From 0b7e26c1bf6bc7a684eb3a214d92d3927306cd8a Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Mon, 16 May 2016 02:56:42 -0400 Subject: [PATCH] Update changelog --- config/defaults.inc.php | 166 ++++++++++++++++++++++++++++++++++++++++++++++++------- 1 files changed, 144 insertions(+), 22 deletions(-) diff --git a/config/defaults.inc.php b/config/defaults.inc.php index b5a6d42..a6ecaea 100644 --- a/config/defaults.inc.php +++ b/config/defaults.inc.php @@ -21,9 +21,10 @@ // Database connection string (DSN) for read+write operations // Format (compatible with PEAR MDB2): db_provider://user:password@host/database -// Currently supported db_providers: mysql, pgsql, sqlite, mssql or sqlsrv +// Currently supported db_providers: mysql, pgsql, sqlite, mssql, sqlsrv, oracle // For examples see http://pear.php.net/manual/en/package.database.mdb2.intro-dsn.php -// NOTE: for SQLite use absolute path: 'sqlite:////full/path/to/sqlite.db?mode=0646' +// NOTE: for SQLite use absolute path (Linux): 'sqlite:////full/path/to/sqlite.db?mode=0646' +// or (Windows): 'sqlite:///C:/full/path/to/sqlite.db' $config['db_dsnw'] = 'mysql://roundcube:@localhost/roundcubemail'; // Database DSN for read-only operations (if empty write database will be used) @@ -50,6 +51,12 @@ // 'cache_thread' => 'r', // 'cache_messages' => 'r', ); + +// It is possible to specify database variable values e.g. some limits here. +// Use them if your server is not MySQL or for better performance. +// For example Roundcube uses max_allowed_packet value (in bytes) +// which limits query size for database cache operations. +$config['db_max_allowed_packet'] = null; // ---------------------------------- @@ -102,6 +109,13 @@ // Log SMTP conversation to <log_dir>/smtp or to syslog $config['smtp_debug'] = false; +// Log Memcache conversation to <log_dir>/memcache or to syslog +$config['memcache_debug'] = false; + +// Log APC conversation to <log_dir>/apc or to syslog +$config['apc_debug'] = false; + + // ---------------------------------- // IMAP // ---------------------------------- @@ -152,6 +166,11 @@ // Otherwise it will be determined automatically $config['imap_delimiter'] = null; +// If you know your imap's folder vendor, you can specify it here. +// Otherwise it will be determined automatically. Use lower-case +// identifiers, e.g. 'dovecot', 'cyrus', 'gmail', 'hmail', 'uw-imap'. +$config['imap_vendor'] = null; + // If IMAP server doesn't support NAMESPACE extension, but you're // using shared folders or personal root folder is non-empty, you'll need to // set these options. All can be strings or arrays of strings. @@ -177,6 +196,11 @@ // Some server configurations (e.g. Courier) doesn't list folders in all namespaces // Enable this option to force listing of folders in all namespaces $config['imap_force_ns'] = false; + +// Some servers return hidden folders (name starting witha dot) +// from user home directory. IMAP RFC does not forbid that. +// Enable this option to hide them and disable possibility to create such. +$config['imap_skip_hidden_folders'] = false; // List of disabled imap extensions. // Use if your IMAP server has broken implementation of some feature @@ -282,6 +306,7 @@ // Lifetime of LDAP cache. Possible units: s, m, h, d, w $config['ldap_cache_ttl'] = '10m'; + // ---------------------------------- // SYSTEM // ---------------------------------- @@ -318,11 +343,13 @@ // Enables possibility to log in using email address from user identities $config['user_aliases'] = false; -// use this folder to store log files (must be writeable for apache user) +// use this folder to store log files +// must be writeable for the user who runs PHP process (Apache user if mod_php is being used) // This is used by the 'file' log driver. $config['log_dir'] = RCUBE_INSTALL_PATH . 'logs/'; -// use this folder to store temp files (must be writeable for apache user) +// use this folder to store temp files +// must be writeable for the user who runs PHP process (Apache user if mod_php is being used) $config['temp_dir'] = RCUBE_INSTALL_PATH . 'temp/'; // expire files in temp_dir after 48 hours @@ -351,6 +378,18 @@ // UPDATE users SET username = LOWER(username); $config['login_lc'] = 2; +// Maximum length (in bytes) of logon username and password. +$config['login_username_maxlen'] = 1024; +$config['login_password_maxlen'] = 1024; + +// Logon username filter. Regular expression for use with preg_match(). +// Example: '/^[a-z0-9_@.-]+$/' +$config['login_username_filter'] = null; + +// Brute-force attacks prevention. +// The value specifies maximum number of failed logon attempts per minute. +$config['login_rate_limit'] = 3; + // Includes should be interpreted as PHP files $config['skin_include_php'] = false; @@ -372,15 +411,40 @@ // Session path. Defaults to PHP session.cookie_path setting. $config['session_path'] = null; -// Backend to use for session storage. Can either be 'db' (default), 'memcache' or 'php' +// Backend to use for session storage. Can either be 'db' (default), 'redis', 'memcache', or 'php' +// // If set to 'memcache', a list of servers need to be specified in 'memcache_hosts' // Make sure the Memcache extension (http://pecl.php.net/package/memcache) version >= 2.0.0 is installed +// +// If set to 'redis', a server needs to be specified in 'redis_hosts' +// Make sure the Redis extension (http://pecl.php.net/package/redis) version >= 2.0.0 is installed +// // Setting this value to 'php' will use the default session save handler configured in PHP $config['session_storage'] = 'db'; // Use these hosts for accessing memcached // Define any number of hosts in the form of hostname:port or unix:///path/to/socket.file $config['memcache_hosts'] = null; // e.g. array( 'localhost:11211', '192.168.1.12:11211', 'unix:///var/tmp/memcached.sock' ); + +// Controls the use of a persistent connections to memcache servers +// See http://php.net/manual/en/memcache.addserver.php +$config['memcache_pconnect'] = true; + +// Value in seconds which will be used for connecting to the daemon +// See http://php.net/manual/en/memcache.addserver.php +$config['memcache_timeout'] = 1; + +// Controls how often a failed server will be retried (value in seconds). +// Setting this parameter to -1 disables automatic retry. +// See http://php.net/manual/en/memcache.addserver.php +$config['memcache_retry_interval'] = 15; + +// use this for accessing redis +// currently only one host is supported. cluster support may come in a future release. +// you can pass 4 fields, host, port, database and password. +// unset fields will be set to the default values host=127.0.0.1, port=6379, database=0, password= (empty) + +$config['redis_hosts'] = null; // e.g. array( 'localhost:6379' ); array( '192.168.1.1:6379:1:secret' ); // check client IP in session authorization $config['ip_check'] = false; @@ -396,10 +460,15 @@ // Possible values: sameorigin|deny. Set to false in order to disable sending them $config['x_frame_options'] = 'sameorigin'; -// this key is used to encrypt the users imap password which is stored -// in the session record (and the client cookie if remember password is enabled). -// please provide a string of exactly 24 chars. +// This key is used for encrypting purposes, like storing of imap password +// in the session. For historical reasons it's called DES_key, but it's used +// with any configured cipher_method (see below). $config['des_key'] = 'rcmail-!24ByteDESkey*Str'; + +// Encryption algorithm. You can use any method supported by openssl. +// Default is set for backward compatibility to DES-EDE3-CBC, +// but you can choose e.g. AES-256-CBC which we consider a better choice. +$config['cipher_method'] = 'DES-EDE3-CBC'; // Automatically add this domain to user names for login // Only for IMAP servers that require full e-mail addresses for login @@ -427,9 +496,10 @@ // For example %n = mail.domain.tld, %t = domain.tld $config['mail_domain'] = ''; -// Password charset. -// Use it if your authentication backend doesn't support UTF-8. -// Defaults to ISO-8859-1 for backward compatibility +// Password character set. +// If your authentication backend supports it, use "UTF-8". +// Otherwise, use the appropriate character set. +// Defaults to ISO-8859-1 for backward compatibility. $config['password_charset'] = 'ISO-8859-1'; // How many seconds must pass between emails sent by a user @@ -438,7 +508,7 @@ // Maximum number of recipients per message. Default: 0 (no limit) $config['max_recipients'] = 0; -// Maximum allowednumber of members of an address group. Default: 0 (no limit) +// Maximum allowed number of members of an address group. Default: 0 (no limit) // If 'max_recipients' is set this value should be less or equal $config['max_group_members'] = 0; @@ -532,6 +602,28 @@ // Note: useful when SMTP server stores sent mail in user mailbox $config['no_save_sent_messages'] = false; +// Improve system security by using special URL with security token. +// This can be set to a number defining token length. Default: 16. +// Warning: This requires http server configuration. Sample: +// RewriteRule ^/roundcubemail/[a-f0-9]{16}/(.*) /roundcubemail/$1 [PT] +// Alias /roundcubemail /var/www/roundcubemail/ +// Note: Use assets_path to not prevent the browser from caching assets +$config['use_secure_urls'] = false; + +// Allows to define separate server/path for image/js/css files +// Warning: If the domain is different cross-domain access to some +// resources need to be allowed +// Sample: +// <FilesMatch ".(eot|ttf|woff)"> +// Header set Access-Control-Allow-Origin "*" +// </FilesMatch> +$config['assets_path'] = ''; + +// While assets_path is for the browser, assets_dir informs +// PHP code about the location of asset files in filesystem +$config['assets_dir'] = ''; + + // ---------------------------------- // PLUGINS // ---------------------------------- @@ -596,7 +688,7 @@ // NOTE: Use folder names with namespace prefix (INBOX. on Courier-IMAP) $config['trash_mbox'] = 'Trash'; -// automatically create the above listed default folders on first login +// automatically create the above listed default folders on user login $config['create_default_folders'] = false; // protect the default folders from renames, deletes, and subscription changes @@ -609,8 +701,6 @@ $config['quota_zero_as_unlimited'] = false; // Make use of the built-in spell checker. It is based on GoogieSpell. -// Since Google only accepts connections over https your PHP installatation -// requires to be compiled with Open SSL support $config['enable_spellcheck'] = true; // Enables spellchecker exceptions dictionary. @@ -618,12 +708,13 @@ $config['spellcheck_dictionary'] = false; // Set the spell checking engine. Possible values: -// - 'googie' - the default +// - 'googie' - the default (also used for connecting to Nox Spell Server, see 'spellcheck_uri' setting) // - 'pspell' - requires the PHP Pspell module and aspell installed // - 'enchant' - requires the PHP Enchant module // - 'atd' - install your own After the Deadline server or check with the people at http://www.afterthedeadline.com before using their API -// Since Google shut down their public spell checking service, you need to -// connect to a Nox Spell Server when using 'googie' here. Therefore specify the 'spellcheck_uri' +// Since Google shut down their public spell checking service, the default settings +// connect to http://spell.roundcube.net which is a hosted service provided by Roundcube. +// You can connect to any other googie-compliant service by setting 'spellcheck_uri' accordingly. $config['spellcheck_engine'] = 'googie'; // For locally installed Nox Spell Server or After the Deadline services, @@ -649,6 +740,10 @@ // Use this char/string to separate recipients when composing a new message $config['recipients_separator'] = ','; + +// Number of lines at the end of a message considered to contain the signature. +// Increase this value if signatures are not properly detected and colored +$config['sig_max_lines'] = 15; // don't let users set pagesize to more than this value if set $config['max_pagesize'] = 200; @@ -738,6 +833,10 @@ // DN and password to bind as before searching for bind DN, if anonymous search is not allowed 'search_bind_dn' => '', 'search_bind_pw' => '', + // Base DN and filter used for resolving the user's domain root DN which feeds the %dc variables + // Leave empty to skip this lookup and derive the root DN from the username domain + 'domain_base_dn' => '', + 'domain_filter' => '', // Optional map of replacement strings => attributes used when binding for an individual address book 'search_bind_attrib' => array(), // e.g. array('%udc' => 'ou') // Default for %dn variable if search doesn't return DN value @@ -768,8 +867,11 @@ 'required_fields' => array('cn', 'sn', 'mail'), 'search_fields' => array('mail', 'cn'), // fields to search in // mapping of contact fields to directory attributes - // for every attribute one can specify the number of values (limit) allowed. - // default is 1, a wildcard * means unlimited + // 1. for every attribute one can specify the number of values (limit) allowed. + // default is 1, a wildcard * means unlimited + // 2. another possible parameter is separator character for composite fields + // 3. it's possible to define field format for write operations, e.g. for date fields + // example: 'birthday:date[YmdHis\\Z]' 'fieldmap' => array( // Roundcube => LDAP:limit 'name' => 'cn', @@ -888,6 +990,10 @@ // Note: For LDAP sources fuzzy_search must be enabled to use 'partial' or 'prefix' mode $config['addressbook_search_mode'] = 0; +// List of fields used on contacts list and for autocompletion searches +// Warning: These are field names not LDAP attributes (see 'fieldmap' setting)! +$config['contactlist_fields'] = array('name', 'firstname', 'surname', 'email'); + // Template of contact entry on the autocompletion list. // You can use contact fields as: name, email, organization, department, etc. // See program/steps/addressbook/func.inc for a list @@ -944,8 +1050,16 @@ $config['compose_extwin'] = false; // compose html formatted messages by default -// 0 - never, 1 - always, 2 - on reply to HTML message, 3 - on forward or reply to HTML message +// 0 - never, +// 1 - always, +// 2 - on reply to HTML message, +// 3 - on forward or reply to HTML message +// 4 - always, except when replying to plain text message $config['htmleditor'] = 0; + +// save copies of compose messages in the browser's local storage +// for recovery in case of browser crashes and session timeout. +$config['compose_save_localstorage'] = true; // show pretty dates as standard $config['prettydate'] = true; @@ -1022,13 +1136,21 @@ // 3 - Forwards and Replies only $config['show_sig'] = 1; +// By default the signature is placed depending on cursor position (reply_mode). +// Sometimes it might be convenient to start the reply on top but keep +// the signature below the quoted text (sig_below = true). +$config['sig_below'] = false; + +// Enables adding of standard separator to the signature +$config['sig_separator'] = true; + // Use MIME encoding (quoted-printable) for 8bit characters in message body $config['force_7bit'] = false; // Defaults of the search field configuration. // The array can contain a per-folder list of header fields which should be considered when searching // The entry with key '*' stands for all folders which do not have a specific list set. -// Please note that folder names should to be in sync with $config['default_folders'] +// Please note that folder names should to be in sync with $config['*_mbox'] options $config['search_mods'] = null; // Example: array('*' => array('subject'=>1, 'from'=>1), 'Sent' => array('subject'=>1, 'to'=>1)); // Defaults of the addressbook search field configuration. -- Gitblit v1.9.1