-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathconfig.dist.php
More file actions
136 lines (123 loc) · 3.44 KB
/
config.dist.php
File metadata and controls
136 lines (123 loc) · 3.44 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
<?php
/* database connection details
******************************/
$db['host'] = "127.0.0.1";
$db['user'] = "phpssladmin";
$db['pass'] = "phpssladmin";
$db['name'] = "php-ssl";
$db['port'] = 3306;
$db['ssl'] = false;
/**
* Flag that determines if php-ssl is cconsidered installed.
*
* If false it will load installtion in case SQL connection fails
*
* @var bool
*/
$installed = false;
/**
* php debugging on/off
*
* true = SHOW all php errors
* false = HIDE all php errors
******************************/
$debugging = false;
/**
* manual set session name for auth
* increases security
* optional
*/
$phpsessname = "phpssl";
/**
* Error reporting
*/
ini_set('display_errors', 0);
ini_set('display_startup_errors', 0);
error_reporting(E_ALL ^ E_NOTICE ^ E_STRICT);
/**
* Days before expiration to treat certificates as expire soon.
*
* This is used for cronjob reporting only, for GUI it is overridden by user settings
*
* @var int
*/
$expired_days = 20;
/**
* Days after expiration to report certificates as expired
*
* This is used for cronjob reporting only, for GUI it is overridden by user settings
*
* @var int
*/
$expired_after_days = 7;
/**
* Weather to log all object changes to database.
*
* If selected all changes to object will be written to database. DB might grow significantly.
*
* @var bool
*/
$log_object = true;
/**
* Number of days to retain database backups.
*
* Backups older than this value will be removed by the backup cronjob.
*
* @var int
*/
$backup_retention_period = 30;
/**
* Mail sending parameters - move to database later !
*
* @var StdClass
*/
$mail_settings = new StdClass ();
$mail_settings->mtype = "smtp";
$mail_settings->msecure = "tls";
$mail_settings->mauth = "no";
$mail_settings->mserver = "127.0.0.1";
$mail_settings->mport = 25;
$mail_settings->muser = "";
$mail_settings->mpass = "";
/**
* Mail params - content
*
* @var StdClass
*/
$mail_sender_settings = new StdClass ();
$mail_sender_settings->mail_from = "SSL Certificate check";
$mail_sender_settings->mail_addr = "noreply@mydomain.com";
$mail_sender_settings->email = "php-ssl@ydomain.com"; // help - mail footer
$mail_sender_settings->www = "https://mywebsite.com";
$mail_sender_settings->bcc = ""; // always BCC
$mail_sender_settings->url = "myurl";
/**
* WebAuthn / Passkey settings
*
* Set these explicitly when running behind a reverse proxy that terminates TLS,
* so PHP cannot reliably detect the public origin from $_SERVER.
*
* $webauthn_origin — full public origin: scheme + host (+ port if non-standard)
* e.g. "https://php-ssl.example.com"
* $webauthn_rpid — relying-party ID: the hostname without scheme or port
* e.g. "php-ssl.example.com"
*
* Leave both as empty string to auto-detect from the HTTP request (only works
* when PHP can see the correct scheme via $_SERVER['HTTPS']).
*/
$webauthn_origin = "";
$webauthn_rpid = "";
/**
* Private key encryption keys — one entry per tenant (keyed by tenant ID).
*
* Each value is used to derive a 256-bit AES-GCM key for encrypting stored
* private keys. Use a long random string (32+ chars) per tenant and keep this
* file out of version control.
*
* Example:
* $private_key_encryption_key[1] = 'change-me-to-a-long-random-secret';
* $private_key_encryption_key[2] = 'another-secret-for-tenant-2';
*
* @var array<int, string>
*/
$private_key_encryption_key = [];