host = "0.0.0.0"
port = 3001
environment = "production"
data_dir = "/var/lib/rustbox"
database_backend = "sqlite"
session_backend = "database"
cluster_mode = false
pgp_enabled = true

[storage]
backend = "filesystem"
path = "/var/lib/rustbox/blobs"
shared = false

[sync]
# Background IMAP reconciliation cadence; active folders still use IDLE.
interval_secs = 30
# Full bodies fetched per pass when search.deep_index is effective.
deep_index_batch_size = 10

[search]
backend = "local_tantivy"
# Production: do not proactively download/store every full message body.
deep_index = false
path = "/var/lib/rustbox/search"

# Administrator-only system diagnostics. Disabled by default and loopback-only when enabled.
# For monitoring in Docker/Kubernetes, explicitly add the monitoring/pod CIDR and keep
# token/basic credentials in the orchestrator secret store.
[diagnostics_endpoint]
enabled = false
path = "/api/system/diagnostics"
allowed_networks = ["127.0.0.1/32", "::1/128"]
auth = "token"
include_user_identifiers = false
probe_timeout_secs = 5
security_window_secs = 900