137 lines
5.2 KiB
TOML
137 lines
5.2 KiB
TOML
# RustBox 0.2.5
|
|
host = "127.0.0.1"
|
|
port = 3001
|
|
environment = "production"
|
|
# Global light/dark theme: system | dark | light
|
|
default_theme = "system"
|
|
# Global interface style used by the login screen and by accounts set to
|
|
# "Global default". Presets include gmail, proton, zoho, outlook, fastmail,
|
|
# apple-mail, yahoo, hey, nord, github, gitlab, discord, slack, reddit, notion, minimal and Roundcube variants.
|
|
default_interface_skin = "gmail"
|
|
data_dir = "/var/lib/rustbox"
|
|
log_dir = "/var/log/rustbox"
|
|
# trace | debug | info | warn | error | off. RUST_LOG still overrides this value.
|
|
log_level = "info"
|
|
session_timeout_hours = 24
|
|
|
|
# Application database. The selected engine stores all RustBox account data.
|
|
# With session_backend="database", it stores sessions as well.
|
|
database_backend = "sqlite" # sqlite | mysql | pgsql
|
|
# SQLite defaults to data_dir/rustbox.sqlite. MySQL/PostgreSQL require database_url.
|
|
# database_url = "postgres://rustbox:secret@db.example.com/rustbox"
|
|
session_backend = "database" # database | redis
|
|
cluster_mode = false
|
|
|
|
|
|
# For shared database sessions, Redis sessions, or cluster mode provide the same 32-byte key (base64) on all nodes.
|
|
# session_encryption_key = "..."
|
|
# Direct Redis session backend:
|
|
# redis_url = "redis://redis.example.com:6379/"
|
|
# Or Redis Sentinel:
|
|
# redis_sentinel_nodes = ["sentinel-a:26379", "sentinel-b:26379", "sentinel-c:26379"]
|
|
# redis_sentinel_master = "mymaster"
|
|
# redis_sentinel_password = "sentinel-secret"
|
|
# redis_password = "secret"
|
|
remember_me_enabled = true
|
|
remember_me_days = 30
|
|
|
|
# Mail profile. When hosts/ports are omitted RustBox defaults to:
|
|
# IMAP localhost:993 and SMTP localhost:587 with TLS enabled.
|
|
# SMTP host falls back to the IMAP host.
|
|
# imap_host = "localhost"
|
|
# imap_port = 993
|
|
# smtp_host = "localhost"
|
|
# smtp_port = 587
|
|
tls_enabled = true
|
|
# Certificate/hostname verification. If omitted, RustBox skips verification only
|
|
# for localhost/127.0.0.1/::1 and verifies certificates for remote hosts.
|
|
# tls_verify = true
|
|
|
|
# Maximum size of one raw uploaded attachment (MiB).
|
|
max_attachment_size_mb = 10
|
|
# Maximum size of the complete RFC822/MIME message submitted to the MTA (MiB).
|
|
max_message_size_mb = 50
|
|
|
|
# Optional reverse-proxy subpath, e.g. "/mail".
|
|
# base_path = "/mail"
|
|
|
|
# Optional product features. Disabled features are not registered in the API/UI.
|
|
sieve_enabled = true
|
|
diagnostics_enabled = true
|
|
about_enabled = true
|
|
# Adds browser-facing security headers (CSP, frame/referrer/permissions policies).
|
|
security_headers_enabled = false
|
|
|
|
# ManageSieve. If sieve_host is omitted, imap_host from the authenticated
|
|
# session is used. Plaintext authentication stays blocked unless explicitly
|
|
# enabled.
|
|
# sieve_host = "mail.example.com"
|
|
sieve_port = 4190
|
|
sieve_tls_mode = "starttls" # starttls | implicit | none
|
|
sieve_allow_insecure_auth = false
|
|
sieve_timeout_secs = 10
|
|
|
|
trusted_proxies = "127.0.0.1,::1"
|
|
|
|
# Optional server-wide defaults for special IMAP folders. These are used when
|
|
# a mailbox has no per-account override and the named folder exists.
|
|
# default_sent_folder = "Sent"
|
|
# default_drafts_folder = "Drafts"
|
|
# default_trash_folder = "Trash"
|
|
# default_junk_folder = "Junk"
|
|
# default_archive_folder = "Archive"
|
|
|
|
# Optional headers added to every outgoing message. Use `Header-Name: value`.
|
|
# RustBox rejects structural/MIME header overrides and CR/LF injection.
|
|
outgoing_headers = []
|
|
# OpenPGP. Private keys are stored per user below data_dir with 0700/0600
|
|
# permissions. Passphrases are never persisted. WKD is enabled by default;
|
|
# HKP lookup is opt-in and HTTPS-only. Cluster mode requires pgp_enabled=false.
|
|
pgp_enabled = true
|
|
pgp_wkd_enabled = true
|
|
pgp_hkp_enabled = false
|
|
pgp_hkp_url = "https://keys.openpgp.org"
|
|
pgp_network_timeout_secs = 10
|
|
pgp_max_key_bytes = 1048576
|
|
# Private-key export is deliberately disabled unless the administrator opts in.
|
|
pgp_allow_private_export = false
|
|
|
|
# RustBox 0.2 blob/search backends
|
|
# Blob storage is independent from the SQL database. PostgreSQL/MySQL can still use
|
|
# local filesystem storage in single-node mode. In cluster mode use S3-compatible
|
|
# storage or a genuinely shared POSIX filesystem (NFS/CephFS/GlusterFS).
|
|
[storage]
|
|
backend = "filesystem" # filesystem | s3
|
|
# path = "/var/lib/rustbox/blobs" # defaults to data_dir for filesystem
|
|
shared = false # true only when every RustBox node sees the same filesystem
|
|
prefix = ""
|
|
# S3-compatible settings:
|
|
# bucket = "rustbox"
|
|
# region = "us-east-1"
|
|
# endpoint = "https://s3.example.com" # MinIO/Ceph RGW/etc. optional for AWS S3
|
|
# path_style = false
|
|
# allow_http = false
|
|
request_timeout_secs = 30
|
|
connect_timeout_secs = 5
|
|
max_retries = 3
|
|
retry_timeout_secs = 60
|
|
# access_key_id = "..." # AWS_* environment variables are also supported
|
|
# secret_access_key = "..."
|
|
# server_side_encryption = "AES256" # or "aws:kms"
|
|
# kms_key_id = "..."
|
|
|
|
# Search is independent from blob storage. Local Tantivy is single-node only.
|
|
[search]
|
|
backend = "local_tantivy" # disabled | local_tantivy | opensearch
|
|
# path = "/var/lib/rustbox/search" # defaults to data_dir for local_tantivy
|
|
# urls = ["https://opensearch.example.com:9200"]
|
|
index_prefix = "rustbox"
|
|
required = false
|
|
allow_insecure_http = false
|
|
request_timeout_secs = 10
|
|
worker_interval_secs = 2
|
|
worker_batch_size = 100
|
|
worker_max_attempts = 8
|
|
# username = "rustbox"
|
|
# password = "..."
|