# RustBox local development configuration.
host = "127.0.0.1"
port = 3001
environment = "development"
# Global light/dark theme: system | dark | light
default_theme = "system"
# Global interface style used by the login screen and by accounts set to
# "Global default". Presets include gmail, proton, zoho, outlook, fastmail,
# apple-mail, yahoo, hey, nord, minimal and Roundcube variants.
default_interface_skin = "rustbox"
data_dir = ".dev/data"
log_level = "debug"
session_timeout_hours = 24

# Application database. The selected engine stores all RustBox account data.
# With session_backend="database", it stores sessions as well.
database_backend = "sqlite" # sqlite | mysql | pgsql
# SQLite defaults to data_dir/rustbox.sqlite. MySQL/PostgreSQL require database_url.
# database_url = "postgres://rustbox:secret@db.example.com/rustbox"
session_backend = "database" # database | redis
cluster_mode = false
pgp_enabled = true
# For shared database sessions, Redis sessions, or cluster mode provide the same 32-byte key (base64) on all nodes.
# session_encryption_key = "..."
# Direct Redis session backend:
# redis_url = "redis://redis.example.com:6379/"
# Or Redis Sentinel:
# redis_sentinel_nodes = ["sentinel-a:26379", "sentinel-b:26379", "sentinel-c:26379"]
# redis_sentinel_master = "mymaster"
# redis_sentinel_password = "sentinel-secret"
# redis_password = "secret"

# Mail server configuration is administrator-owned. If omitted, development
# also defaults to localhost:993 (IMAP) and localhost:587 (SMTP).
# Certificate verification is disabled automatically only for loopback hosts.
tls_enabled = true
# tls_verify = false
# Per-file raw upload limit and final RFC822/MIME MTA limit (MiB).
max_attachment_size_mb = 10
max_message_size_mb = 50

# Optional administrator-facing features.
sieve_enabled = true
diagnostics_enabled = true
about_enabled = true
security_headers_enabled = false

# ManageSieve. Leave sieve_host unset to use imap_host. Ignored when disabled.
sieve_port = 4190
sieve_tls_mode = "starttls" # starttls | implicit | none
sieve_allow_insecure_auth = false
sieve_timeout_secs = 10

trusted_proxies = "127.0.0.1,::1"