme: "pleroma-dark",
303 webPushNotifications: false
304 },
305 masto_fe: %{
306 showInstanceSpecificPanel: true
307 }
308
309 config :pleroma, :assets,
310 mascots: [
311 pleroma_fox_tan: %{
312 url: "/images/pleroma-fox-tan-smol.png",
313 mime_type: "image/png"
314 },
315 pleroma_fox_tan_shy: %{
316 url: "/images/pleroma-fox-tan-shy.png",
317 mime_type: "image/png"
318 }
319 ],
320 default_mascot: :pleroma_fox_tan
321
322 config :pleroma, :manifest,
323 icons: [
324 %{
325 src: "/static/logo.png",
326 type: "image/png"
327 }
328 ],
329 theme_color: "#282c37",
330 background_color: "#191b22"
331
332 config :pleroma, :activitypub,
333 unfollow_blocked: true,
334 outgoing_blocks: true,
335 follow_handshake_timeout: 500,
336 note_replies_output_limit: 5,
337 sign_object_fetches: true,
338 authorized_fetch_mode: false
339
340 config :pleroma, :streamer,
341 workers: 3,
342 overflow_workers: 2
343
344 config :pleroma, :user, deny_follow_blocked: true
345
346 config :pleroma, :mrf_normalize_markup, scrub_policy: Pleroma.HTML.Scrubber.Default
347
348 config :pleroma, :mrf_rejectnonpublic,
349 allow_followersonly: false,
350 allow_direct: false
351
352 config :pleroma, :mrf_hellthread,
353 delist_threshold: 10,
354 reject_threshold: 20
355
356 config :pleroma, :mrf_simple,
357 media_removal: [],
358 media_nsfw: [],
359 federated_timeline_removal: [],
360 report_removal: [],
361 reject: [],
362 accept: [],
363 avatar_removal: [],
364 banner_removal: [],
365 reject_deletes: []
366
367 config :pleroma, :mrf_keyword,
368 reject: [],
369 federated_timeline_removal: [],
370 replace: []
371
372 config :pleroma, :mrf_subchain, match_actor: %{}
373
374 config :pleroma, :mrf_activity_expiration, days: 365
375
376 config :pleroma, :mrf_vocabulary,
377 accept: [],
378 reject: []
379
380 config :pleroma, :mrf_object_age,
381 threshold: 172_800,
382 actions: [:delist, :strip_followers]
383
384 config :pleroma, :rich_media,
385 enabled: true,
386 ignore_hosts: [],
387 ignore_tld: ["local", "localdomain", "lan"],
388 parsers: [
389 Pleroma.Web.RichMedia.Parsers.TwitterCard,
390 Pleroma.Web.RichMedia.Parsers.OEmbed
391 ],
392 ttl_setters: [Pleroma.Web.RichMedia.Parser.TTL.AwsSignedUrl]
393
394 config :pleroma, :media_proxy,
395 enabled: false,
396 invalidation: [
397 enabled: false,
398 provider: Pleroma.Web.MediaProxy.Invalidation.Script
399 ],
400 proxy_opts: [
401 redirect_on_failure: false,
402 max_body_length: 25 * 1_048_576,
403 # Note: max_read_duration defaults to Pleroma.ReverseProxy.max_read_duration_default/1
404 max_read_duration: 30_000,
405 http: [
406 follow_redirect: true,
407 pool: :media
408 ]
409 ],
410 whitelist: []
411
412 config :pleroma, Pleroma.Web.MediaProxy.Invalidation.Http,
413 method: :purge,
414 headers: [],
415 options: []
416
417 config :pleroma, Pleroma.Web.MediaProxy.Invalidation.Script, script_path: nil
418
419 # Note: media preview proxy depends on media proxy to be enabled
420 config :pleroma, :media_preview_proxy,
421 enabled: false,
422 thumbnail_max_width: 400,
423 thumbnail_max_height: 200,
424 proxy_opts: [
425 head_request_max_read_duration: 5_000,
426 max_read_duration: 10_000
427 ]
428
429 config :pleroma, :chat, enabled: true
430
431 config :phoenix, :format_encoders, json: Jason
432
433 config :phoenix, :json_library, Jason
434
435 config :phoenix, :filter_parameters, ["password", "confirm"]
436
437 config :pleroma, :gopher,
438 enabled: false,
439 ip: {0, 0, 0, 0},
440 port: 9999
441
442 config :pleroma, Pleroma.Web.Metadata,
443 providers: [
444 Pleroma.Web.Metadata.Providers.OpenGraph,
445 Pleroma.Web.Metadata.Providers.TwitterCard,
446 Pleroma.Web.Metadata.Providers.RelMe,
447 Pleroma.Web.Metadata.Providers.Feed
448 ],
449 unfurl_nsfw: false
450
451 config :pleroma, Pleroma.Web.Preload,
452 providers: [
453 Pleroma.Web.Preload.Providers.Instance
454 ]
455
456 config :pleroma, :http_security,
457 enabled: true,
458 sts: false,
459 sts_max_age: 31_536_000,
460 ct_max_age: 2_592_000,
461 referrer_policy: "same-origin"
462
463 config :cors_plug,
464 max_age: 86_400,
465 methods: ["POST", "PUT", "DELETE", "GET", "PATCH", "OPTIONS"],
466 expose: [
467 "Link",
468 "X-RateLimit-Reset",
469 "X-RateLimit-Limit",
470 "X-RateLimit-Remaining",
471 "X-Request-Id",
472 "Idempotency-Key"
473 ],
474 credentials: true,
475 headers: ["Authorization", "Content-Type", "Idempotency-Key"]
476
477 config :pleroma, Pleroma.User,
478 restricted_nicknames: [
479 ".well-known",
480 "~",
481 "about",
482 "activities",
483 "api",
484 "auth",
485 "check_password",
486 "dev",
487 "friend-requests",
488 "inbox",
489 "internal",
490 "main",
491 "media",
492 "nodeinfo",
493 "notice",
494 "oauth",
495 "objects",
496 "ostatus_subscribe",
497 "pleroma",
498 "proxy",
499 "push",
500 "registration",
501 "relay",
502 "settings",
503 "status",
504 "tag",
505 "user-search",
506 "user_exists",
507 "users",
508 "web"
509 ]
510
511 config :pleroma, Oban,
512 repo: Pleroma.Repo,
513 log: false,
514 queues: [
515 activity_expiration: 10,
516 federator_incoming: 50,
517 federator_outgoing: 50,
518 web_push: 50,
519 mailer: 10,
520 transmogrifier: 20,
521 scheduled_activities: 10,
522 background: 5,
523 remote_fetcher: 2,
524 attachments_cleanup: 5,
525 new_users_digest: 1
526 ],
527 plugins: [Oban.Plugins.Pruner],
528 crontab: [
529 {"0 0 * * *", Pleroma.Workers.Cron.ClearOauthTokenWorker},
530 {"0 * * * *", Pleroma.Workers.Cron.StatsWorker},
531 {"* * * * *", Pleroma.Workers.Cron.PurgeExpiredActivitiesWorker},
532 {"0 0 * * 0", Pleroma.Workers.Cron.DigestEmailsWorker},
533 {"0 0 * * *", Pleroma.Workers.Cron.NewUsersDigestWorker}
534 ]
535
536 config :pleroma, :workers,
537 retries: [
538 federator_incoming: 5,
539 federator_outgoing: 5
540 ]
541
542 config :auto_linker,
543 opts: [
544 extra: true,
545 # TODO: Set to :no_scheme when it works properly
546 validate_tld: true,
547 class: false,
548 strip_prefix: false,
549 new_window: false,
550 rel: "ugc"
551 ]
552
553 config :pleroma, :ldap,
554 enabled: System.get_env("LDAP_ENABLED") == "true",
555 host: System.get_env("LDAP_HOST") || "localhost",
556 port: String.to_integer(System.get_env("LDAP_PORT") || "389"),
557 ssl: System.get_env("LDAP_SSL") == "true",
558 sslopts: [],
559 tls: System.get_env("LDAP_TLS") == "true",
560 tlsopts: [],
561 base: System.get_env("LDAP_BASE") || "dc=example,dc=com",
562 uid: System.get_env("LDAP_UID") || "cn"
563
564 config :esshd,
565 enabled: false
566
567 oauth_consumer_strategies =
568 System.get_env("OAUTH_CONSUMER_STRATEGIES")
569 |> to_string()
570 |> String.split()
571 |> Enum.map(&hd(String.split(&1, ":")))
572
573 ueberauth_providers =
574 for strategy <- oauth_consumer_strategies do
575 strategy_module_name = "Elixir.Ueberauth.Strategy.#{String.capitalize(strategy)}"
576 strategy_module = String.to_atom(strategy_module_name)
577 {String.to_atom(strategy), {strategy_module, [callback_params: ["state"]]}}
578 end
579
580 config :ueberauth,
581 Ueberauth,
582 base_path: "/oauth",
583 providers: ueberauth_providers
584
585 config :pleroma,
586 :auth,
587 enforce_oauth_admin_scope_usage: true,
588 oauth_consumer_strategies: oauth_consumer_strategies
589
590 config :pleroma, Pleroma.Emails.Mailer, adapter: Swoosh.Adapters.Sendmail, enabled: false
591
592 config :pleroma, Pleroma.Emails.UserEmail,
593 logo: nil,
594 styling: %{
595 link_color: "#d8a070",
596 background_color: "#2C3645",
597 content_background_color: "#1B2635",
598 header_color: "#d8a070",
599 text_color: "#b9b9ba",
600 text_muted_color: "#b9b9ba"
601 }
602
603 config :pleroma, Pleroma.Emails.NewUsersDigestEmail, enabled: false
604
605 config :prometheus, Pleroma.Web.Endpoint.MetricsExporter, path: "/api/pleroma/app_metrics"
606
607 config :pleroma, Pleroma.ScheduledActivity,
608 daily_user_limit: 25,
609 total_user_limit: 300,
610 enabled: true
611
612 config :pleroma, :email_notifications,
613 digest: %{
614 active: false,
615 interval: 7,
616 inactivity_threshold: 7
617 }
618
619 config :pleroma, :oauth2,
620 token_expires_in: 600,
621 issue_new_refresh_token: true,
622 clean_expired_tokens: false
623
624 config :pleroma, :database, rum_enabled: false
625
626 config :pleroma, :env, Mix.env()
627
628 config :http_signatures,
629 adapter: Pleroma.Signature
630
631 config :pleroma, :rate_limit,
632 authentication: {60_000, 15},
633 timeline: {500, 3},
634 search: [{1000, 10}, {1000, 30}],
635 app_account_creation: {1_800_000, 25},
636 relations_actions: {10_000, 10},
637 relation_id_action: {60_000, 2},
638 statuses_actions: {10_000, 15},
639 status_id_action: {60_000, 3},
640 password_reset: {1_800_000, 5},
641 account_confirmation_resend: {8_640_000, 5},
642 ap_routes: {60_000, 15}
643
644 config :pleroma, Pleroma.ActivityExpiration, enabled: true
645
646 config :pleroma, Pleroma.Plugs.RemoteIp, enabled: true
647
648 config :pleroma, :static_fe, enabled: false
649
650 config :pleroma, :web_cache_ttl,
651 activity_pub: nil,
652 activity_pub_question: 30_000
653
654 config :pleroma, :modules, runtime_dir: "instance/modules"
655
656 config :pleroma, configurable_from_database: false
657
658 config :pleroma, Pleroma.Repo,
659 parameters: [gin_fuzzy_search_limit: "500"],
660 prepare: :unnamed
661
662 config :pleroma, :connections_pool,
663 reclaim_multiplier: 0.1,
664 connection_acquisition_wait: 250,
665 connection_acquisition_retries: 5,
666 max_connections: 250,
667 max_idle_time: 30_000,
668 retry: 0,
669 await_up_timeout: 5_000
670
671 config :pleroma, :pools,
672 federation: [
673 size: 50,
674 max_waiting: 10
675 ],
676 media: [
677 size: 50,
678 max_waiting: 10
679 ],
680 upload: [
681 size: 25,
682 max_waiting: 5
683 ],
684 default: [
685 size: 10,
686 max_waiting: 2
687 ]
688
689 config :pleroma, :hackney_pools,
690 federation: [
691 max_connections: 50,
692 timeout: 150_000
693 ],
694 media: [
695 max_connections: 50,
696 timeout: 150_000
697 ],
698 upload: [
699 max_connections: 25,
700 timeout: 300_000
701 ]
702
703 config :pleroma, :restrict_unauthenticated,
704 timelines: %{local: false, federated: false},
705 profiles: %{local: false, remote: false},
706 activities: %{local: false, remote: false}
707
708 config :pleroma, Pleroma.Web.ApiSpec.CastAndValidate, strict: false
709
710 config :pleroma, :mrf,
711 policies: Pleroma.Web.ActivityPub.MRF.NoOpPolicy,
712 transparency: true,
713 transparency_exclusions: []
714
715 config :tzdata, :http_client, Pleroma.HTTP.Tzdata
716
717 config :ex_aws, http_client: Pleroma.HTTP.ExAws
718
719 config :pleroma, :instances_favicons, enabled: false
720
721 config :pleroma, :exexec,
722 root_mode: false,
723 options: %{}
724
725 # Import environment specific config. This must remain at the bottom
726 # of this file so it overrides the configuration defined above.
727 import_config "#{Mix.env()}.exs"