'nickname' => 'gnusocial',
'wildcard' => null,
'server' => $_server,
- 'theme' => 'neo',
+ 'theme' => 'neo-gnu',
'path' => $_path,
'logfile' => null,
'logo' => null,
'languages' => get_all_languages(),
'email' =>
array_key_exists('SERVER_ADMIN', $_SERVER) ? $_SERVER['SERVER_ADMIN'] : null,
+ 'fakeaddressrecovery' => true,
'broughtby' => null,
'timezone' => 'UTC',
'broughtbyurl' => null,
'closed' => false,
'inviteonly' => true,
- 'private' => true,
+ 'private' => false,
'ssl' => 'never',
+ 'sslproxy' => false, // set to true to force GNU social to think it is HTTPS (i.e. using reverse proxy to enable it)
'sslserver' => null,
'dupelimit' => 60, // default for same person saying the same thing
- 'textlimit' => 0, // in chars; 0 == no limit
+ 'textlimit' => 1000, // in chars; 0 == no limit
'indent' => true,
'use_x_sendfile' => false,
'notice' => null, // site wide notice text
'log_queries' => false, // true to log all DB queries
'log_slow_queries' => 0, // if set, log queries taking over N seconds
'mysql_foreign_keys' => false), // if set, enables experimental foreign key support on MySQL
+ 'fix' =>
+ array('fancyurls' => true, // makes sure aliases in WebFinger etc. are not f'd by index.php/ URLs
+ ),
'syslog' =>
array('appname' => 'statusnet', # for syslog
'priority' => 'debug', # XXX: currently ignored
'profile' =>
array('banned' => array(),
'biolimit' => null,
- 'backup' => true,
- 'restore' => true,
+ 'changenick' => false,
+ 'allowprivate' => false, // whether to allow setting stream to private ("only followers can read")
+ 'backup' => false, // can cause DoS, so should be done via CLI
+ 'restore' => false,
'delete' => false,
'move' => true),
'image' =>
'path' => $_path . '/avatar/',
'ssl' => null,
'maxsize' => 300),
- 'background' =>
- array('server' => null,
- 'dir' => INSTALLDIR . '/background/',
- 'path' => $_path . '/background/',
- 'ssl' => null),
+ 'foaf' =>
+ array(
+ 'mbox_sha1sum' => false,
+ ),
'public' =>
array('localonly' => false,
'blacklist' => array(),
array('dropoff' => 864000.0, # controls weighting based on age
'cutoff' => 86400 * 90), # only look at notices favorited in last 90 days
'daemon' =>
- array('piddir' => '/var/run',
+ array('piddir' => sys_get_temp_dir(),
'user' => false,
'group' => false),
'emailpost' =>
'newuser' =>
array('default' => null,
'welcome' => null),
+ 'linkify' => array(
+ // "bare" below means "without schema", like domain.com vs. https://domain.com
+ 'bare_domains' => false, // convert domain.com to <a href="http://domain.com/" ...>domain.com</a> ?
+ 'bare_ipv4' => false, // convert IPv4 addresses to hyperlinks?
+ 'bare_ipv6' => false, // convert IPv6 addresses to hyperlinks?
+ ),
'attachments' =>
array('server' => null,
'dir' => INSTALLDIR . '/file/',
'application/vnd.oasis.opendocument.text-web' => 'oth',
'application/pdf' => 'pdf',
'application/zip' => 'zip',
+ 'application/xml' => 'xml',
'image/png' => 'png',
'image/jpeg' => 'jpg',
'image/gif' => 'gif',
'user_quota' => 50000000,
'monthly_quota' => 15000000,
'uploads' => true,
+ 'filename_base' => 'hash', // for new files, choose one: 'upload', 'hash'
'show_html' => false, // show (filtered) text/html attachments (and oEmbed HTML etc.). Doesn't affect AJAX calls.
'show_thumbs' => true, // show thumbnails in notice lists for uploaded images, and photos and videos linked remotely that provide oEmbed info
'process_links' => true, // check linked resources for embeddable photos and videos; this will hit referenced external web sites when processing new messages.
+ 'extblacklist' => [
+ 'php' => 'phps',
+ 'exe' => false, // this would deny any uploads to keep the "exe" file extension
+ ],
),
'thumbnail' =>
array('crop' => false, // overridden to true if thumb height === null
'maxsize' => 1000, // thumbs with an edge larger than this will not be generated
'width' => 450,
'height' => 600,
+ 'upscale' => false,
'animated' => false), // null="UseFileAsThumbnail", false="can use still frame". true requires ImageMagickPlugin
'application' =>
array('desclimit' => null),
'maxpeople' => 500, // maximum no. of people with the same tag by the same user
'allow_tagging' => array('all' => true), // equivalent to array('local' => true, 'remote' => true)
'desclimit' => null),
- 'oembed' =>
- array('endpoint' => null, // 'https://noembed.com/embed/' for proxied oEmbed data
- 'order' => array('built-in', 'well-known', 'service', 'discovery'),
- ),
'search' =>
array('type' => 'like'),
'sessions' =>
array('handle' => false, // whether to handle sessions ourselves
'debug' => false, // debugging output for sessions
'gc_limit' => 1000), // max sessions to expire at a time
+ 'htmlfilter' => array( // purify HTML through HTMLPurifier
+ 'img' => true,
+ 'video' => true,
+ 'audio' => true,
+ ),
'notice' =>
array('contentlimit' => null,
+ 'allowprivate' => false, // whether to allow users to "check the padlock" to publish notices available for their subscribers.
'defaultscope' => null, // null means 1 if site/private, 0 otherwise
- 'hidespam' => false), // Whether to hide silenced users from timelines
+ 'hidespam' => true), // Whether to hide silenced users from timelines
'message' =>
array('contentlimit' => null),
'location' =>
array('disabled' => true),
'plugins' =>
array('core' => array(
+ 'ActivityVerb' => array(),
+ 'ActivityVerbPost' => array(),
+ 'ActivityModeration' => array(),
'AuthCrypt' => array(),
'Cronish' => array(),
'Favorite' => array(),
+ 'HTMLPurifierSchemes' => array(),
+ 'Share' => array(),
'LRDD' => array(),
- 'StrictTransportSecurity' => array(),
),
'default' => array(
'Activity' => array(),
'AntiBrute' => array(),
'Bookmark' => array(),
'ClientSideShorten' => array(),
+ 'DefaultLayout' => array(),
'Directory' => array(),
'DirectMessage' => array(),
'EmailAuthentication' => array(),
'OpportunisticQM' => array(),
'OStatus' => array(),
'Poll' => array(),
- 'QnA' => array(),
'SearchSub' => array(),
+ 'SimpleCaptcha' => array(),
'TagSub' => array(),
'WebFinger' => array(),
),
'path' => null,
'sslpath' => null,
),
- 'pluginlist' => array(),
'admin' =>
array('panels' => array('site', 'user', 'paths', 'access', 'sessions', 'sitenotice', 'license', 'plugins')),
'singleuser' =>
array('ssl_cafile' => false, // To enable SSL cert validation, point to a CA bundle (eg '/usr/lib/ssl/certs/ca-certificates.crt') (this activates "ssl_verify_peer")
'ssl_verify_host' => true, // HTTPRequest2 makes sure this is set to CURLOPT_SSL_VERIFYHOST==2 if using curl
'curl' => false, // Use CURL backend for HTTP fetches if available. (If not, PHP's socket streams will be used.)
+ 'connect_timeout' => 5,
'proxy_host' => null,
'proxy_port' => null,
'proxy_user' => null,