From: Dan Brown Date: Wed, 6 Oct 2021 12:17:30 +0000 (+0100) Subject: Merge branch 'openid' of https://github.com/jasperweyne/BookStack into jasperweyne... X-Git-Tag: v21.10~1^2~21^2~11 X-Git-Url: http://source.bookstackapp.com/bookstack/commitdiff_plain/193d7fb3fe71a76a43ebc1ccdb617b4b627d1e09?hp=-c Merge branch 'openid' of https://github.com/jasperweyne/BookStack into jasperweyne-openid --- 193d7fb3fe71a76a43ebc1ccdb617b4b627d1e09 diff --combined .env.example.complete index 5eb65c27f,b211ad939..5a586d1d1 --- a/.env.example.complete +++ b/.env.example.complete @@@ -42,14 -42,6 +42,14 @@@ APP_TIMEZONE=UT # overrides can be made. Defaults to disabled. APP_THEME=false +# Trusted Proxies +# Used to indicate trust of systems that proxy to the application so +# certain header values (Such as "X-Forwarded-For") can be used from the +# incoming proxy request to provide origin detail. +# Set to an IP address, or multiple comma seperated IP addresses. +# Can alternatively be set to "*" to trust all proxy addresses. +APP_PROXIES=null + # Database details # Host can contain a port (localhost:3306) or a separate DB_PORT option can be used. DB_HOST=localhost @@@ -59,7 -51,7 +59,7 @@@ DB_USERNAME=database_usernam DB_PASSWORD=database_user_password # Mail system to use -# Can be 'smtp', 'mail' or 'sendmail' +# Can be 'smtp' or 'sendmail' MAIL_DRIVER=smtp # Mail sending options @@@ -203,12 -195,10 +203,12 @@@ LDAP_DN=fals LDAP_PASS=false LDAP_USER_FILTER=false LDAP_VERSION=false +LDAP_START_TLS=false LDAP_TLS_INSECURE=false LDAP_ID_ATTRIBUTE=uid LDAP_EMAIL_ATTRIBUTE=mail LDAP_DISPLAY_NAME_ATTRIBUTE=cn +LDAP_THUMBNAIL_ATTRIBUTE=null LDAP_FOLLOW_REFERRALS=true LDAP_DUMP_USER_DETAILS=false @@@ -231,7 -221,6 +231,7 @@@ SAML2_IDP_x509=nul SAML2_ONELOGIN_OVERRIDES=null SAML2_DUMP_USER_DETAILS=false SAML2_AUTOLOAD_METADATA=false +SAML2_IDP_AUTHNCONTEXT=true # SAML group sync configuration # Refer to https://www.bookstackapp.com/docs/admin/saml2-auth/ @@@ -239,6 -228,14 +239,14 @@@ SAML2_USER_TO_GROUPS=fals SAML2_GROUP_ATTRIBUTE=group SAML2_REMOVE_FROM_GROUPS=false + # OpenID Connect authentication configuration + OPENID_CLIENT_ID=null + OPENID_CLIENT_SECRET=null + OPENID_ISSUER=https://example.com + OPENID_PUBLIC_KEY=file:///my/public.key + OPENID_URL_AUTHORIZE=https://example.com/authorize + OPENID_URL_TOKEN=https://example.com/token + # Disable default third-party services such as Gravatar and Draw.IO # Service-specific options will override this option DISABLE_EXTERNAL_SERVICES=false @@@ -249,36 -246,23 +257,36 @@@ # Example: AVATAR_URL=https://seccdn.libravatar.org/avatar/${hash}?s=${size}&d=identicon AVATAR_URL= -# Enable draw.io integration +# Enable diagrams.net integration # Can simply be true/false to enable/disable the integration. -# Alternatively, It can be URL to the draw.io instance you want to use. +# Alternatively, It can be URL to the diagrams.net instance you want to use. # For URLs, The following URL parameters should be included: embed=1&proto=json&spin=1 DRAWIO=true # Default item listing view -# Used for public visitors and user's without a preference -# Can be 'list' or 'grid' +# Used for public visitors and user's without a preference. +# Can be 'list' or 'grid'. APP_VIEWS_BOOKS=list APP_VIEWS_BOOKSHELVES=grid +APP_VIEWS_BOOKSHELF=grid + +# Use dark mode by default +# Will be overriden by any user/session preference. +APP_DEFAULT_DARK_MODE=false # Page revision limit # Number of page revisions to keep in the system before deleting old revisions. # If set to 'false' a limit will not be enforced. REVISION_LIMIT=50 +# Recycle Bin Lifetime +# The number of days that content will remain in the recycle bin before +# being considered for auto-removal. It is not a guarantee that content will +# be removed after this time. +# Set to 0 for no recycle bin functionality. +# Set to -1 for unlimited recycle bin lifetime. +RECYCLE_BIN_LIFETIME=30 + # Allow