server/docker-default-config.toml at develop · open-proofline/server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
# Proofline Server container default configuration.
# Keep real secrets out of committed TOML files. Mount private secret files and
# reference them with *_file settings, or use SAFE_*_FILE environment overrides.

[server]
main_bind_addrs = ["0.0.0.0:8080"]
admin_bind_addrs = ["0.0.0.0:8081"]

[paths]
data_dir = "/var/lib/proofline"
sqlite_db_path = "/var/lib/proofline/proofline.db"

[metadata]
backend = "sqlite"
postgres_dsn_file = ""
postgres_max_open_conns = 10
postgres_max_idle_conns = 5
postgres_conn_max_lifetime = "30m"

[blob_storage]
backend = "local"
s3_endpoint = ""
s3_region = "us-east-1"
s3_bucket = ""
s3_prefix = ""
s3_access_key_id_file = ""
s3_secret_access_key_file = ""
s3_session_token_file = ""
s3_force_path_style = true

[coordination]
backend = "none"
valkey_addr = ""
valkey_username = ""
valkey_password_file = ""
valkey_db = 0
valkey_tls = false
valkey_dial_timeout = "5s"
valkey_read_timeout = "5s"
valkey_write_timeout = "5s"

[uploads]
max_upload_bytes = "250MB"
account_default_blob_quota_bytes = "10GB"
temp_upload_staging_quota_bytes = "1GB"
upload_coordination_lease_ttl = "2m"
temp_upload_cleanup_age = "0"
temp_upload_cleanup_dry_run = false

[auth]
session_ttl = "12h"
bootstrap_secret_file = ""
second_factor_email_challenge_ttl = "10m"

[account_registration]
mode = "disabled"
email_verification_ttl = "24h"
public_web_origin = ""

[email]
backend = "none"
smtp_host = ""
smtp_port = 587
smtp_username = ""
smtp_password_file = ""
smtp_from = ""
smtp_starttls = "required"
smtp_timeout = "10s"

[web_auth]
enabled = false
allowed_origins = []
session_cookie_name = "__Host-proofline_session"
session_cookie_secure = true
session_cookie_samesite = "lax"
csrf_header_name = "X-CSRF-Token"

[retention]
default_incident_token_ttl = "24h"
closed_incident_retention = "0"
token_metadata_retention = "0"
deletion_tombstone_retention = "0"
deletion_worker_interval = "1m"

[rate_limits.main_api]
enabled = true
window = "1m"
auth = 30
auth_register = 10
auth_email_verify = 30
bootstrap = 5
account = 120
incident_read = 300
incident_write = 120
upload = 120
reconcile = 120
stream = 120
token = 60
download = 30
admin = 60

[rate_limits.public_viewer]
enabled = true
window = "1m"
page = 60
data = 300
download = 12
static = 600

[http.main]
read_header_timeout = "10s"
read_timeout = "0"
write_timeout = "0"
idle_timeout = "120s"

[http.admin]
read_header_timeout = "10s"
read_timeout = "30s"
write_timeout = "300s"
idle_timeout = "120s"