# RustBox 0.0.5
host = "127.0.0.1"
port = 3001
environment = "production"
# Global light/dark theme: system | dark | light
default_theme = "system"
# Global interface style used by the login screen and by accounts set to
# "Global default". Presets include gmail, proton, zoho, outlook, fastmail,
# apple-mail, yahoo, hey, nord, minimal and Roundcube variants.
default_interface_skin = "gmail"
data_dir = "/var/lib/rustbox"
session_timeout_hours = 24
remember_me_enabled = true
remember_me_days = 30

# Mail profile. When hosts/ports are omitted RustBox defaults to:
# IMAP localhost:993 and SMTP localhost:587 with TLS enabled.
# SMTP host falls back to the IMAP host.
# imap_host = "localhost"
# imap_port = 993
# smtp_host = "localhost"
# smtp_port = 587
tls_enabled = true
# Certificate/hostname verification. If omitted, RustBox skips verification only
# for localhost/127.0.0.1/::1 and verifies certificates for remote hosts.
# tls_verify = true

# Maximum size of one raw uploaded attachment (MiB).
max_attachment_size_mb = 10
# Maximum size of the complete RFC822/MIME message submitted to the MTA (MiB).
max_message_size_mb = 50

# Optional reverse-proxy subpath, e.g. "/mail".
# base_path = "/mail"

# ManageSieve. If sieve_host is omitted, imap_host from the authenticated
# session is used. Plaintext authentication stays blocked unless explicitly
# enabled.
# sieve_host = "mail.example.com"
sieve_port = 4190
sieve_tls_mode = "starttls" # starttls | implicit | none
sieve_allow_insecure_auth = false
sieve_timeout_secs = 10

trusted_proxies = "127.0.0.1,::1"

# Optional server-wide defaults for special IMAP folders. These are used when
# a mailbox has no per-account override and the named folder exists.
# default_sent_folder = "Sent"
# default_drafts_folder = "Drafts"
# default_trash_folder = "Trash"
# default_junk_folder = "Junk"
# default_archive_folder = "Archive"

# Optional headers added to every outgoing message. Use `Header-Name: value`.
# RustBox rejects structural/MIME header overrides and CR/LF injection.
outgoing_headers = []
# OpenPGP. Private keys are stored per user below data_dir with 0700/0600
# permissions. Passphrases are never persisted. WKD is enabled by default;
# HKP lookup is opt-in and HTTPS-only.
pgp_wkd_enabled = true
pgp_hkp_enabled = false
pgp_hkp_url = "https://keys.openpgp.org"
pgp_network_timeout_secs = 10
pgp_max_key_bytes = 1048576
# Private-key export is deliberately disabled unless the administrator opts in.
pgp_allow_private_export = false