mirror of
https://github.com/9001/copyparty.git
synced 2026-03-21 23:53:00 +10:00
c6965f0614
can check if the current version has a known vulnerability, with the option to panic and exit if so, and otherwise show a warning in the controlpanel for admins --------- Co-authored-by: ed <s@ocv.me>
52 lines
2.2 KiB
YAML
52 lines
2.2 KiB
YAML
# not actually YAML but lets pretend:
|
|
# -*- mode: yaml -*-
|
|
# vim: ft=yaml:
|
|
|
|
|
|
# put this file in /etc/
|
|
|
|
|
|
[global]
|
|
e2dsa # enable file indexing and filesystem scanning
|
|
e2ts # and enable multimedia indexing
|
|
ansi # and colors in log messages
|
|
|
|
# disable logging to stdout/journalctl and log to a file instead;
|
|
# $LOGS_DIRECTORY is usually /var/log/copyparty (comes from systemd)
|
|
# and copyparty replaces %Y-%m%d with Year-MonthDay, so the
|
|
# full path will be something like /var/log/copyparty/2023-1130.txt
|
|
# (note: enable compression by adding .xz at the end)
|
|
q, lo: $LOGS_DIRECTORY/%Y-%m%d.log
|
|
|
|
# enable version-checker by uncommenting one of the 'vc-url' lines below; this will
|
|
# periodically check if your copyparty version has a known security vulnerability,
|
|
# showing a warning on /?h (control-panel) for all users with permission 'a' or 'A'
|
|
#vc-url: https://api.github.com/repos/9001/copyparty/security-advisories?per_page=9
|
|
#vc-url: https://api.copyparty.eu/advisories
|
|
|
|
vc-age: 3 # how many hours to wait between each version-check
|
|
vc-exit # emergency-exit if a version-check indicates that the current version is vulnerable
|
|
|
|
# p: 80,443,3923 # listen on 80/443 as well (requires CAP_NET_BIND_SERVICE)
|
|
# i: 127.0.0.1 # only allow connections from localhost (reverse-proxies)
|
|
# ftp: 3921 # enable ftp server on port 3921
|
|
# p: 3939 # listen on another port
|
|
# df: 16 # stop accepting uploads if less than 16 GB free disk space
|
|
# ver # show copyparty version in the controlpanel
|
|
# grid # show thumbnails/grid-view by default
|
|
# theme: 2 # monokai
|
|
# name: datasaver # change the server-name that's displayed in the browser
|
|
# stats, nos-dup # enable the prometheus endpoint, but disable the dupes counter (too slow)
|
|
# no-robots, force-js # make it harder for search engines to read your server
|
|
|
|
|
|
[accounts]
|
|
ed: wark # username: password
|
|
|
|
|
|
[/] # create a volume at "/" (the webroot), which will
|
|
/mnt # share the contents of the "/mnt" folder
|
|
accs:
|
|
rw: * # everyone gets read-write access, but
|
|
rwmda: ed # the user "ed" gets read-write-move-delete-admin
|