first commit

config.example.toml

@@ -0,0 +1,44 @@
+# RustBox 0.0.1
+host = "127.0.0.1"
+port = 3001
+environment = "production"
+data_dir = "/var/lib/rustbox"
+session_timeout_hours = 24
+remember_me_enabled = true
+remember_me_days = 30
+
+# Required mail profile. Users only enter email + password on the login page.
+imap_host = "mail.example.com"
+imap_port = 993
+smtp_host = "mail.example.com"
+smtp_port = 587
+tls_enabled = true
+
+# Optional reverse-proxy subpath, e.g. "/mail".
+# base_path = "/mail"
+
+# ManageSieve. If sieve_host is omitted, imap_host from the authenticated
+# session is used. Plaintext authentication stays blocked unless explicitly
+# enabled.
+# sieve_host = "mail.example.com"
+sieve_port = 4190
+sieve_tls_mode = "starttls" # starttls | implicit | none
+sieve_allow_insecure_auth = false
+sieve_timeout_secs = 10
+
+trusted_proxies = "127.0.0.1,::1"
+
+# Optional headers added to every outgoing message. Use `Header-Name: value`.
+# RustBox rejects structural/MIME header overrides and CR/LF injection.
+outgoing_headers = []
+# OpenPGP. Private keys are stored per user below data_dir with 0700/0600
+# permissions. Passphrases are never persisted. WKD is enabled by default;
+# HKP lookup is opt-in and HTTPS-only.
+pgp_wkd_enabled = true
+pgp_hkp_enabled = false
+pgp_hkp_url = "https://keys.openpgp.org"
+pgp_network_timeout_secs = 10
+pgp_max_key_bytes = 1048576
+# Private-key export is deliberately disabled unless the administrator opts in.
+pgp_allow_private_export = false
+