Commit graph

513 commits

Author SHA1 Message Date
Joas Schilling
f09e4f69d0
fix(backport): Add missing sample config
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-04-03 15:51:29 +02:00
Joas Schilling
cdc27e25d2 feat(security): Allow to opt-out of ratelimit protection, e.g. for testing on CI
Signed-off-by: Joas Schilling <coding@schilljs.com>
2023-04-03 13:10:39 +00:00
Carl Schwan
b141d39944 Allow to disable password policy enforcement for selected groups
Signed-off-by: Carl Schwan <carl@carlschwan.eu>
Co-authored-by: Vincent Petry <vincent@nextcloud.com>
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
2022-07-07 09:27:34 +02:00
blizzz
da4cd47753
Merge pull request #31122 from nextcloud/backport/30945/stable22
[stable22] Background job time windows
2022-03-10 14:53:53 +01:00
blizzz
78b370bd85
Merge pull request #31482 from nextcloud/backport/30111/stable22
[stable22] Add option to disallow creation of local storages
2022-03-10 12:28:59 +01:00
Vincent Petry
fd220bc771 Add option to disallow creation of local storages
Introduce a new config option to prevent web UI admins to create
or edit external storages of type "local".

Signed-off-by: Vincent Petry <vincent@nextcloud.com>
2022-03-07 16:10:25 +00:00
Julien Veyssier
15d60a02a3 allow adding protocol to domains in 'connectivity_check_domains' config
Signed-off-by: Julien Veyssier <eneiluj@posteo.net>
2022-03-07 15:33:07 +00:00
Joas Schilling
ba0134c54f
Allow sysadmins to define a maintenance window where heavier jobs can run
Signed-off-by: Joas Schilling <coding@schilljs.com>
2022-02-22 11:56:17 +01:00
Vincent Petry
806d702458
Merge pull request #30958 from nextcloud/backport/30949/stable22
[stable22] Allow to disable AuthToken v1
2022-02-18 14:34:09 +01:00
Joas Schilling
c612ae78d7 Allow write audit log to syslog and systemdlog
Signed-off-by: Joas Schilling <coding@schilljs.com>
2022-02-16 13:52:21 +00:00
Joas Schilling
83c1d1ef3a
Allow to disable AuthToken v1
Signed-off-by: Joas Schilling <coding@schilljs.com>
2022-02-01 14:31:51 +01:00
Joachim Bauch
d7d47169e4 Prevent loading images that would require too much memory.
For most image formats, the header specifies the width/height.
PHP allocates an image object from that size, even if the actual
image data is much smaller. This image object size is not limited
by the limit configured in PHP.

The memory limit can be configured through "config.php" setting
"preview_max_memory" and defaults to 128 MBytes which should be
enough for most images without filling up all memory.

Signed-off-by: Joachim Bauch <bauch@struktur.de>
2022-01-11 14:49:15 +00:00
Vincent Petry
39381c78a9 Fix background scan doc in config
The background scanner only processes entries with size < 0

Signed-off-by: Vincent Petry <vincent@nextcloud.com>
2021-10-15 08:08:58 +00:00
Daniel Kesselberg
2290dcb3a4 Add documentation for files_no_background_scan
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2021-10-13 15:57:48 +00:00
Vincent Petry
3bd1194526 Add config.php option for transfer ownership
Add option to specify whether to transfer incoming shares by default.

Signed-off-by: Vincent Petry <vincent@nextcloud.com>
2021-09-15 15:01:43 +00:00
Arthur Schiwon
f353dd98f4 make it possible to override the default collation
- allows admins to configure it for edge cases like accent sensitivity

Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2021-09-09 17:41:48 +00:00
John Molakvoæ (skjnldsv)
8b17f317ee Properly support RedisCluster
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2021-07-22 10:52:13 +00:00
John Molakvoæ (skjnldsv)
9d2cf57776 Support redis user password auth and tls encryption
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2021-07-22 10:52:12 +00:00
tobiasKaminsky
718cb09dc9 Disable HEIC image preview provider for performance concerns
Signed-off-by: tobiasKaminsky <tobias@kaminsky.me>
2021-07-21 08:31:31 +00:00
szaimen
35d978c2fc Rename External storages to External storage
Signed-off-by: szaimen <szaimen@e.mail.de>
2021-05-20 12:13:04 +02:00
J0WI
fdd1ff2686 Update cipher defaults
Signed-off-by: J0WI <J0WI@users.noreply.github.com>
2021-03-26 19:39:08 +01:00
Roeland Jago Douma
0c33fc706c
Merge pull request #26007 from nextcloud/docs/config/session_lifetime
Add hint about possible limit when setting a session_lifetime
2021-03-08 19:30:05 +01:00
Julius Härtl
296332efa3
Add hint about possible limit when setting a session_lifetime
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2021-03-08 16:49:30 +01:00
Roeland Jago Douma
4076dfb019 Allow admins to disable the login form
In case they want to not allow this because they use SSO (and do not
want the users to enter their credentials there by accident).

?direct=1 still works.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2021-03-08 15:36:47 +01:00
Sascha Wiswedel
a58cc13e2b fix typo in template directory config
Signed-off-by: Sascha Wiswedel <sascha.wiswedel@nextcloud.com>
2021-02-25 23:21:27 +01:00
Julius Härtl
7e6d69d166
Add templatedirectory config value to let admins have their custom templates by default
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2021-01-28 12:00:20 +01:00
Johannes Leuker
ac88bcbd5f Add 'allow Symlinks' as an option to config.php
Signed-off-by: Johannes Leuker <j.leuker@hosting.de>
2021-01-12 10:38:39 +01:00
rakekniven
543df30174
Change defaultapp to dashboard
Result of discussion at https://help.nextcloud.com/t/enable-dashboard-on-per-user-basis/94872

Code reference:
db86bea18c/lib/private/legacy/OC_Util.php (L1106)

Signed-off-by: rakekniven <mark.ziegler@rakekniven.de>
2021-01-08 09:49:12 +01:00
Roeland Jago Douma
adc4f1a811
Merge pull request #22916 from J0WI/unifiy-links-to-php.net
Unify links to php.net
2020-12-22 09:53:31 +01:00
Roeland Jago Douma
114b472e71
Merge pull request #23319 from nextcloud/fix/argon2-descriptions
Fix Argon2 descriptions
2020-12-21 09:24:07 +01:00
Joas Schilling
15956c20c3
Improve hints for default_phone_region
Signed-off-by: Joas Schilling <coding@schilljs.com>
2020-12-17 09:14:21 +01:00
Arthur Schiwon
d8ad4ef6b5
use a consistent default value for sharing.maxAutocompleteResults
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
2020-12-15 11:53:39 +01:00
Joas Schilling
46b073d7ce
Add a config for default region of phone numbers
Signed-off-by: Joas Schilling <coding@schilljs.com>
2020-12-07 14:19:38 +01:00
MichaIng
ab32344308
Fix Argon2 descriptions
The threads option for the password_hash function does not define the maximum allowed number of CPU threads to be used by the hashing algorithm but the exact number of threads that is used.

Similarly the memory_cost option for the password_hash function does not define the maximum allowed memory to be used by the hashing algorithm, but the exact amount of memory that is used by the hashing table. The minimum value is 8 KiB per thread.

The time_cost option for the password_hash function does not define the allowed time in seconds, but the number of iterations for the hash function.

If the minimum values are understood, the minimum values are used instead.

Signed-off-by: MichaIng <micha@dietpi.com>
2020-10-09 20:18:32 +02:00
Roeland Jago Douma
76a7600e2e
Allow configuring the activity update interval of token
On some systems with a lot of users this creates a lot of extra DB
writes.
Being able to increase this interval helps there.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2020-10-04 09:31:41 +02:00
J0WI
68ce17e59b Unify links to php.net
Update all links to https://www.php.net/

Signed-off-by: J0WI <J0WI@users.noreply.github.com>
2020-09-17 17:40:04 +02:00
Joas Schilling
c8f175e936
Allow to disable share emails
Signed-off-by: Joas Schilling <coding@schilljs.com>
2020-08-19 09:03:58 +02:00
Morris Jobke
7badda361d
Fix default log_rotate_size in config.sample.php
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2020-08-11 14:00:26 +02:00
Morris Jobke
45428e4948
Add config option to enable multibucket preview distribution
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
2020-08-06 22:31:39 +02:00
Daniel Kesselberg
7953a2fa20
Add appstoreurl to config.sample.php.
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
2020-06-23 22:16:27 +02:00
Sascha Wiswedel
a85191330b
clarified trash bin retention by storage shortage override
Signed-off-by: Sascha Wiswedel <sascha.wiswedel@nextcloud.com>
2020-05-04 13:25:05 +02:00
Julius Härtl
9e7f8b85dd
Add config for auto logout after browser inactivity
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2020-04-23 19:12:54 +02:00
Joas Schilling
5e402f8aae
Check all remotes for local access
Signed-off-by: Joas Schilling <coding@schilljs.com>
2020-04-14 18:56:06 +02:00
Julius Härtl
5d27ed5e22
remove Windows config since it is not supported anyways
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2020-04-08 16:31:20 +02:00
Julius Härtl
124b109bc8
Add preview provider for Krita files
Signed-off-by: Julius Härtl <jus@bitgrid.net>
2020-04-08 16:31:20 +02:00
Roeland Jago Douma
53db05a1f6
Start with webauthn
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>
2020-03-31 22:17:07 +02:00
Christoph Wurst
b80ebc9674
Use the short array syntax, everywhere
Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
2020-03-26 16:34:56 +01:00
Roeland Jago Douma
6675f9b403
Merge pull request #17684 from mlatief/support-no-proxy
Add support for GuzzleHTTP 'no' proxy
2020-03-22 19:38:01 +01:00
Sander Ruitenbeek
57415932fd Added IPv6 example
Signed-off-by: Sander Ruitenbeek <sander@getgoing.nl>

Fix typos

Signed-off-by: Sander Ruitenbeek <sander@getgoing.nl>
2020-03-07 00:04:12 +01:00
Mohammed Abdellatif
98d6415264 Add support for GuzzleHTTP 'no' proxy
The custom config allows to setup a proxy URI that is passed to
GuzzleHTTP client as request options. Guzzle has the option to receive
an array of proxies for each URI scheme as well as 'no' key value pair
to provide a list of host names that should not be proxied to.

Guzzle would automatically populate these options with HTTPS_PROXY
and NO_PROXY environment variables. However, when providing a 'proxy'
request option, default values will be overriden and it is required to
explicitly provide the 'no' value if needed.

More info:
http://docs.guzzlephp.org/en/stable/request-options.html#proxy

This commit will add support for a new config 'proxyexclude', which
takes a list of host names to be excluded.

It will also provide 'proxy' request option as an array instead of a
string to Guzzle, and populate 'http' and 'https' URI schemes with
proxy URI, and 'no' with 'proxyexclude' list.

Also, if no 'proxy' is configured, it will leave out 'proxy' request
option, so it won't override Guzzle default values.

Sample config file includes a hint on how to explicitly sync
'proxyexclude' with NO_PROXY, and a note about default values.

Signed-off-by: Mohammed Abdellatif <m.latief@gmail.com>
2020-02-29 19:19:23 +02:00