[#2497] Specified SHELL in .gitlab-ci.yml as required for `exexec`.
[akkoma] / config / config.exs
1 # .i;;;;i.
2 # iYcviii;vXY:
3 # .YXi .i1c.
4 # .YC. . in7.
5 # .vc. ...... ;1c.
6 # i7, .. .;1;
7 # i7, .. ... .Y1i
8 # ,7v .6MMM@; .YX,
9 # .7;. ..IMMMMMM1 :t7.
10 # .;Y. ;$MMMMMM9. :tc.
11 # vY. .. .nMMM@MMU. ;1v.
12 # i7i ... .#MM@M@C. .....:71i
13 # it: .... $MMM@9;.,i;;;i,;tti
14 # :t7. ..... 0MMMWv.,iii:::,,;St.
15 # .nC. ..... IMMMQ..,::::::,.,czX.
16 # .ct: ....... .ZMMMI..,:::::::,,:76Y.
17 # c2: ......,i..Y$M@t..:::::::,,..inZY
18 # vov ......:ii..c$MBc..,,,,,,,,,,..iI9i
19 # i9Y ......iii:..7@MA,..,,,,,,,,,....;AA:
20 # iIS. ......:ii::..;@MI....,............;Ez.
21 # .I9. ......:i::::...8M1..................C0z.
22 # .z9; ......:i::::,.. .i:...................zWX.
23 # vbv ......,i::::,,. ................. :AQY
24 # c6Y. .,...,::::,,..:t0@@QY. ................ :8bi
25 # :6S. ..,,...,:::,,,..EMMMMMMI. ............... .;bZ,
26 # :6o, .,,,,..:::,,,..i#MMMMMM#v................. YW2.
27 # .n8i ..,,,,,,,::,,,,.. tMMMMM@C:.................. .1Wn
28 # 7Uc. .:::,,,,,::,,,,.. i1t;,..................... .UEi
29 # 7C...::::::::::::,,,,.. .................... vSi.
30 # ;1;...,,::::::,......... .................. Yz:
31 # v97,......... .voC.
32 # izAotX7777777777777777777777777777777777777777Y7n92:
33 # .;CoIIIIIUAA666666699999ZZZZZZZZZZZZZZZZZZZZ6ov.
34 #
35 # !!! ATTENTION !!!
36 # DO NOT EDIT THIS FILE! THIS FILE CONTAINS THE DEFAULT VALUES FOR THE CON-
37 # FIGURATION! EDIT YOUR SECRET FILE (either prod.secret.exs, dev.secret.exs).
38 #
39 # This file is responsible for configuring your application
40 # and its dependencies with the aid of the Mix.Config module.
41 #
42 # This configuration file is loaded before any dependency and
43 # is restricted to this project.
44 use Mix.Config
45
46 # General application configuration
47 config :pleroma, ecto_repos: [Pleroma.Repo]
48
49 config :pleroma, Pleroma.Repo,
50 types: Pleroma.PostgresTypes,
51 telemetry_event: [Pleroma.Repo.Instrumenter],
52 migration_lock: nil
53
54 config :pleroma, Pleroma.Captcha,
55 enabled: true,
56 seconds_valid: 300,
57 method: Pleroma.Captcha.Native
58
59 config :pleroma, Pleroma.Captcha.Kocaptcha, endpoint: "https://captcha.kotobank.ch"
60
61 # Upload configuration
62 config :pleroma, Pleroma.Upload,
63 uploader: Pleroma.Uploaders.Local,
64 filters: [Pleroma.Upload.Filter.Dedupe],
65 link_name: false,
66 proxy_remote: false,
67 proxy_opts: [
68 redirect_on_failure: false,
69 max_body_length: 25 * 1_048_576,
70 http: [
71 follow_redirect: true,
72 pool: :upload
73 ]
74 ]
75
76 config :pleroma, Pleroma.Uploaders.Local, uploads: "uploads"
77
78 config :pleroma, Pleroma.Uploaders.S3,
79 bucket: nil,
80 streaming_enabled: true,
81 public_endpoint: "https://s3.amazonaws.com"
82
83 config :pleroma, :emoji,
84 shortcode_globs: ["/emoji/custom/**/*.png"],
85 pack_extensions: [".png", ".gif"],
86 groups: [
87 Custom: ["/emoji/*.png", "/emoji/**/*.png"]
88 ],
89 default_manifest: "https://git.pleroma.social/pleroma/emoji-index/raw/master/index.json",
90 shared_pack_cache_seconds_per_file: 60
91
92 config :pleroma, :uri_schemes,
93 valid_schemes: [
94 "https",
95 "http",
96 "dat",
97 "dweb",
98 "gopher",
99 "ipfs",
100 "ipns",
101 "irc",
102 "ircs",
103 "magnet",
104 "mailto",
105 "mumble",
106 "ssb",
107 "xmpp"
108 ]
109
110 websocket_config = [
111 path: "/websocket",
112 serializer: [
113 {Phoenix.Socket.V1.JSONSerializer, "~> 1.0.0"},
114 {Phoenix.Socket.V2.JSONSerializer, "~> 2.0.0"}
115 ],
116 timeout: 60_000,
117 transport_log: false,
118 compress: false
119 ]
120
121 # Configures the endpoint
122 config :pleroma, Pleroma.Web.Endpoint,
123 instrumenters: [Pleroma.Web.Endpoint.Instrumenter],
124 url: [host: "localhost"],
125 http: [
126 ip: {127, 0, 0, 1},
127 dispatch: [
128 {:_,
129 [
130 {"/api/v1/streaming", Pleroma.Web.MastodonAPI.WebsocketHandler, []},
131 {"/websocket", Phoenix.Endpoint.CowboyWebSocket,
132 {Phoenix.Transports.WebSocket,
133 {Pleroma.Web.Endpoint, Pleroma.Web.UserSocket, websocket_config}}},
134 {:_, Phoenix.Endpoint.Cowboy2Handler, {Pleroma.Web.Endpoint, []}}
135 ]}
136 ]
137 ],
138 protocol: "https",
139 secret_key_base: "aK4Abxf29xU9TTDKre9coZPUgevcVCFQJe/5xP/7Lt4BEif6idBIbjupVbOrbKxl",
140 signing_salt: "CqaoopA2",
141 render_errors: [view: Pleroma.Web.ErrorView, accepts: ~w(json)],
142 pubsub: [name: Pleroma.PubSub, adapter: Phoenix.PubSub.PG2],
143 secure_cookie_flag: true,
144 extra_cookie_attrs: [
145 "SameSite=Lax"
146 ]
147
148 # Configures Elixir's Logger
149 config :logger, :console,
150 level: :debug,
151 format: "\n$time $metadata[$level] $message\n",
152 metadata: [:request_id]
153
154 config :logger, :ex_syslogger,
155 level: :debug,
156 ident: "pleroma",
157 format: "$metadata[$level] $message",
158 metadata: [:request_id]
159
160 config :quack,
161 level: :warn,
162 meta: [:all],
163 webhook_url: "https://hooks.slack.com/services/YOUR-KEY-HERE"
164
165 config :mime, :types, %{
166 "application/xml" => ["xml"],
167 "application/xrd+xml" => ["xrd+xml"],
168 "application/jrd+json" => ["jrd+json"],
169 "application/activity+json" => ["activity+json"],
170 "application/ld+json" => ["activity+json"]
171 }
172
173 config :tesla, adapter: Tesla.Adapter.Gun
174 # Configures http settings, upstream proxy etc.
175 config :pleroma, :http,
176 proxy_url: nil,
177 send_user_agent: true,
178 user_agent: :default,
179 adapter: []
180
181 config :pleroma, :instance,
182 name: "Pleroma",
183 email: "example@example.com",
184 notify_email: "noreply@example.com",
185 description: "A Pleroma instance, an alternative fediverse server",
186 background_image: "/images/city.jpg",
187 limit: 5_000,
188 chat_limit: 5_000,
189 remote_limit: 100_000,
190 upload_limit: 16_000_000,
191 avatar_upload_limit: 2_000_000,
192 background_upload_limit: 4_000_000,
193 banner_upload_limit: 4_000_000,
194 poll_limits: %{
195 max_options: 20,
196 max_option_chars: 200,
197 min_expiration: 0,
198 max_expiration: 365 * 24 * 60 * 60
199 },
200 registrations_open: true,
201 invites_enabled: false,
202 account_activation_required: false,
203 federating: true,
204 federation_incoming_replies_max_depth: 100,
205 federation_reachability_timeout_days: 7,
206 federation_publisher_modules: [
207 Pleroma.Web.ActivityPub.Publisher
208 ],
209 allow_relay: true,
210 rewrite_policy: Pleroma.Web.ActivityPub.MRF.NoOpPolicy,
211 public: true,
212 quarantined_instances: [],
213 managed_config: true,
214 static_dir: "instance/static/",
215 allowed_post_formats: [
216 "text/plain",
217 "text/html",
218 "text/markdown",
219 "text/bbcode"
220 ],
221 mrf_transparency: true,
222 mrf_transparency_exclusions: [],
223 autofollowed_nicknames: [],
224 max_pinned_statuses: 1,
225 attachment_links: false,
226 welcome_user_nickname: nil,
227 welcome_message: nil,
228 max_report_comment_size: 1000,
229 safe_dm_mentions: false,
230 healthcheck: false,
231 remote_post_retention_days: 90,
232 skip_thread_containment: true,
233 limit_to_local_content: :unauthenticated,
234 user_bio_length: 5000,
235 user_name_length: 100,
236 max_account_fields: 10,
237 max_remote_account_fields: 20,
238 account_field_name_length: 512,
239 account_field_value_length: 2048,
240 external_user_synchronization: true,
241 extended_nickname_format: true,
242 cleanup_attachments: false,
243 multi_factor_authentication: [
244 totp: [
245 # digits 6 or 8
246 digits: 6,
247 period: 30
248 ],
249 backup_codes: [
250 number: 5,
251 length: 16
252 ]
253 ]
254
255 config :pleroma, :feed,
256 post_title: %{
257 max_length: 100,
258 omission: "..."
259 }
260
261 config :pleroma, :markup,
262 # XXX - unfortunately, inline images must be enabled by default right now, because
263 # of custom emoji. Issue #275 discusses defanging that somehow.
264 allow_inline_images: true,
265 allow_headings: false,
266 allow_tables: false,
267 allow_fonts: false,
268 scrub_policy: [
269 Pleroma.HTML.Scrubber.Default,
270 Pleroma.HTML.Transform.MediaProxy
271 ]
272
273 config :pleroma, :frontend_configurations,
274 pleroma_fe: %{
275 theme: "pleroma-dark",
276 logo: "/static/logo.png",
277 background: "/images/city.jpg",
278 redirectRootNoLogin: "/main/all",
279 redirectRootLogin: "/main/friends",
280 showInstanceSpecificPanel: true,
281 scopeOptionsEnabled: false,
282 formattingOptionsEnabled: false,
283 collapseMessageWithSubject: false,
284 hidePostStats: false,
285 hideUserStats: false,
286 scopeCopy: true,
287 subjectLineBehavior: "email",
288 alwaysShowSubjectInput: true
289 },
290 masto_fe: %{
291 showInstanceSpecificPanel: true
292 }
293
294 config :pleroma, :assets,
295 mascots: [
296 pleroma_fox_tan: %{
297 url: "/images/pleroma-fox-tan-smol.png",
298 mime_type: "image/png"
299 },
300 pleroma_fox_tan_shy: %{
301 url: "/images/pleroma-fox-tan-shy.png",
302 mime_type: "image/png"
303 }
304 ],
305 default_mascot: :pleroma_fox_tan
306
307 config :pleroma, :manifest,
308 icons: [
309 %{
310 src: "/static/logo.png",
311 type: "image/png"
312 }
313 ],
314 theme_color: "#282c37",
315 background_color: "#191b22"
316
317 config :pleroma, :activitypub,
318 unfollow_blocked: true,
319 outgoing_blocks: true,
320 follow_handshake_timeout: 500,
321 note_replies_output_limit: 5,
322 sign_object_fetches: true,
323 authorized_fetch_mode: false
324
325 config :pleroma, :streamer,
326 workers: 3,
327 overflow_workers: 2
328
329 config :pleroma, :user, deny_follow_blocked: true
330
331 config :pleroma, :mrf_normalize_markup, scrub_policy: Pleroma.HTML.Scrubber.Default
332
333 config :pleroma, :mrf_rejectnonpublic,
334 allow_followersonly: false,
335 allow_direct: false
336
337 config :pleroma, :mrf_hellthread,
338 delist_threshold: 10,
339 reject_threshold: 20
340
341 config :pleroma, :mrf_simple,
342 media_removal: [],
343 media_nsfw: [],
344 federated_timeline_removal: [],
345 report_removal: [],
346 reject: [],
347 accept: [],
348 avatar_removal: [],
349 banner_removal: [],
350 reject_deletes: []
351
352 config :pleroma, :mrf_keyword,
353 reject: [],
354 federated_timeline_removal: [],
355 replace: []
356
357 config :pleroma, :mrf_subchain, match_actor: %{}
358
359 config :pleroma, :mrf_vocabulary,
360 accept: [],
361 reject: []
362
363 config :pleroma, :mrf_object_age,
364 threshold: 172_800,
365 actions: [:delist, :strip_followers]
366
367 config :pleroma, :rich_media,
368 enabled: true,
369 ignore_hosts: [],
370 ignore_tld: ["local", "localdomain", "lan"],
371 parsers: [
372 Pleroma.Web.RichMedia.Parsers.TwitterCard,
373 Pleroma.Web.RichMedia.Parsers.OGP,
374 Pleroma.Web.RichMedia.Parsers.OEmbed
375 ],
376 ttl_setters: [Pleroma.Web.RichMedia.Parser.TTL.AwsSignedUrl]
377
378 config :pleroma, :media_proxy,
379 enabled: false,
380 invalidation: [
381 enabled: false,
382 provider: Pleroma.Web.MediaProxy.Invalidation.Script
383 ],
384 proxy_opts: [
385 redirect_on_failure: false,
386 max_body_length: 25 * 1_048_576,
387 # Note: max_read_duration defaults to Pleroma.ReverseProxy.max_read_duration_default/1
388 max_read_duration: 30_000,
389 http: [
390 follow_redirect: true,
391 pool: :media
392 ]
393 ],
394 whitelist: []
395
396 # Note: media preview proxy depends on media proxy to be enabled
397 config :pleroma, :media_preview_proxy,
398 enabled: false,
399 thumbnail_max_width: 400,
400 thumbnail_max_height: 200,
401 proxy_opts: [
402 head_request_max_read_duration: 5_000,
403 max_read_duration: 10_000
404 ]
405
406 config :pleroma, :chat, enabled: true
407
408 config :phoenix, :format_encoders, json: Jason
409
410 config :phoenix, :json_library, Jason
411
412 config :phoenix, :filter_parameters, ["password", "confirm"]
413
414 config :pleroma, :gopher,
415 enabled: false,
416 ip: {0, 0, 0, 0},
417 port: 9999
418
419 config :pleroma, Pleroma.Web.Metadata,
420 providers: [
421 Pleroma.Web.Metadata.Providers.OpenGraph,
422 Pleroma.Web.Metadata.Providers.TwitterCard,
423 Pleroma.Web.Metadata.Providers.RelMe,
424 Pleroma.Web.Metadata.Providers.Feed
425 ],
426 unfurl_nsfw: false
427
428 config :pleroma, :http_security,
429 enabled: true,
430 sts: false,
431 sts_max_age: 31_536_000,
432 ct_max_age: 2_592_000,
433 referrer_policy: "same-origin"
434
435 config :cors_plug,
436 max_age: 86_400,
437 methods: ["POST", "PUT", "DELETE", "GET", "PATCH", "OPTIONS"],
438 expose: [
439 "Link",
440 "X-RateLimit-Reset",
441 "X-RateLimit-Limit",
442 "X-RateLimit-Remaining",
443 "X-Request-Id",
444 "Idempotency-Key"
445 ],
446 credentials: true,
447 headers: ["Authorization", "Content-Type", "Idempotency-Key"]
448
449 config :pleroma, Pleroma.User,
450 restricted_nicknames: [
451 ".well-known",
452 "~",
453 "about",
454 "activities",
455 "api",
456 "auth",
457 "check_password",
458 "dev",
459 "friend-requests",
460 "inbox",
461 "internal",
462 "main",
463 "media",
464 "nodeinfo",
465 "notice",
466 "oauth",
467 "objects",
468 "ostatus_subscribe",
469 "pleroma",
470 "proxy",
471 "push",
472 "registration",
473 "relay",
474 "settings",
475 "status",
476 "tag",
477 "user-search",
478 "user_exists",
479 "users",
480 "web"
481 ]
482
483 config :pleroma, Oban,
484 repo: Pleroma.Repo,
485 verbose: false,
486 prune: {:maxlen, 1500},
487 queues: [
488 activity_expiration: 10,
489 federator_incoming: 50,
490 federator_outgoing: 50,
491 web_push: 50,
492 mailer: 10,
493 transmogrifier: 20,
494 scheduled_activities: 10,
495 background: 5,
496 remote_fetcher: 2,
497 attachments_cleanup: 5,
498 new_users_digest: 1
499 ],
500 crontab: [
501 {"0 0 * * *", Pleroma.Workers.Cron.ClearOauthTokenWorker},
502 {"0 * * * *", Pleroma.Workers.Cron.StatsWorker},
503 {"* * * * *", Pleroma.Workers.Cron.PurgeExpiredActivitiesWorker},
504 {"0 0 * * 0", Pleroma.Workers.Cron.DigestEmailsWorker},
505 {"0 0 * * *", Pleroma.Workers.Cron.NewUsersDigestWorker}
506 ]
507
508 config :pleroma, :workers,
509 retries: [
510 federator_incoming: 5,
511 federator_outgoing: 5
512 ]
513
514 config :auto_linker,
515 opts: [
516 extra: true,
517 # TODO: Set to :no_scheme when it works properly
518 validate_tld: true,
519 class: false,
520 strip_prefix: false,
521 new_window: false,
522 rel: "ugc"
523 ]
524
525 config :pleroma, :ldap,
526 enabled: System.get_env("LDAP_ENABLED") == "true",
527 host: System.get_env("LDAP_HOST") || "localhost",
528 port: String.to_integer(System.get_env("LDAP_PORT") || "389"),
529 ssl: System.get_env("LDAP_SSL") == "true",
530 sslopts: [],
531 tls: System.get_env("LDAP_TLS") == "true",
532 tlsopts: [],
533 base: System.get_env("LDAP_BASE") || "dc=example,dc=com",
534 uid: System.get_env("LDAP_UID") || "cn"
535
536 config :esshd,
537 enabled: false
538
539 oauth_consumer_strategies =
540 System.get_env("OAUTH_CONSUMER_STRATEGIES")
541 |> to_string()
542 |> String.split()
543 |> Enum.map(&hd(String.split(&1, ":")))
544
545 ueberauth_providers =
546 for strategy <- oauth_consumer_strategies do
547 strategy_module_name = "Elixir.Ueberauth.Strategy.#{String.capitalize(strategy)}"
548 strategy_module = String.to_atom(strategy_module_name)
549 {String.to_atom(strategy), {strategy_module, [callback_params: ["state"]]}}
550 end
551
552 config :ueberauth,
553 Ueberauth,
554 base_path: "/oauth",
555 providers: ueberauth_providers
556
557 config :pleroma,
558 :auth,
559 enforce_oauth_admin_scope_usage: true,
560 oauth_consumer_strategies: oauth_consumer_strategies
561
562 config :pleroma, Pleroma.Emails.Mailer, adapter: Swoosh.Adapters.Sendmail, enabled: false
563
564 config :pleroma, Pleroma.Emails.UserEmail,
565 logo: nil,
566 styling: %{
567 link_color: "#d8a070",
568 background_color: "#2C3645",
569 content_background_color: "#1B2635",
570 header_color: "#d8a070",
571 text_color: "#b9b9ba",
572 text_muted_color: "#b9b9ba"
573 }
574
575 config :pleroma, Pleroma.Emails.NewUsersDigestEmail, enabled: false
576
577 config :prometheus, Pleroma.Web.Endpoint.MetricsExporter, path: "/api/pleroma/app_metrics"
578
579 config :pleroma, Pleroma.ScheduledActivity,
580 daily_user_limit: 25,
581 total_user_limit: 300,
582 enabled: true
583
584 config :pleroma, :email_notifications,
585 digest: %{
586 active: false,
587 interval: 7,
588 inactivity_threshold: 7
589 }
590
591 config :pleroma, :oauth2,
592 token_expires_in: 600,
593 issue_new_refresh_token: true,
594 clean_expired_tokens: false
595
596 config :pleroma, :database, rum_enabled: false
597
598 config :pleroma, :env, Mix.env()
599
600 config :http_signatures,
601 adapter: Pleroma.Signature
602
603 config :pleroma, :rate_limit,
604 authentication: {60_000, 15},
605 timeline: {500, 3},
606 search: [{1000, 10}, {1000, 30}],
607 app_account_creation: {1_800_000, 25},
608 relations_actions: {10_000, 10},
609 relation_id_action: {60_000, 2},
610 statuses_actions: {10_000, 15},
611 status_id_action: {60_000, 3},
612 password_reset: {1_800_000, 5},
613 account_confirmation_resend: {8_640_000, 5},
614 ap_routes: {60_000, 15}
615
616 config :pleroma, Pleroma.ActivityExpiration, enabled: true
617
618 config :pleroma, Pleroma.Plugs.RemoteIp, enabled: true
619
620 config :pleroma, :static_fe, enabled: false
621
622 config :pleroma, :web_cache_ttl,
623 activity_pub: nil,
624 activity_pub_question: 30_000
625
626 config :pleroma, :modules, runtime_dir: "instance/modules"
627
628 config :pleroma, configurable_from_database: false
629
630 config :pleroma, Pleroma.Repo,
631 parameters: [gin_fuzzy_search_limit: "500"],
632 prepare: :unnamed
633
634 config :pleroma, :connections_pool,
635 checkin_timeout: 250,
636 max_connections: 250,
637 retry: 1,
638 retry_timeout: 1000,
639 await_up_timeout: 5_000
640
641 config :pleroma, :pools,
642 federation: [
643 size: 50,
644 max_overflow: 10,
645 timeout: 150_000
646 ],
647 media: [
648 size: 50,
649 max_overflow: 10,
650 timeout: 150_000
651 ],
652 upload: [
653 size: 25,
654 max_overflow: 5,
655 timeout: 300_000
656 ],
657 default: [
658 size: 10,
659 max_overflow: 2,
660 timeout: 10_000
661 ]
662
663 config :pleroma, :hackney_pools,
664 federation: [
665 max_connections: 50,
666 timeout: 150_000
667 ],
668 media: [
669 max_connections: 50,
670 timeout: 150_000
671 ],
672 upload: [
673 max_connections: 25,
674 timeout: 300_000
675 ]
676
677 config :pleroma, :restrict_unauthenticated,
678 timelines: %{local: false, federated: false},
679 profiles: %{local: false, remote: false},
680 activities: %{local: false, remote: false}
681
682 config :pleroma, Pleroma.Web.ApiSpec.CastAndValidate, strict: false
683
684 config :pleroma, :exexec,
685 root_mode: false,
686 options: %{}
687
688 # Import environment specific config. This must remain at the bottom
689 # of this file so it overrides the configuration defined above.
690 import_config "#{Mix.env()}.exs"