├── LICENSE ├── README.md ├── includes ├── 030_php-fpm.conf ├── certbot.conf ├── httpd.conf ├── my.cnf ├── nextcloud.conf ├── php.ini ├── redis.conf ├── requirements.txt ├── root_my.cnf ├── www-crontab └── www.conf ├── install.sh ├── install_docserver.sh ├── optional ├── fstab └── showip.sh ├── pre-install.sh └── sample.conf /LICENSE: -------------------------------------------------------------------------------- 1 | BSD 3-Clause License 2 | 3 | Copyright (c) 2022, Gibran Khan 4 | All rights reserved. 5 | 6 | Redistribution and use in source and binary forms, with or without 7 | modification, are permitted provided that the following conditions are met: 8 | 9 | 1. Redistributions of source code must retain the above copyright notice, this 10 | list of conditions and the following disclaimer. 11 | 12 | 2. Redistributions in binary form must reproduce the above copyright notice, 13 | this list of conditions and the following disclaimer in the documentation 14 | and/or other materials provided with the distribution. 15 | 16 | 3. Neither the name of the copyright holder nor the names of its 17 | contributors may be used to endorse or promote products derived from 18 | this software without specific prior written permission. 19 | 20 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" 21 | AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 22 | IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 23 | DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE 24 | FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 25 | DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 26 | SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER 27 | CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 28 | OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 29 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 30 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # NextCloud on FreeBSD 2 | 3 | Script to automate installation of Nextcloud on FreeBSD14+ and HardenedBSD14+ 4 | The finished installation passes all Nextcloud configuration checks. 5 | This script follows recommended configuration as per https://docs.nextcloud.com/server/stable/admin_manual/installation/system_requirements.html 6 | 7 | ## Requirements 8 | 9 | * Fresh install of FreeBSD 14+ / HardenedBSD 14+ 10 | * Lib32 for integrated DocumentServer support (this is the plugin version) 11 | * ZFS. The pre-installer creates a new boot environment, which is not supported on UFS. 12 | 13 | ## Instructions 14 | 15 | 0. Read the instructions, and the scripts! :) 16 | 1. Clone repository or download release to your machine and extract. 17 | 2. `cd` to folder. 18 | 3. Switch to root by using `su`. 19 | 4. Run `pre_install.sh` as root to create a boot environment and config file before installing, then reboot before moving on. 20 | 5. `su` again after rebooting, and `cd` to the folder. 21 | 6. Open `install.conf` with your favourite editor. 22 | (Note: see https://www.php.net/manual/en/timezones.php for your time zone) 23 | 7. Change the values of variables as required to suite your environment. 24 | 8. Save the file. 25 | 9. Run `install.sh` 26 | 10. Please be patient while the script runs and drink your prefferred beverage. 27 | 11. Enjoy 28 | 29 | **Installs the following:** 30 | 31 | * Nextcloud 30 32 | * Apache 2.4 33 | * MariaDB 11.4 34 | * PHP 8.3 (plus all required php-extensions) 35 | * Redis 36 | * ClamAV 37 | * SSL Certificate (Let's Encrypt) using `certbot` 38 | * Plugin version of the OnlyOffice document server, as a seperate step 39 | 40 | ------------ 41 | 42 | ## Configuration 43 | 44 | * Apache 2.4 + PHP using `php-fpm` 45 | * HTTP/2 over TLS 46 | * TLS1.3 only 47 | * HSTS enabled 48 | * APCu enabled 49 | * Redis enabled (allows transactional file locking) 50 | 51 | ### NextCloud Apps Installed/Activated by default in config 52 | 53 | * Antivirus for Files 54 | * Calendar 55 | * Contacts 56 | * Deck 57 | * Mail 58 | * Notes 59 | * Nextcloud Talk (Spreed) 60 | * Tasks 61 | * External storage support (including `samba` and `ftp`) (Can be disabled independently) 62 | 63 | -------------------------------------------------------------------------------- /includes/030_php-fpm.conf: -------------------------------------------------------------------------------- 1 | 2 | 3 | DirectoryIndex index.php 4 | 5 | 6 | SetHandler "proxy:fcgi://127.0.0.1:9000" 7 | 8 | 9 | -------------------------------------------------------------------------------- /includes/certbot.conf: -------------------------------------------------------------------------------- 1 | 2 | RewriteEngine on 3 | RewriteCond %{SERVER_NAME} =HOST_NAME 4 | RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent] 5 | -------------------------------------------------------------------------------- /includes/httpd.conf: -------------------------------------------------------------------------------- 1 | ServerRoot "/usr/local" 2 | 3 | Listen LISTEN_PORT 4 | 5 | LoadModule mpm_event_module libexec/apache24/mod_mpm_event.so 6 | LoadModule authn_file_module libexec/apache24/mod_authn_file.so 7 | LoadModule authn_core_module libexec/apache24/mod_authn_core.so 8 | LoadModule authz_host_module libexec/apache24/mod_authz_host.so 9 | LoadModule authz_groupfile_module libexec/apache24/mod_authz_groupfile.so 10 | LoadModule authz_user_module libexec/apache24/mod_authz_user.so 11 | LoadModule authz_core_module libexec/apache24/mod_authz_core.so 12 | LoadModule access_compat_module libexec/apache24/mod_access_compat.so 13 | LoadModule auth_basic_module libexec/apache24/mod_auth_basic.so 14 | LoadModule reqtimeout_module libexec/apache24/mod_reqtimeout.so 15 | LoadModule filter_module libexec/apache24/mod_filter.so 16 | LoadModule mime_module libexec/apache24/mod_mime.so 17 | LoadModule log_config_module libexec/apache24/mod_log_config.so 18 | LoadModule env_module libexec/apache24/mod_env.so 19 | LoadModule headers_module libexec/apache24/mod_headers.so 20 | LoadModule setenvif_module libexec/apache24/mod_setenvif.so 21 | LoadModule version_module libexec/apache24/mod_version.so 22 | LoadModule proxy_module libexec/apache24/mod_proxy.so 23 | LoadModule proxy_fcgi_module libexec/apache24/mod_proxy_fcgi.so 24 | LoadModule ssl_module libexec/apache24/mod_ssl.so 25 | LoadModule http2_module libexec/apache24/mod_http2.so 26 | LoadModule unixd_module libexec/apache24/mod_unixd.so 27 | LoadModule status_module libexec/apache24/mod_status.so 28 | LoadModule autoindex_module libexec/apache24/mod_autoindex.so 29 | LoadModule dir_module libexec/apache24/mod_dir.so 30 | LoadModule alias_module libexec/apache24/mod_alias.so 31 | LoadModule rewrite_module libexec/apache24/mod_rewrite.so 32 | LoadModule socache_shmcb_module libexec/apache24/mod_socache_shmcb.so 33 | 34 | 35 | 36 | SetHandler php-script 37 | 38 | DirectoryIndex index.php 39 | 40 | IncludeOptional etc/apache24/modules.d/[0-9][0-9][0-9]_*.conf 41 | 42 | 43 | User www 44 | Group www 45 | 46 | 47 | ServerAdmin EMAIL_ADDRESS 48 | 49 | ServerName IP_ADDRESS 50 | SSL_OFF_Protocols h2 51 | SSL_OFF_H2Direct on 52 | 53 | 54 | AllowOverride none 55 | Require all denied 56 | 57 | 58 | 59 | DirectoryIndex index.html 60 | 61 | 62 | 63 | Require all denied 64 | 65 | 66 | ErrorLog "/var/log/httpd-error.log" 67 | 68 | LogLevel warn 69 | 70 | 71 | 72 | LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined 73 | LogFormat "%h %l %u %t \"%r\" %>s %b" common 74 | 75 | 76 | LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio 77 | 78 | 79 | CustomLog "/var/log/httpd-access.log" common 80 | 81 | 82 | 83 | 84 | 85 | ScriptAlias /cgi-bin/ "/usr/local/www/apache24/cgi-bin/" 86 | 87 | 88 | 89 | 90 | AllowOverride None 91 | Options None 92 | Require all granted 93 | 94 | 95 | 96 | 97 | RequestHeader unset Proxy early 98 | 99 | 100 | 101 | 102 | 103 | TypesConfig etc/apache24/mime.types 104 | 105 | AddType application/x-compress .Z 106 | AddType application/x-gzip .gz .tgz 107 | 108 | AddType application/x-httpd-php-source .phps 109 | AddType application/x-httpd-php .php 110 | 111 | 112 | 113 | 114 | Include etc/apache24/extra/proxy-html.conf 115 | 116 | 117 | 118 | SSLSessionCache "shmcb:/var/run/ssl_scache(512000)" 119 | SSLSessionCacheTimeout 300 120 | SSLRandomSeed startup builtin 121 | SSLRandomSeed connect builtin 122 | 123 | 124 | Include etc/apache24/Includes/*.conf 125 | Include etc/apache24/vhosts/*.conf 126 | -------------------------------------------------------------------------------- /includes/my.cnf: -------------------------------------------------------------------------------- 1 | # 2 | # This group is read both by the client and the server 3 | # use it for options that affect everything, see 4 | # https://mariadb.com/kb/en/configuring-mariadb-with-option-files/#option-groups 5 | # 6 | [client-server] 7 | port=3306 8 | socket=/var/run/mysql/mysql.sock 9 | 10 | # 11 | # include *.cnf from the config directory 12 | # 13 | !includedir /usr/local/etc/mysql/conf.d/ 14 | 15 | [server] 16 | innodb_buffer_pool_size=128M 17 | innodb_flush_log_at_trx_commit=2 18 | innodb_log_buffer_size=32M 19 | innodb_max_dirty_pages_pct=90 20 | innodb_use_native_aio=0 21 | innodb_use_atomic_writes=0 22 | query_cache_type=1 23 | query_cache_limit=2M 24 | query_cache_min_res_unit=2k 25 | query_cache_size=64M 26 | tmp_table_size=64M 27 | max_heap_table_size=64M 28 | slow_query_log=1 29 | slow_query_log_file=/var/log/mysql/slow.log 30 | long_query_time=1 31 | 32 | [client] 33 | default-character-set=utf8mb4 34 | 35 | [mysqld] 36 | character_set_server=utf8mb4 37 | collation_server=utf8mb4_general_ci 38 | transaction_isolation=READ-COMMITTED 39 | log_bin=1 40 | binlog_format=ROW 41 | innodb_file_per_table=1 42 | skip-innodb_doublewrite 43 | -------------------------------------------------------------------------------- /includes/nextcloud.conf: -------------------------------------------------------------------------------- 1 | 2 | DocumentRoot WWW_DIR/HOST_NAME 3 | ServerName HOST_NAME 4 | 5 | SSL_OFF_Protocols h2 6 | SSL_OFF_H2Direct on 7 | SSL_OFF_SSLEngine on 8 | SSL_OFF_SSLProtocol -all +TLSv1.3 9 | SSL_OFF_SSLCertificateFile SSL_DIRECTORY/nextcloud.crt 10 | SSL_OFF_SSLCertificateKeyFile SSL_DIRECTORY/nextcloud.key 11 | 12 | 13 | Require all granted 14 | AllowOverride All 15 | Options FollowSymLinks MultiViews 16 | 17 | Dav off 18 | 19 | 20 | Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains" 21 | 22 | 23 | 24 | -------------------------------------------------------------------------------- /includes/php.ini: -------------------------------------------------------------------------------- 1 | [PHP] 2 | 3 | ;;;;;;;;;;;;;;;;;;; 4 | ; About php.ini ; 5 | ;;;;;;;;;;;;;;;;;;; 6 | ; PHP's initialization file, generally called php.ini, is responsible for 7 | ; configuring many of the aspects of PHP's behavior. 8 | 9 | ; PHP attempts to find and load this configuration from a number of locations. 10 | ; The following is a summary of its search order: 11 | ; 1. SAPI module specific location. 12 | ; 2. The PHPRC environment variable. 13 | ; 3. A number of predefined registry keys on Windows 14 | ; 4. Current working directory (except CLI) 15 | ; 5. The web server's directory (for SAPI modules), or directory of PHP 16 | ; (otherwise in Windows) 17 | ; 6. The directory from the --with-config-file-path compile time option, or the 18 | ; Windows directory (usually C:\windows) 19 | ; See the PHP docs for more specific information. 20 | ; https://php.net/configuration.file 21 | 22 | ; The syntax of the file is extremely simple. Whitespace and lines 23 | ; beginning with a semicolon are silently ignored (as you probably guessed). 24 | ; Section headers (e.g. [Foo]) are also silently ignored, even though 25 | ; they might mean something in the future. 26 | 27 | ; Directives following the section heading [PATH=/www/mysite] only 28 | ; apply to PHP files in the /www/mysite directory. Directives 29 | ; following the section heading [HOST=www.example.com] only apply to 30 | ; PHP files served from www.example.com. Directives set in these 31 | ; special sections cannot be overridden by user-defined INI files or 32 | ; at runtime. Currently, [PATH=] and [HOST=] sections only work under 33 | ; CGI/FastCGI. 34 | ; https://php.net/ini.sections 35 | 36 | ; Directives are specified using the following syntax: 37 | ; directive = value 38 | ; Directive names are *case sensitive* - foo=bar is different from FOO=bar. 39 | ; Directives are variables used to configure PHP or PHP extensions. 40 | ; There is no name validation. If PHP can't find an expected 41 | ; directive because it is not set or is mistyped, a default value will be used. 42 | 43 | ; The value can be a string, a number, a PHP constant (e.g. E_ALL or M_PI), one 44 | ; of the INI constants (On, Off, True, False, Yes, No and None) or an expression 45 | ; (e.g. E_ALL & ~E_NOTICE), a quoted string ("bar"), or a reference to a 46 | ; previously set variable or directive (e.g. ${foo}) 47 | 48 | ; Expressions in the INI file are limited to bitwise operators and parentheses: 49 | ; | bitwise OR 50 | ; ^ bitwise XOR 51 | ; & bitwise AND 52 | ; ~ bitwise NOT 53 | ; ! boolean NOT 54 | 55 | ; Boolean flags can be turned on using the values 1, On, True or Yes. 56 | ; They can be turned off using the values 0, Off, False or No. 57 | 58 | ; An empty string can be denoted by simply not writing anything after the equal 59 | ; sign, or by using the None keyword: 60 | 61 | ; foo = ; sets foo to an empty string 62 | ; foo = None ; sets foo to an empty string 63 | ; foo = "None" ; sets foo to the string 'None' 64 | 65 | ; If you use constants in your value, and these constants belong to a 66 | ; dynamically loaded extension (either a PHP extension or a Zend extension), 67 | ; you may only use these constants *after* the line that loads the extension. 68 | 69 | ;;;;;;;;;;;;;;;;;;; 70 | ; About this file ; 71 | ;;;;;;;;;;;;;;;;;;; 72 | ; PHP comes packaged with two INI files. One that is recommended to be used 73 | ; in production environments and one that is recommended to be used in 74 | ; development environments. 75 | 76 | ; php.ini-production contains settings which hold security, performance and 77 | ; best practices at its core. But please be aware, these settings may break 78 | ; compatibility with older or less security conscience applications. We 79 | ; recommending using the production ini in production and testing environments. 80 | 81 | ; php.ini-development is very similar to its production variant, except it is 82 | ; much more verbose when it comes to errors. We recommend using the 83 | ; development version only in development environments, as errors shown to 84 | ; application users can inadvertently leak otherwise secure information. 85 | 86 | ; This is the php.ini-production INI file. 87 | 88 | ;;;;;;;;;;;;;;;;;;; 89 | ; Quick Reference ; 90 | ;;;;;;;;;;;;;;;;;;; 91 | 92 | ; The following are all the settings which are different in either the production 93 | ; or development versions of the INIs with respect to PHP's default behavior. 94 | ; Please see the actual settings later in the document for more details as to why 95 | ; we recommend these changes in PHP's behavior. 96 | 97 | ; display_errors 98 | ; Default Value: On 99 | ; Development Value: On 100 | ; Production Value: Off 101 | 102 | ; display_startup_errors 103 | ; Default Value: On 104 | ; Development Value: On 105 | ; Production Value: Off 106 | 107 | ; error_reporting 108 | ; Default Value: E_ALL 109 | ; Development Value: E_ALL 110 | ; Production Value: E_ALL & ~E_DEPRECATED & ~E_STRICT 111 | 112 | ; log_errors 113 | ; Default Value: Off 114 | ; Development Value: On 115 | ; Production Value: On 116 | 117 | ; max_input_time 118 | ; Default Value: -1 (Unlimited) 119 | ; Development Value: 60 (60 seconds) 120 | ; Production Value: 60 (60 seconds) 121 | 122 | ; output_buffering 123 | ; Default Value: Off 124 | ; Development Value: 4096 125 | ; Production Value: 4096 126 | 127 | ; register_argc_argv 128 | ; Default Value: On 129 | ; Development Value: Off 130 | ; Production Value: Off 131 | 132 | ; request_order 133 | ; Default Value: None 134 | ; Development Value: "GP" 135 | ; Production Value: "GP" 136 | 137 | ; session.gc_divisor 138 | ; Default Value: 100 139 | ; Development Value: 1000 140 | ; Production Value: 1000 141 | 142 | ; session.sid_bits_per_character 143 | ; Default Value: 4 144 | ; Development Value: 5 145 | ; Production Value: 5 146 | 147 | ; short_open_tag 148 | ; Default Value: On 149 | ; Development Value: Off 150 | ; Production Value: Off 151 | 152 | ; variables_order 153 | ; Default Value: "EGPCS" 154 | ; Development Value: "GPCS" 155 | ; Production Value: "GPCS" 156 | 157 | ; zend.exception_ignore_args 158 | ; Default Value: Off 159 | ; Development Value: Off 160 | ; Production Value: On 161 | 162 | ; zend.exception_string_param_max_len 163 | ; Default Value: 15 164 | ; Development Value: 15 165 | ; Production Value: 0 166 | 167 | ;;;;;;;;;;;;;;;;;;;; 168 | ; php.ini Options ; 169 | ;;;;;;;;;;;;;;;;;;;; 170 | ; Name for user-defined php.ini (.htaccess) files. Default is ".user.ini" 171 | ;user_ini.filename = ".user.ini" 172 | 173 | ; To disable this feature set this option to an empty value 174 | ;user_ini.filename = 175 | 176 | ; TTL for user-defined php.ini files (time-to-live) in seconds. Default is 300 seconds (5 minutes) 177 | ;user_ini.cache_ttl = 300 178 | 179 | ;;;;;;;;;;;;;;;;;;;; 180 | ; Language Options ; 181 | ;;;;;;;;;;;;;;;;;;;; 182 | 183 | ; Enable the PHP scripting language engine under Apache. 184 | ; https://php.net/engine 185 | engine = On 186 | 187 | ; This directive determines whether or not PHP will recognize code between 188 | ; tags as PHP source which should be processed as such. It is 189 | ; generally recommended that should be used and that this feature 190 | ; should be disabled, as enabling it may result in issues when generating XML 191 | ; documents, however this remains supported for backward compatibility reasons. 192 | ; Note that this directive does not control the would work. 332 | ; https://php.net/syntax-highlighting 333 | ;highlight.string = #DD0000 334 | ;highlight.comment = #FF9900 335 | ;highlight.keyword = #007700 336 | ;highlight.default = #0000BB 337 | ;highlight.html = #000000 338 | 339 | ; If enabled, the request will be allowed to complete even if the user aborts 340 | ; the request. Consider enabling it if executing long requests, which may end up 341 | ; being interrupted by the user or a browser timing out. PHP's default behavior 342 | ; is to disable this feature. 343 | ; https://php.net/ignore-user-abort 344 | ;ignore_user_abort = On 345 | 346 | ; Determines the size of the realpath cache to be used by PHP. This value should 347 | ; be increased on systems where PHP opens many files to reflect the quantity of 348 | ; the file operations performed. 349 | ; Note: if open_basedir is set, the cache is disabled 350 | ; https://php.net/realpath-cache-size 351 | ;realpath_cache_size = 4096k 352 | 353 | ; Duration of time, in seconds for which to cache realpath information for a given 354 | ; file or directory. For systems with rarely changing files, consider increasing this 355 | ; value. 356 | ; https://php.net/realpath-cache-ttl 357 | ;realpath_cache_ttl = 120 358 | 359 | ; Enables or disables the circular reference collector. 360 | ; https://php.net/zend.enable-gc 361 | zend.enable_gc = On 362 | 363 | ; If enabled, scripts may be written in encodings that are incompatible with 364 | ; the scanner. CP936, Big5, CP949 and Shift_JIS are the examples of such 365 | ; encodings. To use this feature, mbstring extension must be enabled. 366 | ;zend.multibyte = Off 367 | 368 | ; Allows to set the default encoding for the scripts. This value will be used 369 | ; unless "declare(encoding=...)" directive appears at the top of the script. 370 | ; Only affects if zend.multibyte is set. 371 | ;zend.script_encoding = 372 | 373 | ; Allows to include or exclude arguments from stack traces generated for exceptions. 374 | ; In production, it is recommended to turn this setting on to prohibit the output 375 | ; of sensitive information in stack traces 376 | ; Default Value: Off 377 | ; Development Value: Off 378 | ; Production Value: On 379 | zend.exception_ignore_args = On 380 | 381 | ; Allows setting the maximum string length in an argument of a stringified stack trace 382 | ; to a value between 0 and 1000000. 383 | ; This has no effect when zend.exception_ignore_args is enabled. 384 | ; Default Value: 15 385 | ; Development Value: 15 386 | ; Production Value: 0 387 | ; In production, it is recommended to set this to 0 to reduce the output 388 | ; of sensitive information in stack traces. 389 | zend.exception_string_param_max_len = 0 390 | 391 | ;;;;;;;;;;;;;;;;; 392 | ; Miscellaneous ; 393 | ;;;;;;;;;;;;;;;;; 394 | 395 | ; Decides whether PHP may expose the fact that it is installed on the server 396 | ; (e.g. by adding its signature to the Web server header). It is no security 397 | ; threat in any way, but it makes it possible to determine whether you use PHP 398 | ; on your server or not. 399 | ; https://php.net/expose-php 400 | expose_php = On 401 | 402 | ;;;;;;;;;;;;;;;;;;; 403 | ; Resource Limits ; 404 | ;;;;;;;;;;;;;;;;;;; 405 | 406 | ; Maximum execution time of each script, in seconds 407 | ; https://php.net/max-execution-time 408 | ; Note: This directive is hardcoded to 0 for the CLI SAPI 409 | max_execution_time = 30 410 | 411 | ; Maximum amount of time each script may spend parsing request data. It's a good 412 | ; idea to limit this time on productions servers in order to eliminate unexpectedly 413 | ; long running scripts. 414 | ; Note: This directive is hardcoded to -1 for the CLI SAPI 415 | ; Default Value: -1 (Unlimited) 416 | ; Development Value: 60 (60 seconds) 417 | ; Production Value: 60 (60 seconds) 418 | ; https://php.net/max-input-time 419 | max_input_time = 60 420 | 421 | ; Maximum input variable nesting level 422 | ; https://php.net/max-input-nesting-level 423 | ;max_input_nesting_level = 64 424 | 425 | ; How many GET/POST/COOKIE input variables may be accepted 426 | ;max_input_vars = 1000 427 | 428 | ; How many multipart body parts (combined input variable and file uploads) may 429 | ; be accepted. 430 | ; Default Value: -1 (Sum of max_input_vars and max_file_uploads) 431 | ;max_multipart_body_parts = 1500 432 | 433 | ; Maximum amount of memory a script may consume 434 | ; https://php.net/memory-limit 435 | memory_limit = 512M 436 | 437 | ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; 438 | ; Error handling and logging ; 439 | ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; 440 | 441 | ; This directive informs PHP of which errors, warnings and notices you would like 442 | ; it to take action for. The recommended way of setting values for this 443 | ; directive is through the use of the error level constants and bitwise 444 | ; operators. The error level constants are below here for convenience as well as 445 | ; some common settings and their meanings. 446 | ; By default, PHP is set to take action on all errors, notices and warnings EXCEPT 447 | ; those related to E_NOTICE and E_STRICT, which together cover best practices and 448 | ; recommended coding standards in PHP. For performance reasons, this is the 449 | ; recommend error reporting setting. Your production server shouldn't be wasting 450 | ; resources complaining about best practices and coding standards. That's what 451 | ; development servers and development settings are for. 452 | ; Note: The php.ini-development file has this setting as E_ALL. This 453 | ; means it pretty much reports everything which is exactly what you want during 454 | ; development and early testing. 455 | ; 456 | ; Error Level Constants: 457 | ; E_ALL - All errors and warnings 458 | ; E_ERROR - fatal run-time errors 459 | ; E_RECOVERABLE_ERROR - almost fatal run-time errors 460 | ; E_WARNING - run-time warnings (non-fatal errors) 461 | ; E_PARSE - compile-time parse errors 462 | ; E_NOTICE - run-time notices (these are warnings which often result 463 | ; from a bug in your code, but it's possible that it was 464 | ; intentional (e.g., using an uninitialized variable and 465 | ; relying on the fact it is automatically initialized to an 466 | ; empty string) 467 | ; E_STRICT - run-time notices, enable to have PHP suggest changes 468 | ; to your code which will ensure the best interoperability 469 | ; and forward compatibility of your code 470 | ; E_CORE_ERROR - fatal errors that occur during PHP's initial startup 471 | ; E_CORE_WARNING - warnings (non-fatal errors) that occur during PHP's 472 | ; initial startup 473 | ; E_COMPILE_ERROR - fatal compile-time errors 474 | ; E_COMPILE_WARNING - compile-time warnings (non-fatal errors) 475 | ; E_USER_ERROR - user-generated error message 476 | ; E_USER_WARNING - user-generated warning message 477 | ; E_USER_NOTICE - user-generated notice message 478 | ; E_DEPRECATED - warn about code that will not work in future versions 479 | ; of PHP 480 | ; E_USER_DEPRECATED - user-generated deprecation warnings 481 | ; 482 | ; Common Values: 483 | ; E_ALL (Show all errors, warnings and notices including coding standards.) 484 | ; E_ALL & ~E_NOTICE (Show all errors, except for notices) 485 | ; E_ALL & ~E_NOTICE & ~E_STRICT (Show all errors, except for notices and coding standards warnings.) 486 | ; E_COMPILE_ERROR|E_RECOVERABLE_ERROR|E_ERROR|E_CORE_ERROR (Show only errors) 487 | ; Default Value: E_ALL 488 | ; Development Value: E_ALL 489 | ; Production Value: E_ALL & ~E_DEPRECATED & ~E_STRICT 490 | ; https://php.net/error-reporting 491 | error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT 492 | 493 | ; This directive controls whether or not and where PHP will output errors, 494 | ; notices and warnings too. Error output is very useful during development, but 495 | ; it could be very dangerous in production environments. Depending on the code 496 | ; which is triggering the error, sensitive information could potentially leak 497 | ; out of your application such as database usernames and passwords or worse. 498 | ; For production environments, we recommend logging errors rather than 499 | ; sending them to STDOUT. 500 | ; Possible Values: 501 | ; Off = Do not display any errors 502 | ; stderr = Display errors to STDERR (affects only CGI/CLI binaries!) 503 | ; On or stdout = Display errors to STDOUT 504 | ; Default Value: On 505 | ; Development Value: On 506 | ; Production Value: Off 507 | ; https://php.net/display-errors 508 | display_errors = Off 509 | 510 | ; The display of errors which occur during PHP's startup sequence are handled 511 | ; separately from display_errors. We strongly recommend you set this to 'off' 512 | ; for production servers to avoid leaking configuration details. 513 | ; Default Value: On 514 | ; Development Value: On 515 | ; Production Value: Off 516 | ; https://php.net/display-startup-errors 517 | display_startup_errors = Off 518 | 519 | ; Besides displaying errors, PHP can also log errors to locations such as a 520 | ; server-specific log, STDERR, or a location specified by the error_log 521 | ; directive found below. While errors should not be displayed on productions 522 | ; servers they should still be monitored and logging is a great way to do that. 523 | ; Default Value: Off 524 | ; Development Value: On 525 | ; Production Value: On 526 | ; https://php.net/log-errors 527 | log_errors = On 528 | 529 | ; Do not log repeated messages. Repeated errors must occur in same file on same 530 | ; line unless ignore_repeated_source is set true. 531 | ; https://php.net/ignore-repeated-errors 532 | ignore_repeated_errors = Off 533 | 534 | ; Ignore source of message when ignoring repeated messages. When this setting 535 | ; is On you will not log errors with repeated messages from different files or 536 | ; source lines. 537 | ; https://php.net/ignore-repeated-source 538 | ignore_repeated_source = Off 539 | 540 | ; If this parameter is set to Off, then memory leaks will not be shown (on 541 | ; stdout or in the log). This is only effective in a debug compile, and if 542 | ; error reporting includes E_WARNING in the allowed list 543 | ; https://php.net/report-memleaks 544 | report_memleaks = On 545 | 546 | ; This setting is off by default. 547 | ;report_zend_debug = 0 548 | 549 | ; Turn off normal error reporting and emit XML-RPC error XML 550 | ; https://php.net/xmlrpc-errors 551 | ;xmlrpc_errors = 0 552 | 553 | ; An XML-RPC faultCode 554 | ;xmlrpc_error_number = 0 555 | 556 | ; When PHP displays or logs an error, it has the capability of formatting the 557 | ; error message as HTML for easier reading. This directive controls whether 558 | ; the error message is formatted as HTML or not. 559 | ; Note: This directive is hardcoded to Off for the CLI SAPI 560 | ; https://php.net/html-errors 561 | ;html_errors = On 562 | 563 | ; If html_errors is set to On *and* docref_root is not empty, then PHP 564 | ; produces clickable error messages that direct to a page describing the error 565 | ; or function causing the error in detail. 566 | ; You can download a copy of the PHP manual from https://php.net/docs 567 | ; and change docref_root to the base URL of your local copy including the 568 | ; leading '/'. You must also specify the file extension being used including 569 | ; the dot. PHP's default behavior is to leave these settings empty, in which 570 | ; case no links to documentation are generated. 571 | ; Note: Never use this feature for production boxes. 572 | ; https://php.net/docref-root 573 | ; Examples 574 | ;docref_root = "/phpmanual/" 575 | 576 | ; https://php.net/docref-ext 577 | ;docref_ext = .html 578 | 579 | ; String to output before an error message. PHP's default behavior is to leave 580 | ; this setting blank. 581 | ; https://php.net/error-prepend-string 582 | ; Example: 583 | ;error_prepend_string = "" 584 | 585 | ; String to output after an error message. PHP's default behavior is to leave 586 | ; this setting blank. 587 | ; https://php.net/error-append-string 588 | ; Example: 589 | ;error_append_string = "" 590 | 591 | ; Log errors to specified file. PHP's default behavior is to leave this value 592 | ; empty. 593 | ; https://php.net/error-log 594 | ; Example: 595 | ;error_log = php_errors.log 596 | ; Log errors to syslog (Event Log on Windows). 597 | ;error_log = syslog 598 | 599 | ; The syslog ident is a string which is prepended to every message logged 600 | ; to syslog. Only used when error_log is set to syslog. 601 | ;syslog.ident = php 602 | 603 | ; The syslog facility is used to specify what type of program is logging 604 | ; the message. Only used when error_log is set to syslog. 605 | ;syslog.facility = user 606 | 607 | ; Set this to disable filtering control characters (the default). 608 | ; Some loggers only accept NVT-ASCII, others accept anything that's not 609 | ; control characters. If your logger accepts everything, then no filtering 610 | ; is needed at all. 611 | ; Allowed values are: 612 | ; ascii (all printable ASCII characters and NL) 613 | ; no-ctrl (all characters except control characters) 614 | ; all (all characters) 615 | ; raw (like "all", but messages are not split at newlines) 616 | ; https://php.net/syslog.filter 617 | ;syslog.filter = ascii 618 | 619 | ;windows.show_crt_warning 620 | ; Default value: 0 621 | ; Development value: 0 622 | ; Production value: 0 623 | 624 | ;;;;;;;;;;;;;;;;; 625 | ; Data Handling ; 626 | ;;;;;;;;;;;;;;;;; 627 | 628 | ; The separator used in PHP generated URLs to separate arguments. 629 | ; PHP's default setting is "&". 630 | ; https://php.net/arg-separator.output 631 | ; Example: 632 | ;arg_separator.output = "&" 633 | 634 | ; List of separator(s) used by PHP to parse input URLs into variables. 635 | ; PHP's default setting is "&". 636 | ; NOTE: Every character in this directive is considered as separator! 637 | ; https://php.net/arg-separator.input 638 | ; Example: 639 | ;arg_separator.input = ";&" 640 | 641 | ; This directive determines which super global arrays are registered when PHP 642 | ; starts up. G,P,C,E & S are abbreviations for the following respective super 643 | ; globals: GET, POST, COOKIE, ENV and SERVER. There is a performance penalty 644 | ; paid for the registration of these arrays and because ENV is not as commonly 645 | ; used as the others, ENV is not recommended on productions servers. You 646 | ; can still get access to the environment variables through getenv() should you 647 | ; need to. 648 | ; Default Value: "EGPCS" 649 | ; Development Value: "GPCS" 650 | ; Production Value: "GPCS"; 651 | ; https://php.net/variables-order 652 | variables_order = "GPCS" 653 | 654 | ; This directive determines which super global data (G,P & C) should be 655 | ; registered into the super global array REQUEST. If so, it also determines 656 | ; the order in which that data is registered. The values for this directive 657 | ; are specified in the same manner as the variables_order directive, 658 | ; EXCEPT one. Leaving this value empty will cause PHP to use the value set 659 | ; in the variables_order directive. It does not mean it will leave the super 660 | ; globals array REQUEST empty. 661 | ; Default Value: None 662 | ; Development Value: "GP" 663 | ; Production Value: "GP" 664 | ; https://php.net/request-order 665 | request_order = "GP" 666 | 667 | ; This directive determines whether PHP registers $argv & $argc each time it 668 | ; runs. $argv contains an array of all the arguments passed to PHP when a script 669 | ; is invoked. $argc contains an integer representing the number of arguments 670 | ; that were passed when the script was invoked. These arrays are extremely 671 | ; useful when running scripts from the command line. When this directive is 672 | ; enabled, registering these variables consumes CPU cycles and memory each time 673 | ; a script is executed. For performance reasons, this feature should be disabled 674 | ; on production servers. 675 | ; Note: This directive is hardcoded to On for the CLI SAPI 676 | ; Default Value: On 677 | ; Development Value: Off 678 | ; Production Value: Off 679 | ; https://php.net/register-argc-argv 680 | register_argc_argv = Off 681 | 682 | ; When enabled, the ENV, REQUEST and SERVER variables are created when they're 683 | ; first used (Just In Time) instead of when the script starts. If these 684 | ; variables are not used within a script, having this directive on will result 685 | ; in a performance gain. The PHP directive register_argc_argv must be disabled 686 | ; for this directive to have any effect. 687 | ; https://php.net/auto-globals-jit 688 | auto_globals_jit = On 689 | 690 | ; Whether PHP will read the POST data. 691 | ; This option is enabled by default. 692 | ; Most likely, you won't want to disable this option globally. It causes $_POST 693 | ; and $_FILES to always be empty; the only way you will be able to read the 694 | ; POST data will be through the php://input stream wrapper. This can be useful 695 | ; to proxy requests or to process the POST data in a memory efficient fashion. 696 | ; https://php.net/enable-post-data-reading 697 | ;enable_post_data_reading = Off 698 | 699 | ; Maximum size of POST data that PHP will accept. 700 | ; Its value may be 0 to disable the limit. It is ignored if POST data reading 701 | ; is disabled through enable_post_data_reading. 702 | ; https://php.net/post-max-size 703 | post_max_size = 32M 704 | 705 | ; Automatically add files before PHP document. 706 | ; https://php.net/auto-prepend-file 707 | auto_prepend_file = 708 | 709 | ; Automatically add files after PHP document. 710 | ; https://php.net/auto-append-file 711 | auto_append_file = 712 | 713 | ; By default, PHP will output a media type using the Content-Type header. To 714 | ; disable this, simply set it to be empty. 715 | ; 716 | ; PHP's built-in default media type is set to text/html. 717 | ; https://php.net/default-mimetype 718 | default_mimetype = "text/html" 719 | 720 | ; PHP's default character set is set to UTF-8. 721 | ; https://php.net/default-charset 722 | default_charset = "UTF-8" 723 | 724 | ; PHP internal character encoding is set to empty. 725 | ; If empty, default_charset is used. 726 | ; https://php.net/internal-encoding 727 | ;internal_encoding = 728 | 729 | ; PHP input character encoding is set to empty. 730 | ; If empty, default_charset is used. 731 | ; https://php.net/input-encoding 732 | ;input_encoding = 733 | 734 | ; PHP output character encoding is set to empty. 735 | ; If empty, default_charset is used. 736 | ; See also output_buffer. 737 | ; https://php.net/output-encoding 738 | ;output_encoding = 739 | 740 | ;;;;;;;;;;;;;;;;;;;;;;;;; 741 | ; Paths and Directories ; 742 | ;;;;;;;;;;;;;;;;;;;;;;;;; 743 | 744 | ; UNIX: "/path1:/path2" 745 | ;include_path = ".:/php/includes" 746 | ; 747 | ; Windows: "\path1;\path2" 748 | ;include_path = ".;c:\php\includes" 749 | ; 750 | ; PHP's default setting for include_path is ".;/path/to/php/pear" 751 | ; https://php.net/include-path 752 | 753 | ; The root of the PHP pages, used only if nonempty. 754 | ; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root 755 | ; if you are running php as a CGI under any web server (other than IIS) 756 | ; see documentation for security issues. The alternate is to use the 757 | ; cgi.force_redirect configuration below 758 | ; https://php.net/doc-root 759 | doc_root = 760 | 761 | ; The directory under which PHP opens the script using /~username used only 762 | ; if nonempty. 763 | ; https://php.net/user-dir 764 | user_dir = 765 | 766 | ; Directory in which the loadable extensions (modules) reside. 767 | ; https://php.net/extension-dir 768 | ;extension_dir = "./" 769 | ; On windows: 770 | ;extension_dir = "ext" 771 | 772 | ; Directory where the temporary files should be placed. 773 | ; Defaults to the system default (see sys_get_temp_dir) 774 | ;sys_temp_dir = "/tmp" 775 | 776 | ; Whether or not to enable the dl() function. The dl() function does NOT work 777 | ; properly in multithreaded servers, such as IIS or Zeus, and is automatically 778 | ; disabled on them. 779 | ; https://php.net/enable-dl 780 | enable_dl = Off 781 | 782 | ; cgi.force_redirect is necessary to provide security running PHP as a CGI under 783 | ; most web servers. Left undefined, PHP turns this on by default. You can 784 | ; turn it off here AT YOUR OWN RISK 785 | ; **You CAN safely turn this off for IIS, in fact, you MUST.** 786 | ; https://php.net/cgi.force-redirect 787 | ;cgi.force_redirect = 1 788 | 789 | ; if cgi.nph is enabled it will force cgi to always sent Status: 200 with 790 | ; every request. PHP's default behavior is to disable this feature. 791 | ;cgi.nph = 1 792 | 793 | ; if cgi.force_redirect is turned on, and you are not running under Apache or Netscape 794 | ; (iPlanet) web servers, you MAY need to set an environment variable name that PHP 795 | ; will look for to know it is OK to continue execution. Setting this variable MAY 796 | ; cause security issues, KNOW WHAT YOU ARE DOING FIRST. 797 | ; https://php.net/cgi.redirect-status-env 798 | ;cgi.redirect_status_env = 799 | 800 | ; cgi.fix_pathinfo provides *real* PATH_INFO/PATH_TRANSLATED support for CGI. PHP's 801 | ; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok 802 | ; what PATH_INFO is. For more information on PATH_INFO, see the cgi specs. Setting 803 | ; this to 1 will cause PHP CGI to fix its paths to conform to the spec. A setting 804 | ; of zero causes PHP to behave as before. Default is 1. You should fix your scripts 805 | ; to use SCRIPT_FILENAME rather than PATH_TRANSLATED. 806 | ; https://php.net/cgi.fix-pathinfo 807 | ;cgi.fix_pathinfo=1 808 | 809 | ; if cgi.discard_path is enabled, the PHP CGI binary can safely be placed outside 810 | ; of the web tree and people will not be able to circumvent .htaccess security. 811 | ;cgi.discard_path=1 812 | 813 | ; FastCGI under IIS supports the ability to impersonate 814 | ; security tokens of the calling client. This allows IIS to define the 815 | ; security context that the request runs under. mod_fastcgi under Apache 816 | ; does not currently support this feature (03/17/2002) 817 | ; Set to 1 if running under IIS. Default is zero. 818 | ; https://php.net/fastcgi.impersonate 819 | ;fastcgi.impersonate = 1 820 | 821 | ; Disable logging through FastCGI connection. PHP's default behavior is to enable 822 | ; this feature. 823 | ;fastcgi.logging = 0 824 | 825 | ; cgi.rfc2616_headers configuration option tells PHP what type of headers to 826 | ; use when sending HTTP response code. If set to 0, PHP sends Status: header that 827 | ; is supported by Apache. When this option is set to 1, PHP will send 828 | ; RFC2616 compliant header. 829 | ; Default is zero. 830 | ; https://php.net/cgi.rfc2616-headers 831 | ;cgi.rfc2616_headers = 0 832 | 833 | ; cgi.check_shebang_line controls whether CGI PHP checks for line starting with #! 834 | ; (shebang) at the top of the running script. This line might be needed if the 835 | ; script support running both as stand-alone script and via PHP CGI<. PHP in CGI 836 | ; mode skips this line and ignores its content if this directive is turned on. 837 | ; https://php.net/cgi.check-shebang-line 838 | ;cgi.check_shebang_line=1 839 | 840 | ;;;;;;;;;;;;;;;; 841 | ; File Uploads ; 842 | ;;;;;;;;;;;;;;;; 843 | 844 | ; Whether to allow HTTP file uploads. 845 | ; https://php.net/file-uploads 846 | file_uploads = On 847 | 848 | ; Temporary directory for HTTP uploaded files (will use system default if not 849 | ; specified). 850 | ; https://php.net/upload-tmp-dir 851 | ;upload_tmp_dir = 852 | 853 | ; Maximum allowed size for uploaded files. 854 | ; https://php.net/upload-max-filesize 855 | upload_max_filesize = 25M 856 | 857 | ; Maximum number of files that can be uploaded via a single request 858 | max_file_uploads = 40 859 | 860 | ;;;;;;;;;;;;;;;;;; 861 | ; Fopen wrappers ; 862 | ;;;;;;;;;;;;;;;;;; 863 | 864 | ; Whether to allow the treatment of URLs (like http:// or ftp://) as files. 865 | ; https://php.net/allow-url-fopen 866 | allow_url_fopen = On 867 | 868 | ; Whether to allow include/require to open URLs (like https:// or ftp://) as files. 869 | ; https://php.net/allow-url-include 870 | allow_url_include = Off 871 | 872 | ; Define the anonymous ftp password (your email address). PHP's default setting 873 | ; for this is empty. 874 | ; https://php.net/from 875 | ;from="john@doe.com" 876 | 877 | ; Define the User-Agent string. PHP's default setting for this is empty. 878 | ; https://php.net/user-agent 879 | ;user_agent="PHP" 880 | 881 | ; Default timeout for socket based streams (seconds) 882 | ; https://php.net/default-socket-timeout 883 | default_socket_timeout = 60 884 | 885 | ; If your scripts have to deal with files from Macintosh systems, 886 | ; or you are running on a Mac and need to deal with files from 887 | ; unix or win32 systems, setting this flag will cause PHP to 888 | ; automatically detect the EOL character in those files so that 889 | ; fgets() and file() will work regardless of the source of the file. 890 | ; https://php.net/auto-detect-line-endings 891 | ;auto_detect_line_endings = Off 892 | 893 | ;;;;;;;;;;;;;;;;;;;;;; 894 | ; Dynamic Extensions ; 895 | ;;;;;;;;;;;;;;;;;;;;;; 896 | 897 | ; If you wish to have an extension loaded automatically, use the following 898 | ; syntax: 899 | ; 900 | ; extension=modulename 901 | ; 902 | ; For example: 903 | ; 904 | ; extension=mysqli 905 | ; 906 | ; When the extension library to load is not located in the default extension 907 | ; directory, You may specify an absolute path to the library file: 908 | ; 909 | ; extension=/path/to/extension/mysqli.so 910 | ; 911 | ; Note : The syntax used in previous PHP versions ('extension=.so' and 912 | ; 'extension='php_.dll') is supported for legacy reasons and may be 913 | ; deprecated in a future PHP major version. So, when it is possible, please 914 | ; move to the new ('extension=) syntax. 915 | ; 916 | ; Notes for Windows environments : 917 | ; 918 | ; - Many DLL files are located in the ext/ 919 | ; extension folders as well as the separate PECL DLL download. 920 | ; Be sure to appropriately set the extension_dir directive. 921 | ; 922 | ;extension=bz2 923 | 924 | ; The ldap extension must be before curl if OpenSSL 1.0.2 and OpenLDAP is used 925 | ; otherwise it results in segfault when unloading after using SASL. 926 | ; See https://github.com/php/php-src/issues/8620 for more info. 927 | ;extension=ldap 928 | 929 | ;extension=curl 930 | ;extension=ffi 931 | ;extension=ftp 932 | ;extension=fileinfo 933 | ;extension=gd 934 | ;extension=gettext 935 | ;extension=gmp 936 | ;extension=intl 937 | ;extension=imap 938 | ;extension=mbstring 939 | ;extension=exif ; Must be after mbstring as it depends on it 940 | ;extension=mysqli 941 | ;extension=oci8_12c ; Use with Oracle Database 12c Instant Client 942 | ;extension=oci8_19 ; Use with Oracle Database 19 Instant Client 943 | ;extension=odbc 944 | ;extension=openssl 945 | ;extension=pdo_firebird 946 | ;extension=pdo_mysql 947 | ;extension=pdo_oci 948 | ;extension=pdo_odbc 949 | ;extension=pdo_pgsql 950 | ;extension=pdo_sqlite 951 | ;extension=pgsql 952 | ;extension=shmop 953 | 954 | ; The MIBS data available in the PHP distribution must be installed. 955 | ; See https://www.php.net/manual/en/snmp.installation.php 956 | ;extension=snmp 957 | 958 | ;extension=soap 959 | ;extension=sockets 960 | ;extension=sodium 961 | ;extension=sqlite3 962 | ;extension=tidy 963 | ;extension=xsl 964 | ;extension=zip 965 | 966 | ;zend_extension=opcache 967 | 968 | ;;;;;;;;;;;;;;;;;;; 969 | ; Module Settings ; 970 | ;;;;;;;;;;;;;;;;;;; 971 | 972 | [CLI Server] 973 | ; Whether the CLI web server uses ANSI color coding in its terminal output. 974 | cli_server.color = On 975 | 976 | [Date] 977 | ; Defines the default timezone used by the date functions 978 | ; https://php.net/date.timezone 979 | date.timezone = MYTIMEZONE 980 | 981 | ; https://php.net/date.default-latitude 982 | ;date.default_latitude = 31.7667 983 | 984 | ; https://php.net/date.default-longitude 985 | ;date.default_longitude = 35.2333 986 | 987 | ; https://php.net/date.sunrise-zenith 988 | ;date.sunrise_zenith = 90.833333 989 | 990 | ; https://php.net/date.sunset-zenith 991 | ;date.sunset_zenith = 90.833333 992 | 993 | [filter] 994 | ; https://php.net/filter.default 995 | ;filter.default = unsafe_raw 996 | 997 | ; https://php.net/filter.default-flags 998 | ;filter.default_flags = 999 | 1000 | [iconv] 1001 | ; Use of this INI entry is deprecated, use global input_encoding instead. 1002 | ; If empty, default_charset or input_encoding or iconv.input_encoding is used. 1003 | ; The precedence is: default_charset < input_encoding < iconv.input_encoding 1004 | ;iconv.input_encoding = 1005 | 1006 | ; Use of this INI entry is deprecated, use global internal_encoding instead. 1007 | ; If empty, default_charset or internal_encoding or iconv.internal_encoding is used. 1008 | ; The precedence is: default_charset < internal_encoding < iconv.internal_encoding 1009 | ;iconv.internal_encoding = 1010 | 1011 | ; Use of this INI entry is deprecated, use global output_encoding instead. 1012 | ; If empty, default_charset or output_encoding or iconv.output_encoding is used. 1013 | ; The precedence is: default_charset < output_encoding < iconv.output_encoding 1014 | ; To use an output encoding conversion, iconv's output handler must be set 1015 | ; otherwise output encoding conversion cannot be performed. 1016 | ;iconv.output_encoding = 1017 | 1018 | [imap] 1019 | ; rsh/ssh logins are disabled by default. Use this INI entry if you want to 1020 | ; enable them. Note that the IMAP library does not filter mailbox names before 1021 | ; passing them to rsh/ssh command, thus passing untrusted data to this function 1022 | ; with rsh/ssh enabled is insecure. 1023 | ;imap.enable_insecure_rsh=0 1024 | 1025 | [intl] 1026 | ;intl.default_locale = 1027 | ; This directive allows you to produce PHP errors when some error 1028 | ; happens within intl functions. The value is the level of the error produced. 1029 | ; Default is 0, which does not produce any errors. 1030 | ;intl.error_level = E_WARNING 1031 | ;intl.use_exceptions = 0 1032 | 1033 | [sqlite3] 1034 | ; Directory pointing to SQLite3 extensions 1035 | ; https://php.net/sqlite3.extension-dir 1036 | ;sqlite3.extension_dir = 1037 | 1038 | ; SQLite defensive mode flag (only available from SQLite 3.26+) 1039 | ; When the defensive flag is enabled, language features that allow ordinary 1040 | ; SQL to deliberately corrupt the database file are disabled. This forbids 1041 | ; writing directly to the schema, shadow tables (eg. FTS data tables), or 1042 | ; the sqlite_dbpage virtual table. 1043 | ; https://www.sqlite.org/c3ref/c_dbconfig_defensive.html 1044 | ; (for older SQLite versions, this flag has no use) 1045 | ;sqlite3.defensive = 1 1046 | 1047 | [Pcre] 1048 | ; PCRE library backtracking limit. 1049 | ; https://php.net/pcre.backtrack-limit 1050 | ;pcre.backtrack_limit=100000 1051 | 1052 | ; PCRE library recursion limit. 1053 | ; Please note that if you set this value to a high number you may consume all 1054 | ; the available process stack and eventually crash PHP (due to reaching the 1055 | ; stack size limit imposed by the Operating System). 1056 | ; https://php.net/pcre.recursion-limit 1057 | ;pcre.recursion_limit=100000 1058 | 1059 | ; Enables or disables JIT compilation of patterns. This requires the PCRE 1060 | ; library to be compiled with JIT support. 1061 | pcre.jit=1 1062 | 1063 | [Pdo] 1064 | ; Whether to pool ODBC connections. Can be one of "strict", "relaxed" or "off" 1065 | ; https://php.net/pdo-odbc.connection-pooling 1066 | ;pdo_odbc.connection_pooling=strict 1067 | 1068 | [Pdo_mysql] 1069 | ; Default socket name for local MySQL connects. If empty, uses the built-in 1070 | ; MySQL defaults. 1071 | pdo_mysql.default_socket= 1072 | 1073 | [Phar] 1074 | ; https://php.net/phar.readonly 1075 | ;phar.readonly = On 1076 | 1077 | ; https://php.net/phar.require-hash 1078 | ;phar.require_hash = On 1079 | 1080 | ;phar.cache_list = 1081 | 1082 | [mail function] 1083 | ; For Win32 only. 1084 | ; https://php.net/smtp 1085 | SMTP = localhost 1086 | ; https://php.net/smtp-port 1087 | smtp_port = 25 1088 | 1089 | ; For Win32 only. 1090 | ; https://php.net/sendmail-from 1091 | ;sendmail_from = me@example.com 1092 | 1093 | ; For Unix only. You may supply arguments as well (default: "sendmail -t -i"). 1094 | ; https://php.net/sendmail-path 1095 | ;sendmail_path = 1096 | 1097 | ; Force the addition of the specified parameters to be passed as extra parameters 1098 | ; to the sendmail binary. These parameters will always replace the value of 1099 | ; the 5th parameter to mail(). 1100 | ;mail.force_extra_parameters = 1101 | 1102 | ; Add X-PHP-Originating-Script: that will include uid of the script followed by the filename 1103 | mail.add_x_header = Off 1104 | 1105 | ; Use mixed LF and CRLF line separators to keep compatibility with some 1106 | ; RFC 2822 non conformant MTA. 1107 | mail.mixed_lf_and_crlf = Off 1108 | 1109 | ; The path to a log file that will log all mail() calls. Log entries include 1110 | ; the full path of the script, line number, To address and headers. 1111 | ;mail.log = 1112 | ; Log mail to syslog (Event Log on Windows). 1113 | ;mail.log = syslog 1114 | 1115 | [ODBC] 1116 | ; https://php.net/odbc.default-db 1117 | ;odbc.default_db = Not yet implemented 1118 | 1119 | ; https://php.net/odbc.default-user 1120 | ;odbc.default_user = Not yet implemented 1121 | 1122 | ; https://php.net/odbc.default-pw 1123 | ;odbc.default_pw = Not yet implemented 1124 | 1125 | ; Controls the ODBC cursor model. 1126 | ; Default: SQL_CURSOR_STATIC (default). 1127 | ;odbc.default_cursortype 1128 | 1129 | ; Allow or prevent persistent links. 1130 | ; https://php.net/odbc.allow-persistent 1131 | odbc.allow_persistent = On 1132 | 1133 | ; Check that a connection is still valid before reuse. 1134 | ; https://php.net/odbc.check-persistent 1135 | odbc.check_persistent = On 1136 | 1137 | ; Maximum number of persistent links. -1 means no limit. 1138 | ; https://php.net/odbc.max-persistent 1139 | odbc.max_persistent = -1 1140 | 1141 | ; Maximum number of links (persistent + non-persistent). -1 means no limit. 1142 | ; https://php.net/odbc.max-links 1143 | odbc.max_links = -1 1144 | 1145 | ; Handling of LONG fields. Returns number of bytes to variables. 0 means 1146 | ; passthru. 1147 | ; https://php.net/odbc.defaultlrl 1148 | odbc.defaultlrl = 4096 1149 | 1150 | ; Handling of binary data. 0 means passthru, 1 return as is, 2 convert to char. 1151 | ; See the documentation on odbc_binmode and odbc_longreadlen for an explanation 1152 | ; of odbc.defaultlrl and odbc.defaultbinmode 1153 | ; https://php.net/odbc.defaultbinmode 1154 | odbc.defaultbinmode = 1 1155 | 1156 | [MySQLi] 1157 | 1158 | ; Maximum number of persistent links. -1 means no limit. 1159 | ; https://php.net/mysqli.max-persistent 1160 | mysqli.max_persistent = -1 1161 | 1162 | ; Allow accessing, from PHP's perspective, local files with LOAD DATA statements 1163 | ; https://php.net/mysqli.allow_local_infile 1164 | ;mysqli.allow_local_infile = On 1165 | 1166 | ; It allows the user to specify a folder where files that can be sent via LOAD DATA 1167 | ; LOCAL can exist. It is ignored if mysqli.allow_local_infile is enabled. 1168 | ;mysqli.local_infile_directory = 1169 | 1170 | ; Allow or prevent persistent links. 1171 | ; https://php.net/mysqli.allow-persistent 1172 | mysqli.allow_persistent = On 1173 | 1174 | ; Maximum number of links. -1 means no limit. 1175 | ; https://php.net/mysqli.max-links 1176 | mysqli.max_links = -1 1177 | 1178 | ; Default port number for mysqli_connect(). If unset, mysqli_connect() will use 1179 | ; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the 1180 | ; compile-time value defined MYSQL_PORT (in that order). Win32 will only look 1181 | ; at MYSQL_PORT. 1182 | ; https://php.net/mysqli.default-port 1183 | mysqli.default_port = 3306 1184 | 1185 | ; Default socket name for local MySQL connects. If empty, uses the built-in 1186 | ; MySQL defaults. 1187 | ; https://php.net/mysqli.default-socket 1188 | mysqli.default_socket = 1189 | 1190 | ; Default host for mysqli_connect() (doesn't apply in safe mode). 1191 | ; https://php.net/mysqli.default-host 1192 | mysqli.default_host = 1193 | 1194 | ; Default user for mysqli_connect() (doesn't apply in safe mode). 1195 | ; https://php.net/mysqli.default-user 1196 | mysqli.default_user = 1197 | 1198 | ; Default password for mysqli_connect() (doesn't apply in safe mode). 1199 | ; Note that this is generally a *bad* idea to store passwords in this file. 1200 | ; *Any* user with PHP access can run 'echo get_cfg_var("mysqli.default_pw") 1201 | ; and reveal this password! And of course, any users with read access to this 1202 | ; file will be able to reveal the password as well. 1203 | ; https://php.net/mysqli.default-pw 1204 | mysqli.default_pw = 1205 | 1206 | ; Allow or prevent reconnect 1207 | mysqli.reconnect = Off 1208 | 1209 | ; If this option is enabled, closing a persistent connection will rollback 1210 | ; any pending transactions of this connection, before it is put back 1211 | ; into the persistent connection pool. 1212 | ;mysqli.rollback_on_cached_plink = Off 1213 | 1214 | [mysqlnd] 1215 | ; Enable / Disable collection of general statistics by mysqlnd which can be 1216 | ; used to tune and monitor MySQL operations. 1217 | mysqlnd.collect_statistics = On 1218 | 1219 | ; Enable / Disable collection of memory usage statistics by mysqlnd which can be 1220 | ; used to tune and monitor MySQL operations. 1221 | mysqlnd.collect_memory_statistics = Off 1222 | 1223 | ; Records communication from all extensions using mysqlnd to the specified log 1224 | ; file. 1225 | ; https://php.net/mysqlnd.debug 1226 | ;mysqlnd.debug = 1227 | 1228 | ; Defines which queries will be logged. 1229 | ;mysqlnd.log_mask = 0 1230 | 1231 | ; Default size of the mysqlnd memory pool, which is used by result sets. 1232 | ;mysqlnd.mempool_default_size = 16000 1233 | 1234 | ; Size of a pre-allocated buffer used when sending commands to MySQL in bytes. 1235 | ;mysqlnd.net_cmd_buffer_size = 2048 1236 | 1237 | ; Size of a pre-allocated buffer used for reading data sent by the server in 1238 | ; bytes. 1239 | ;mysqlnd.net_read_buffer_size = 32768 1240 | 1241 | ; Timeout for network requests in seconds. 1242 | ;mysqlnd.net_read_timeout = 31536000 1243 | 1244 | ; SHA-256 Authentication Plugin related. File with the MySQL server public RSA 1245 | ; key. 1246 | ;mysqlnd.sha256_server_public_key = 1247 | 1248 | [OCI8] 1249 | 1250 | ; Connection: Enables privileged connections using external 1251 | ; credentials (OCI_SYSOPER, OCI_SYSDBA) 1252 | ; https://php.net/oci8.privileged-connect 1253 | ;oci8.privileged_connect = Off 1254 | 1255 | ; Connection: The maximum number of persistent OCI8 connections per 1256 | ; process. Using -1 means no limit. 1257 | ; https://php.net/oci8.max-persistent 1258 | ;oci8.max_persistent = -1 1259 | 1260 | ; Connection: The maximum number of seconds a process is allowed to 1261 | ; maintain an idle persistent connection. Using -1 means idle 1262 | ; persistent connections will be maintained forever. 1263 | ; https://php.net/oci8.persistent-timeout 1264 | ;oci8.persistent_timeout = -1 1265 | 1266 | ; Connection: The number of seconds that must pass before issuing a 1267 | ; ping during oci_pconnect() to check the connection validity. When 1268 | ; set to 0, each oci_pconnect() will cause a ping. Using -1 disables 1269 | ; pings completely. 1270 | ; https://php.net/oci8.ping-interval 1271 | ;oci8.ping_interval = 60 1272 | 1273 | ; Connection: Set this to a user chosen connection class to be used 1274 | ; for all pooled server requests with Oracle Database Resident 1275 | ; Connection Pooling (DRCP). To use DRCP, this value should be set to 1276 | ; the same string for all web servers running the same application, 1277 | ; the database pool must be configured, and the connection string must 1278 | ; specify to use a pooled server. 1279 | ;oci8.connection_class = 1280 | 1281 | ; High Availability: Using On lets PHP receive Fast Application 1282 | ; Notification (FAN) events generated when a database node fails. The 1283 | ; database must also be configured to post FAN events. 1284 | ;oci8.events = Off 1285 | 1286 | ; Tuning: This option enables statement caching, and specifies how 1287 | ; many statements to cache. Using 0 disables statement caching. 1288 | ; https://php.net/oci8.statement-cache-size 1289 | ;oci8.statement_cache_size = 20 1290 | 1291 | ; Tuning: Enables row prefetching and sets the default number of 1292 | ; rows that will be fetched automatically after statement execution. 1293 | ; https://php.net/oci8.default-prefetch 1294 | ;oci8.default_prefetch = 100 1295 | 1296 | ; Tuning: Sets the amount of LOB data that is internally returned from 1297 | ; Oracle Database when an Oracle LOB locator is initially retrieved as 1298 | ; part of a query. Setting this can improve performance by reducing 1299 | ; round-trips. 1300 | ; https://php.net/oci8.prefetch-lob-size 1301 | ; oci8.prefetch_lob_size = 0 1302 | 1303 | ; Compatibility. Using On means oci_close() will not close 1304 | ; oci_connect() and oci_new_connect() connections. 1305 | ; https://php.net/oci8.old-oci-close-semantics 1306 | ;oci8.old_oci_close_semantics = Off 1307 | 1308 | [PostgreSQL] 1309 | ; Allow or prevent persistent links. 1310 | ; https://php.net/pgsql.allow-persistent 1311 | pgsql.allow_persistent = On 1312 | 1313 | ; Detect broken persistent links always with pg_pconnect(). 1314 | ; Auto reset feature requires a little overheads. 1315 | ; https://php.net/pgsql.auto-reset-persistent 1316 | pgsql.auto_reset_persistent = Off 1317 | 1318 | ; Maximum number of persistent links. -1 means no limit. 1319 | ; https://php.net/pgsql.max-persistent 1320 | pgsql.max_persistent = -1 1321 | 1322 | ; Maximum number of links (persistent+non persistent). -1 means no limit. 1323 | ; https://php.net/pgsql.max-links 1324 | pgsql.max_links = -1 1325 | 1326 | ; Ignore PostgreSQL backends Notice message or not. 1327 | ; Notice message logging require a little overheads. 1328 | ; https://php.net/pgsql.ignore-notice 1329 | pgsql.ignore_notice = 0 1330 | 1331 | ; Log PostgreSQL backends Notice message or not. 1332 | ; Unless pgsql.ignore_notice=0, module cannot log notice message. 1333 | ; https://php.net/pgsql.log-notice 1334 | pgsql.log_notice = 0 1335 | 1336 | [bcmath] 1337 | ; Number of decimal digits for all bcmath functions. 1338 | ; https://php.net/bcmath.scale 1339 | bcmath.scale = 0 1340 | 1341 | [browscap] 1342 | ; https://php.net/browscap 1343 | ;browscap = extra/browscap.ini 1344 | 1345 | [Session] 1346 | ; Handler used to store/retrieve data. 1347 | ; https://php.net/session.save-handler 1348 | session.save_handler = files 1349 | 1350 | ; Argument passed to save_handler. In the case of files, this is the path 1351 | ; where data files are stored. Note: Windows users have to change this 1352 | ; variable in order to use PHP's session functions. 1353 | ; 1354 | ; The path can be defined as: 1355 | ; 1356 | ; session.save_path = "N;/path" 1357 | ; 1358 | ; where N is an integer. Instead of storing all the session files in 1359 | ; /path, what this will do is use subdirectories N-levels deep, and 1360 | ; store the session data in those directories. This is useful if 1361 | ; your OS has problems with many files in one directory, and is 1362 | ; a more efficient layout for servers that handle many sessions. 1363 | ; 1364 | ; NOTE 1: PHP will not create this directory structure automatically. 1365 | ; You can use the script in the ext/session dir for that purpose. 1366 | ; NOTE 2: See the section on garbage collection below if you choose to 1367 | ; use subdirectories for session storage 1368 | ; 1369 | ; The file storage module creates files using mode 600 by default. 1370 | ; You can change that by using 1371 | ; 1372 | ; session.save_path = "N;MODE;/path" 1373 | ; 1374 | ; where MODE is the octal representation of the mode. Note that this 1375 | ; does not overwrite the process's umask. 1376 | ; https://php.net/session.save-path 1377 | ;session.save_path = "/tmp" 1378 | 1379 | ; Whether to use strict session mode. 1380 | ; Strict session mode does not accept an uninitialized session ID, and 1381 | ; regenerates the session ID if the browser sends an uninitialized session ID. 1382 | ; Strict mode protects applications from session fixation via a session adoption 1383 | ; vulnerability. It is disabled by default for maximum compatibility, but 1384 | ; enabling it is encouraged. 1385 | ; https://wiki.php.net/rfc/strict_sessions 1386 | session.use_strict_mode = 0 1387 | 1388 | ; Whether to use cookies. 1389 | ; https://php.net/session.use-cookies 1390 | session.use_cookies = 1 1391 | 1392 | ; https://php.net/session.cookie-secure 1393 | ;session.cookie_secure = 1394 | 1395 | ; This option forces PHP to fetch and use a cookie for storing and maintaining 1396 | ; the session id. We encourage this operation as it's very helpful in combating 1397 | ; session hijacking when not specifying and managing your own session id. It is 1398 | ; not the be-all and end-all of session hijacking defense, but it's a good start. 1399 | ; https://php.net/session.use-only-cookies 1400 | session.use_only_cookies = 1 1401 | 1402 | ; Name of the session (used as cookie name). 1403 | ; https://php.net/session.name 1404 | session.name = PHPSESSID 1405 | 1406 | ; Initialize session on request startup. 1407 | ; https://php.net/session.auto-start 1408 | session.auto_start = 0 1409 | 1410 | ; Lifetime in seconds of cookie or, if 0, until browser is restarted. 1411 | ; https://php.net/session.cookie-lifetime 1412 | session.cookie_lifetime = 0 1413 | 1414 | ; The path for which the cookie is valid. 1415 | ; https://php.net/session.cookie-path 1416 | session.cookie_path = / 1417 | 1418 | ; The domain for which the cookie is valid. 1419 | ; https://php.net/session.cookie-domain 1420 | session.cookie_domain = 1421 | 1422 | ; Whether or not to add the httpOnly flag to the cookie, which makes it 1423 | ; inaccessible to browser scripting languages such as JavaScript. 1424 | ; https://php.net/session.cookie-httponly 1425 | session.cookie_httponly = 1426 | 1427 | ; Add SameSite attribute to cookie to help mitigate Cross-Site Request Forgery (CSRF/XSRF) 1428 | ; Current valid values are "Strict", "Lax" or "None". When using "None", 1429 | ; make sure to include the quotes, as `none` is interpreted like `false` in ini files. 1430 | ; https://tools.ietf.org/html/draft-west-first-party-cookies-07 1431 | session.cookie_samesite = 1432 | 1433 | ; Handler used to serialize data. php is the standard serializer of PHP. 1434 | ; https://php.net/session.serialize-handler 1435 | session.serialize_handler = php 1436 | 1437 | ; Defines the probability that the 'garbage collection' process is started on every 1438 | ; session initialization. The probability is calculated by using gc_probability/gc_divisor, 1439 | ; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. 1440 | ; Default Value: 1 1441 | ; Development Value: 1 1442 | ; Production Value: 1 1443 | ; https://php.net/session.gc-probability 1444 | session.gc_probability = 1 1445 | 1446 | ; Defines the probability that the 'garbage collection' process is started on every 1447 | ; session initialization. The probability is calculated by using gc_probability/gc_divisor, 1448 | ; e.g. 1/100 means there is a 1% chance that the GC process starts on each request. 1449 | ; For high volume production servers, using a value of 1000 is a more efficient approach. 1450 | ; Default Value: 100 1451 | ; Development Value: 1000 1452 | ; Production Value: 1000 1453 | ; https://php.net/session.gc-divisor 1454 | session.gc_divisor = 1000 1455 | 1456 | ; After this number of seconds, stored data will be seen as 'garbage' and 1457 | ; cleaned up by the garbage collection process. 1458 | ; https://php.net/session.gc-maxlifetime 1459 | session.gc_maxlifetime = 1440 1460 | 1461 | ; NOTE: If you are using the subdirectory option for storing session files 1462 | ; (see session.save_path above), then garbage collection does *not* 1463 | ; happen automatically. You will need to do your own garbage 1464 | ; collection through a shell script, cron entry, or some other method. 1465 | ; For example, the following script is the equivalent of setting 1466 | ; session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes): 1467 | ; find /path/to/sessions -cmin +24 -type f | xargs rm 1468 | 1469 | ; Check HTTP Referer to invalidate externally stored URLs containing ids. 1470 | ; HTTP_REFERER has to contain this substring for the session to be 1471 | ; considered as valid. 1472 | ; https://php.net/session.referer-check 1473 | session.referer_check = 1474 | 1475 | ; Set to {nocache,private,public,} to determine HTTP caching aspects 1476 | ; or leave this empty to avoid sending anti-caching headers. 1477 | ; https://php.net/session.cache-limiter 1478 | session.cache_limiter = nocache 1479 | 1480 | ; Document expires after n minutes. 1481 | ; https://php.net/session.cache-expire 1482 | session.cache_expire = 180 1483 | 1484 | ; trans sid support is disabled by default. 1485 | ; Use of trans sid may risk your users' security. 1486 | ; Use this option with caution. 1487 | ; - User may send URL contains active session ID 1488 | ; to other person via. email/irc/etc. 1489 | ; - URL that contains active session ID may be stored 1490 | ; in publicly accessible computer. 1491 | ; - User may access your site with the same session ID 1492 | ; always using URL stored in browser's history or bookmarks. 1493 | ; https://php.net/session.use-trans-sid 1494 | session.use_trans_sid = 0 1495 | 1496 | ; Set session ID character length. This value could be between 22 to 256. 1497 | ; Shorter length than default is supported only for compatibility reason. 1498 | ; Users should use 32 or more chars. 1499 | ; https://php.net/session.sid-length 1500 | ; Default Value: 32 1501 | ; Development Value: 26 1502 | ; Production Value: 26 1503 | session.sid_length = 26 1504 | 1505 | ; The URL rewriter will look for URLs in a defined set of HTML tags. 1506 | ;
is special; if you include them here, the rewriter will 1507 | ; add a hidden field with the info which is otherwise appended 1508 | ; to URLs. tag's action attribute URL will not be modified 1509 | ; unless it is specified. 1510 | ; Note that all valid entries require a "=", even if no value follows. 1511 | ; Default Value: "a=href,area=href,frame=src,form=" 1512 | ; Development Value: "a=href,area=href,frame=src,form=" 1513 | ; Production Value: "a=href,area=href,frame=src,form=" 1514 | ; https://php.net/url-rewriter.tags 1515 | session.trans_sid_tags = "a=href,area=href,frame=src,form=" 1516 | 1517 | ; URL rewriter does not rewrite absolute URLs by default. 1518 | ; To enable rewrites for absolute paths, target hosts must be specified 1519 | ; at RUNTIME. i.e. use ini_set() 1520 | ; tags is special. PHP will check action attribute's URL regardless 1521 | ; of session.trans_sid_tags setting. 1522 | ; If no host is defined, HTTP_HOST will be used for allowed host. 1523 | ; Example value: php.net,www.php.net,wiki.php.net 1524 | ; Use "," for multiple hosts. No spaces are allowed. 1525 | ; Default Value: "" 1526 | ; Development Value: "" 1527 | ; Production Value: "" 1528 | ;session.trans_sid_hosts="" 1529 | 1530 | ; Define how many bits are stored in each character when converting 1531 | ; the binary hash data to something readable. 1532 | ; Possible values: 1533 | ; 4 (4 bits: 0-9, a-f) 1534 | ; 5 (5 bits: 0-9, a-v) 1535 | ; 6 (6 bits: 0-9, a-z, A-Z, "-", ",") 1536 | ; Default Value: 4 1537 | ; Development Value: 5 1538 | ; Production Value: 5 1539 | ; https://php.net/session.hash-bits-per-character 1540 | session.sid_bits_per_character = 5 1541 | 1542 | ; Enable upload progress tracking in $_SESSION 1543 | ; Default Value: On 1544 | ; Development Value: On 1545 | ; Production Value: On 1546 | ; https://php.net/session.upload-progress.enabled 1547 | ;session.upload_progress.enabled = On 1548 | 1549 | ; Cleanup the progress information as soon as all POST data has been read 1550 | ; (i.e. upload completed). 1551 | ; Default Value: On 1552 | ; Development Value: On 1553 | ; Production Value: On 1554 | ; https://php.net/session.upload-progress.cleanup 1555 | ;session.upload_progress.cleanup = On 1556 | 1557 | ; A prefix used for the upload progress key in $_SESSION 1558 | ; Default Value: "upload_progress_" 1559 | ; Development Value: "upload_progress_" 1560 | ; Production Value: "upload_progress_" 1561 | ; https://php.net/session.upload-progress.prefix 1562 | ;session.upload_progress.prefix = "upload_progress_" 1563 | 1564 | ; The index name (concatenated with the prefix) in $_SESSION 1565 | ; containing the upload progress information 1566 | ; Default Value: "PHP_SESSION_UPLOAD_PROGRESS" 1567 | ; Development Value: "PHP_SESSION_UPLOAD_PROGRESS" 1568 | ; Production Value: "PHP_SESSION_UPLOAD_PROGRESS" 1569 | ; https://php.net/session.upload-progress.name 1570 | ;session.upload_progress.name = "PHP_SESSION_UPLOAD_PROGRESS" 1571 | 1572 | ; How frequently the upload progress should be updated. 1573 | ; Given either in percentages (per-file), or in bytes 1574 | ; Default Value: "1%" 1575 | ; Development Value: "1%" 1576 | ; Production Value: "1%" 1577 | ; https://php.net/session.upload-progress.freq 1578 | ;session.upload_progress.freq = "1%" 1579 | 1580 | ; The minimum delay between updates, in seconds 1581 | ; Default Value: 1 1582 | ; Development Value: 1 1583 | ; Production Value: 1 1584 | ; https://php.net/session.upload-progress.min-freq 1585 | ;session.upload_progress.min_freq = "1" 1586 | 1587 | ; Only write session data when session data is changed. Enabled by default. 1588 | ; https://php.net/session.lazy-write 1589 | ;session.lazy_write = On 1590 | 1591 | [Assertion] 1592 | ; Switch whether to compile assertions at all (to have no overhead at run-time) 1593 | ; -1: Do not compile at all 1594 | ; 0: Jump over assertion at run-time 1595 | ; 1: Execute assertions 1596 | ; Changing from or to a negative value is only possible in php.ini! (For turning assertions on and off at run-time, see assert.active, when zend.assertions = 1) 1597 | ; Default Value: 1 1598 | ; Development Value: 1 1599 | ; Production Value: -1 1600 | ; https://php.net/zend.assertions 1601 | zend.assertions = -1 1602 | 1603 | ; Assert(expr); active by default. 1604 | ; https://php.net/assert.active 1605 | ;assert.active = On 1606 | 1607 | ; Throw an AssertionError on failed assertions 1608 | ; https://php.net/assert.exception 1609 | ;assert.exception = On 1610 | 1611 | ; Issue a PHP warning for each failed assertion. (Overridden by assert.exception if active) 1612 | ; https://php.net/assert.warning 1613 | ;assert.warning = On 1614 | 1615 | ; Don't bail out by default. 1616 | ; https://php.net/assert.bail 1617 | ;assert.bail = Off 1618 | 1619 | ; User-function to be called if an assertion fails. 1620 | ; https://php.net/assert.callback 1621 | ;assert.callback = 0 1622 | 1623 | [COM] 1624 | ; path to a file containing GUIDs, IIDs or filenames of files with TypeLibs 1625 | ; https://php.net/com.typelib-file 1626 | ;com.typelib_file = 1627 | 1628 | ; allow Distributed-COM calls 1629 | ; https://php.net/com.allow-dcom 1630 | ;com.allow_dcom = true 1631 | 1632 | ; autoregister constants of a component's typelib on com_load() 1633 | ; https://php.net/com.autoregister-typelib 1634 | ;com.autoregister_typelib = true 1635 | 1636 | ; register constants casesensitive 1637 | ; https://php.net/com.autoregister-casesensitive 1638 | ;com.autoregister_casesensitive = false 1639 | 1640 | ; show warnings on duplicate constant registrations 1641 | ; https://php.net/com.autoregister-verbose 1642 | ;com.autoregister_verbose = true 1643 | 1644 | ; The default character set code-page to use when passing strings to and from COM objects. 1645 | ; Default: system ANSI code page 1646 | ;com.code_page= 1647 | 1648 | ; The version of the .NET framework to use. The value of the setting are the first three parts 1649 | ; of the framework's version number, separated by dots, and prefixed with "v", e.g. "v4.0.30319". 1650 | ;com.dotnet_version= 1651 | 1652 | [mbstring] 1653 | ; language for internal character representation. 1654 | ; This affects mb_send_mail() and mbstring.detect_order. 1655 | ; https://php.net/mbstring.language 1656 | ;mbstring.language = Japanese 1657 | 1658 | ; Use of this INI entry is deprecated, use global internal_encoding instead. 1659 | ; internal/script encoding. 1660 | ; Some encoding cannot work as internal encoding. (e.g. SJIS, BIG5, ISO-2022-*) 1661 | ; If empty, default_charset or internal_encoding or iconv.internal_encoding is used. 1662 | ; The precedence is: default_charset < internal_encoding < iconv.internal_encoding 1663 | ;mbstring.internal_encoding = 1664 | 1665 | ; Use of this INI entry is deprecated, use global input_encoding instead. 1666 | ; http input encoding. 1667 | ; mbstring.encoding_translation = On is needed to use this setting. 1668 | ; If empty, default_charset or input_encoding or mbstring.input is used. 1669 | ; The precedence is: default_charset < input_encoding < mbstring.http_input 1670 | ; https://php.net/mbstring.http-input 1671 | ;mbstring.http_input = 1672 | 1673 | ; Use of this INI entry is deprecated, use global output_encoding instead. 1674 | ; http output encoding. 1675 | ; mb_output_handler must be registered as output buffer to function. 1676 | ; If empty, default_charset or output_encoding or mbstring.http_output is used. 1677 | ; The precedence is: default_charset < output_encoding < mbstring.http_output 1678 | ; To use an output encoding conversion, mbstring's output handler must be set 1679 | ; otherwise output encoding conversion cannot be performed. 1680 | ; https://php.net/mbstring.http-output 1681 | ;mbstring.http_output = 1682 | 1683 | ; enable automatic encoding translation according to 1684 | ; mbstring.internal_encoding setting. Input chars are 1685 | ; converted to internal encoding by setting this to On. 1686 | ; Note: Do _not_ use automatic encoding translation for 1687 | ; portable libs/applications. 1688 | ; https://php.net/mbstring.encoding-translation 1689 | ;mbstring.encoding_translation = Off 1690 | 1691 | ; automatic encoding detection order. 1692 | ; "auto" detect order is changed according to mbstring.language 1693 | ; https://php.net/mbstring.detect-order 1694 | ;mbstring.detect_order = auto 1695 | 1696 | ; substitute_character used when character cannot be converted 1697 | ; one from another 1698 | ; https://php.net/mbstring.substitute-character 1699 | ;mbstring.substitute_character = none 1700 | 1701 | ; Enable strict encoding detection. 1702 | ;mbstring.strict_detection = Off 1703 | 1704 | ; This directive specifies the regex pattern of content types for which mb_output_handler() 1705 | ; is activated. 1706 | ; Default: mbstring.http_output_conv_mimetypes=^(text/|application/xhtml\+xml) 1707 | ;mbstring.http_output_conv_mimetypes= 1708 | 1709 | ; This directive specifies maximum stack depth for mbstring regular expressions. It is similar 1710 | ; to the pcre.recursion_limit for PCRE. 1711 | ;mbstring.regex_stack_limit=100000 1712 | 1713 | ; This directive specifies maximum retry count for mbstring regular expressions. It is similar 1714 | ; to the pcre.backtrack_limit for PCRE. 1715 | ;mbstring.regex_retry_limit=1000000 1716 | 1717 | [gd] 1718 | ; Tell the jpeg decode to ignore warnings and try to create 1719 | ; a gd image. The warning will then be displayed as notices 1720 | ; disabled by default 1721 | ; https://php.net/gd.jpeg-ignore-warning 1722 | ;gd.jpeg_ignore_warning = 1 1723 | 1724 | [exif] 1725 | ; Exif UNICODE user comments are handled as UCS-2BE/UCS-2LE and JIS as JIS. 1726 | ; With mbstring support this will automatically be converted into the encoding 1727 | ; given by corresponding encode setting. When empty mbstring.internal_encoding 1728 | ; is used. For the decode settings you can distinguish between motorola and 1729 | ; intel byte order. A decode setting cannot be empty. 1730 | ; https://php.net/exif.encode-unicode 1731 | ;exif.encode_unicode = ISO-8859-15 1732 | 1733 | ; https://php.net/exif.decode-unicode-motorola 1734 | ;exif.decode_unicode_motorola = UCS-2BE 1735 | 1736 | ; https://php.net/exif.decode-unicode-intel 1737 | ;exif.decode_unicode_intel = UCS-2LE 1738 | 1739 | ; https://php.net/exif.encode-jis 1740 | ;exif.encode_jis = 1741 | 1742 | ; https://php.net/exif.decode-jis-motorola 1743 | ;exif.decode_jis_motorola = JIS 1744 | 1745 | ; https://php.net/exif.decode-jis-intel 1746 | ;exif.decode_jis_intel = JIS 1747 | 1748 | [Tidy] 1749 | ; The path to a default tidy configuration file to use when using tidy 1750 | ; https://php.net/tidy.default-config 1751 | ;tidy.default_config = /usr/local/lib/php/default.tcfg 1752 | 1753 | ; Should tidy clean and repair output automatically? 1754 | ; WARNING: Do not use this option if you are generating non-html content 1755 | ; such as dynamic images 1756 | ; https://php.net/tidy.clean-output 1757 | tidy.clean_output = Off 1758 | 1759 | [soap] 1760 | ; Enables or disables WSDL caching feature. 1761 | ; https://php.net/soap.wsdl-cache-enabled 1762 | soap.wsdl_cache_enabled=1 1763 | 1764 | ; Sets the directory name where SOAP extension will put cache files. 1765 | ; https://php.net/soap.wsdl-cache-dir 1766 | soap.wsdl_cache_dir="/tmp" 1767 | 1768 | ; (time to live) Sets the number of second while cached file will be used 1769 | ; instead of original one. 1770 | ; https://php.net/soap.wsdl-cache-ttl 1771 | soap.wsdl_cache_ttl=86400 1772 | 1773 | ; Sets the size of the cache limit. (Max. number of WSDL files to cache) 1774 | soap.wsdl_cache_limit = 5 1775 | 1776 | [sysvshm] 1777 | ; A default size of the shared memory segment 1778 | ;sysvshm.init_mem = 10000 1779 | 1780 | [ldap] 1781 | ; Sets the maximum number of open links or -1 for unlimited. 1782 | ldap.max_links = -1 1783 | 1784 | [dba] 1785 | ;dba.default_handler= 1786 | 1787 | [opcache] 1788 | ; Determines if Zend OPCache is enabled 1789 | opcache.enable=1 1790 | 1791 | ; Determines if Zend OPCache is enabled for the CLI version of PHP 1792 | opcache.enable_cli=1 1793 | 1794 | ; The OPcache shared memory storage size. 1795 | opcache.memory_consumption=256M 1796 | 1797 | ; The amount of memory for interned strings in Mbytes. 1798 | opcache.interned_strings_buffer=32 1799 | 1800 | ; The maximum number of keys (scripts) in the OPcache hash table. 1801 | ; Only numbers between 200 and 1000000 are allowed. 1802 | opcache.max_accelerated_files=10000 1803 | 1804 | ; The maximum percentage of "wasted" memory until a restart is scheduled. 1805 | ;opcache.max_wasted_percentage=5 1806 | 1807 | ; When this directive is enabled, the OPcache appends the current working 1808 | ; directory to the script key, thus eliminating possible collisions between 1809 | ; files with the same name (basename). Disabling the directive improves 1810 | ; performance, but may break existing applications. 1811 | ;opcache.use_cwd=1 1812 | 1813 | ; When disabled, you must reset the OPcache manually or restart the 1814 | ; webserver for changes to the filesystem to take effect. 1815 | ;opcache.validate_timestamps=1 1816 | 1817 | ; How often (in seconds) to check file timestamps for changes to the shared 1818 | ; memory storage allocation. ("1" means validate once per second, but only 1819 | ; once per request. "0" means always validate) 1820 | opcache.revalidate_freq=2 1821 | 1822 | ; Enables or disables file search in include_path optimization 1823 | ;opcache.revalidate_path=0 1824 | 1825 | ; If disabled, all PHPDoc comments are dropped from the code to reduce the 1826 | ; size of the optimized code. 1827 | opcache.save_comments=1 1828 | 1829 | ; If enabled, compilation warnings (including notices and deprecations) will 1830 | ; be recorded and replayed each time a file is included. Otherwise, compilation 1831 | ; warnings will only be emitted when the file is first cached. 1832 | ;opcache.record_warnings=0 1833 | 1834 | ; Allow file existence override (file_exists, etc.) performance feature. 1835 | ;opcache.enable_file_override=0 1836 | 1837 | ; A bitmask, where each bit enables or disables the appropriate OPcache 1838 | ; passes 1839 | ;opcache.optimization_level=0x7FFFBFFF 1840 | 1841 | ;opcache.dups_fix=0 1842 | 1843 | ; The location of the OPcache blacklist file (wildcards allowed). 1844 | ; Each OPcache blacklist file is a text file that holds the names of files 1845 | ; that should not be accelerated. The file format is to add each filename 1846 | ; to a new line. The filename may be a full path or just a file prefix 1847 | ; (i.e., /var/www/x blacklists all the files and directories in /var/www 1848 | ; that start with 'x'). Line starting with a ; are ignored (comments). 1849 | ;opcache.blacklist_filename= 1850 | 1851 | ; Allows exclusion of large files from being cached. By default all files 1852 | ; are cached. 1853 | ;opcache.max_file_size=0 1854 | 1855 | ; Check the cache checksum each N requests. 1856 | ; The default value of "0" means that the checks are disabled. 1857 | ;opcache.consistency_checks=0 1858 | 1859 | ; How long to wait (in seconds) for a scheduled restart to begin if the cache 1860 | ; is not being accessed. 1861 | ;opcache.force_restart_timeout=180 1862 | 1863 | ; OPcache error_log file name. Empty string assumes "stderr". 1864 | ;opcache.error_log= 1865 | 1866 | ; All OPcache errors go to the Web server log. 1867 | ; By default, only fatal errors (level 0) or errors (level 1) are logged. 1868 | ; You can also enable warnings (level 2), info messages (level 3) or 1869 | ; debug messages (level 4). 1870 | ;opcache.log_verbosity_level=1 1871 | 1872 | ; Preferred Shared Memory back-end. Leave empty and let the system decide. 1873 | ;opcache.preferred_memory_model= 1874 | 1875 | ; Protect the shared memory from unexpected writing during script execution. 1876 | ; Useful for internal debugging only. 1877 | ;opcache.protect_memory=0 1878 | 1879 | ; Allows calling OPcache API functions only from PHP scripts which path is 1880 | ; started from specified string. The default "" means no restriction 1881 | ;opcache.restrict_api= 1882 | 1883 | ; Mapping base of shared memory segments (for Windows only). All the PHP 1884 | ; processes have to map shared memory into the same address space. This 1885 | ; directive allows to manually fix the "Unable to reattach to base address" 1886 | ; errors. 1887 | ;opcache.mmap_base= 1888 | 1889 | ; Facilitates multiple OPcache instances per user (for Windows only). All PHP 1890 | ; processes with the same cache ID and user share an OPcache instance. 1891 | ;opcache.cache_id= 1892 | 1893 | ; Enables and sets the second level cache directory. 1894 | ; It should improve performance when SHM memory is full, at server restart or 1895 | ; SHM reset. The default "" disables file based caching. 1896 | ;opcache.file_cache= 1897 | 1898 | ; Enables or disables opcode caching in shared memory. 1899 | ;opcache.file_cache_only=0 1900 | 1901 | ; Enables or disables checksum validation when script loaded from file cache. 1902 | ;opcache.file_cache_consistency_checks=1 1903 | 1904 | ; Implies opcache.file_cache_only=1 for a certain process that failed to 1905 | ; reattach to the shared memory (for Windows only). Explicitly enabled file 1906 | ; cache is required. 1907 | ;opcache.file_cache_fallback=1 1908 | 1909 | ; Enables or disables copying of PHP code (text segment) into HUGE PAGES. 1910 | ; Under certain circumstances (if only a single global PHP process is 1911 | ; started from which all others fork), this can increase performance 1912 | ; by a tiny amount because TLB misses are reduced. On the other hand, this 1913 | ; delays PHP startup, increases memory usage and degrades performance 1914 | ; under memory pressure - use with care. 1915 | ; Requires appropriate OS configuration. 1916 | ;opcache.huge_code_pages=0 1917 | 1918 | opcache.jit = 1255 1919 | opcache.jit_buffer_size = 8M 1920 | 1921 | ; Validate cached file permissions. 1922 | ;opcache.validate_permission=0 1923 | 1924 | ; Prevent name collisions in chroot'ed environment. 1925 | ;opcache.validate_root=0 1926 | 1927 | ; If specified, it produces opcode dumps for debugging different stages of 1928 | ; optimizations. 1929 | ;opcache.opt_debug_level=0 1930 | 1931 | ; Specifies a PHP script that is going to be compiled and executed at server 1932 | ; start-up. 1933 | ; https://php.net/opcache.preload 1934 | ;opcache.preload= 1935 | 1936 | ; Preloading code as root is not allowed for security reasons. This directive 1937 | ; facilitates to let the preloading to be run as another user. 1938 | ; https://php.net/opcache.preload_user 1939 | ;opcache.preload_user= 1940 | 1941 | ; Prevents caching files that are less than this number of seconds old. It 1942 | ; protects from caching of incompletely updated files. In case all file updates 1943 | ; on your site are atomic, you may increase performance by setting it to "0". 1944 | ;opcache.file_update_protection=2 1945 | 1946 | ; Absolute path used to store shared lockfiles (for *nix only). 1947 | ;opcache.lockfile_path=/tmp 1948 | 1949 | [curl] 1950 | ; A default value for the CURLOPT_CAINFO option. This is required to be an 1951 | ; absolute path. 1952 | ;curl.cainfo = 1953 | 1954 | [openssl] 1955 | ; The location of a Certificate Authority (CA) file on the local filesystem 1956 | ; to use when verifying the identity of SSL/TLS peers. Most users should 1957 | ; not specify a value for this directive as PHP will attempt to use the 1958 | ; OS-managed cert stores in its absence. If specified, this value may still 1959 | ; be overridden on a per-stream basis via the "cafile" SSL stream context 1960 | ; option. 1961 | ;openssl.cafile= 1962 | 1963 | ; If openssl.cafile is not specified or if the CA file is not found, the 1964 | ; directory pointed to by openssl.capath is searched for a suitable 1965 | ; certificate. This value must be a correctly hashed certificate directory. 1966 | ; Most users should not specify a value for this directive as PHP will 1967 | ; attempt to use the OS-managed cert stores in its absence. If specified, 1968 | ; this value may still be overridden on a per-stream basis via the "capath" 1969 | ; SSL stream context option. 1970 | ;openssl.capath= 1971 | 1972 | [ffi] 1973 | ; FFI API restriction. Possible values: 1974 | ; "preload" - enabled in CLI scripts and preloaded files (default) 1975 | ; "false" - always disabled 1976 | ; "true" - always enabled 1977 | ;ffi.enable=preload 1978 | 1979 | ; List of headers files to preload, wildcard patterns allowed. 1980 | ;ffi.preload= 1981 | ; 1982 | [APCu] 1983 | apc.enable_cli=1 1984 | -------------------------------------------------------------------------------- /includes/requirements.txt: -------------------------------------------------------------------------------- 1 | sudo 2 | git 3 | gnupg 4 | nano 5 | vim 6 | apache24 7 | clamav 8 | ffmpeg 9 | mariadb114-server 10 | redis 11 | sendmail 12 | php83 13 | php83-bcmath 14 | php83-bz2 15 | php83-ctype 16 | php83-curl 17 | php83-dom 18 | php83-exif 19 | php83-fileinfo 20 | php83-filter 21 | php83-ftp 22 | php83-gd 23 | php83-gmp 24 | php83-iconv 25 | php83-imap 26 | php83-intl 27 | php83-ldap 28 | php83-mbstring 29 | php83-opcache 30 | php83-pcntl 31 | php83-pdo 32 | php83-pdo_mysql 33 | php83-pecl-APCu 34 | php83-pecl-imagick 35 | php83-pecl-redis 36 | php83-pecl-smbclient 37 | php83-phar 38 | php83-posix 39 | php83-session 40 | php83-sodium 41 | php83-simplexml 42 | php83-sysvsem 43 | php83-xml 44 | php83-xmlreader 45 | php83-xmlwriter 46 | php83-xsl 47 | php83-zip 48 | php83-zlib 49 | -------------------------------------------------------------------------------- /includes/root_my.cnf: -------------------------------------------------------------------------------- 1 | # MySQL client config file 2 | [client] 3 | password=DB_ROOT_PASSWORD 4 | -------------------------------------------------------------------------------- /includes/www-crontab: -------------------------------------------------------------------------------- 1 | */5 * * * * /usr/local/bin/php -f WWW_DIR/HOST_NAME/cron.php -------------------------------------------------------------------------------- /includes/www.conf: -------------------------------------------------------------------------------- 1 | ; Start a new pool named 'www'. 2 | ; the variable $pool can be used in any directive and will be replaced by the 3 | ; pool name ('www' here) 4 | [www] 5 | 6 | ; Per pool prefix 7 | ; It only applies on the following directives: 8 | ; - 'access.log' 9 | ; - 'slowlog' 10 | ; - 'listen' (unixsocket) 11 | ; - 'chroot' 12 | ; - 'chdir' 13 | ; - 'php_values' 14 | ; - 'php_admin_values' 15 | ; When not set, the global prefix (or /usr/local) applies instead. 16 | ; Note: This directive can also be relative to the global prefix. 17 | ; Default Value: none 18 | ;prefix = /path/to/pools/$pool 19 | 20 | ; Unix user/group of the child processes. This can be used only if the master 21 | ; process running user is root. It is set after the child process is created. 22 | ; The user and group can be specified either by their name or by their numeric 23 | ; IDs. 24 | ; Note: If the user is root, the executable needs to be started with 25 | ; --allow-to-run-as-root option to work. 26 | ; Default Values: The user is set to master process running user by default. 27 | ; If the group is not set, the user's group is used. 28 | user = www 29 | group = www 30 | 31 | ; The address on which to accept FastCGI requests. 32 | ; Valid syntaxes are: 33 | ; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on 34 | ; a specific port; 35 | ; '0.0.0.0:port' - to listen on a TCP socket to all IPv4 addresses on 36 | ; a specific port; 37 | ; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on 38 | ; a specific port; 39 | ; 'port' - to listen on a TCP socket to all addresses 40 | ; (IPv6 and IPv4-mapped) on a specific port; 41 | ; Note: IPv4-mapped addresses are disabled by-default in 42 | ; FreeBSD for security reasons; 43 | ; '/path/to/unix/socket' - to listen on a unix socket. 44 | ; Note: This value is mandatory. 45 | listen = 127.0.0.1:9000 46 | 47 | ; Set listen(2) backlog. 48 | ; Default Value: 511 (-1 on Linux, FreeBSD and OpenBSD) 49 | ;listen.backlog = 511 50 | 51 | ; Set permissions for unix socket, if one is used. In Linux, read/write 52 | ; permissions must be set in order to allow connections from a web server. Many 53 | ; BSD-derived systems allow connections regardless of permissions. The owner 54 | ; and group can be specified either by name or by their numeric IDs. 55 | ; Default Values: Owner is set to the master process running user. If the group 56 | ; is not set, the owner's group is used. Mode is set to 0660. 57 | ;listen.owner = www 58 | ;listen.group = www 59 | ;listen.mode = 0660 60 | 61 | ; When POSIX Access Control Lists are supported you can set them using 62 | ; these options, value is a comma separated list of user/group names. 63 | ; When set, listen.owner and listen.group are ignored 64 | ;listen.acl_users = 65 | ;listen.acl_groups = 66 | 67 | ; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect. 68 | ; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original 69 | ; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address 70 | ; must be separated by a comma. If this value is left blank, connections will be 71 | ; accepted from any ip address. 72 | ; Default Value: any 73 | ;listen.allowed_clients = 127.0.0.1 74 | 75 | ; Set the associated the route table (FIB). FreeBSD only 76 | ; Default Value: -1 77 | ;listen.setfib = 1 78 | 79 | ; Specify the nice(2) priority to apply to the pool processes (only if set) 80 | ; The value can vary from -19 (highest priority) to 20 (lower priority) 81 | ; Note: - It will only work if the FPM master process is launched as root 82 | ; - The pool processes will inherit the master process priority 83 | ; unless it specified otherwise 84 | ; Default Value: no set 85 | ; process.priority = -19 86 | 87 | ; Set the process dumpable flag (PR_SET_DUMPABLE prctl for Linux or 88 | ; PROC_TRACE_CTL procctl for FreeBSD) even if the process user 89 | ; or group is different than the master process user. It allows to create process 90 | ; core dump and ptrace the process for the pool user. 91 | ; Default Value: no 92 | ; process.dumpable = yes 93 | 94 | ; Choose how the process manager will control the number of child processes. 95 | ; Possible Values: 96 | ; static - a fixed number (pm.max_children) of child processes; 97 | ; dynamic - the number of child processes are set dynamically based on the 98 | ; following directives. With this process management, there will be 99 | ; always at least 1 children. 100 | ; pm.max_children - the maximum number of children that can 101 | ; be alive at the same time. 102 | ; pm.start_servers - the number of children created on startup. 103 | ; pm.min_spare_servers - the minimum number of children in 'idle' 104 | ; state (waiting to process). If the number 105 | ; of 'idle' processes is less than this 106 | ; number then some children will be created. 107 | ; pm.max_spare_servers - the maximum number of children in 'idle' 108 | ; state (waiting to process). If the number 109 | ; of 'idle' processes is greater than this 110 | ; number then some children will be killed. 111 | ; pm.max_spawn_rate - the maximum number of rate to spawn child 112 | ; processes at once. 113 | ; ondemand - no children are created at startup. Children will be forked when 114 | ; new requests will connect. The following parameter are used: 115 | ; pm.max_children - the maximum number of children that 116 | ; can be alive at the same time. 117 | ; pm.process_idle_timeout - The number of seconds after which 118 | ; an idle process will be killed. 119 | ; Note: This value is mandatory. 120 | pm = dynamic 121 | 122 | ; The number of child processes to be created when pm is set to 'static' and the 123 | ; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'. 124 | ; This value sets the limit on the number of simultaneous requests that will be 125 | ; served. Equivalent to the ApacheMaxClients directive with mpm_prefork. 126 | ; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP 127 | ; CGI. The below defaults are based on a server without much resources. Don't 128 | ; forget to tweak pm.* to fit your needs. 129 | ; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand' 130 | ; Note: This value is mandatory. 131 | pm.max_children = 120 132 | 133 | ; The number of child processes created on startup. 134 | ; Note: Used only when pm is set to 'dynamic' 135 | ; Default Value: (min_spare_servers + max_spare_servers) / 2 136 | pm.start_servers = 12 137 | 138 | ; The desired minimum number of idle server processes. 139 | ; Note: Used only when pm is set to 'dynamic' 140 | ; Note: Mandatory when pm is set to 'dynamic' 141 | pm.min_spare_servers = 6 142 | 143 | ; The desired maximum number of idle server processes. 144 | ; Note: Used only when pm is set to 'dynamic' 145 | ; Note: Mandatory when pm is set to 'dynamic' 146 | pm.max_spare_servers = 18 147 | 148 | ; The number of rate to spawn child processes at once. 149 | ; Note: Used only when pm is set to 'dynamic' 150 | ; Note: Mandatory when pm is set to 'dynamic' 151 | ; Default Value: 32 152 | ;pm.max_spawn_rate = 32 153 | 154 | ; The number of seconds after which an idle process will be killed. 155 | ; Note: Used only when pm is set to 'ondemand' 156 | ; Default Value: 10s 157 | ;pm.process_idle_timeout = 10s; 158 | 159 | ; The number of requests each child process should execute before respawning. 160 | ; This can be useful to work around memory leaks in 3rd party libraries. For 161 | ; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS. 162 | ; Default Value: 0 163 | ;pm.max_requests = 500 164 | 165 | ; The URI to view the FPM status page. If this value is not set, no URI will be 166 | ; recognized as a status page. It shows the following information: 167 | ; pool - the name of the pool; 168 | ; process manager - static, dynamic or ondemand; 169 | ; start time - the date and time FPM has started; 170 | ; start since - number of seconds since FPM has started; 171 | ; accepted conn - the number of request accepted by the pool; 172 | ; listen queue - the number of request in the queue of pending 173 | ; connections (see backlog in listen(2)); 174 | ; max listen queue - the maximum number of requests in the queue 175 | ; of pending connections since FPM has started; 176 | ; listen queue len - the size of the socket queue of pending connections; 177 | ; idle processes - the number of idle processes; 178 | ; active processes - the number of active processes; 179 | ; total processes - the number of idle + active processes; 180 | ; max active processes - the maximum number of active processes since FPM 181 | ; has started; 182 | ; max children reached - number of times, the process limit has been reached, 183 | ; when pm tries to start more children (works only for 184 | ; pm 'dynamic' and 'ondemand'); 185 | ; Value are updated in real time. 186 | ; Example output: 187 | ; pool: www 188 | ; process manager: static 189 | ; start time: 01/Jul/2011:17:53:49 +0200 190 | ; start since: 62636 191 | ; accepted conn: 190460 192 | ; listen queue: 0 193 | ; max listen queue: 1 194 | ; listen queue len: 42 195 | ; idle processes: 4 196 | ; active processes: 11 197 | ; total processes: 15 198 | ; max active processes: 12 199 | ; max children reached: 0 200 | ; 201 | ; By default the status page output is formatted as text/plain. Passing either 202 | ; 'html', 'xml' or 'json' in the query string will return the corresponding 203 | ; output syntax. Example: 204 | ; http://www.foo.bar/status 205 | ; http://www.foo.bar/status?json 206 | ; http://www.foo.bar/status?html 207 | ; http://www.foo.bar/status?xml 208 | ; 209 | ; By default the status page only outputs short status. Passing 'full' in the 210 | ; query string will also return status for each pool process. 211 | ; Example: 212 | ; http://www.foo.bar/status?full 213 | ; http://www.foo.bar/status?json&full 214 | ; http://www.foo.bar/status?html&full 215 | ; http://www.foo.bar/status?xml&full 216 | ; The Full status returns for each process: 217 | ; pid - the PID of the process; 218 | ; state - the state of the process (Idle, Running, ...); 219 | ; start time - the date and time the process has started; 220 | ; start since - the number of seconds since the process has started; 221 | ; requests - the number of requests the process has served; 222 | ; request duration - the duration in µs of the requests; 223 | ; request method - the request method (GET, POST, ...); 224 | ; request URI - the request URI with the query string; 225 | ; content length - the content length of the request (only with POST); 226 | ; user - the user (PHP_AUTH_USER) (or '-' if not set); 227 | ; script - the main script called (or '-' if not set); 228 | ; last request cpu - the %cpu the last request consumed 229 | ; it's always 0 if the process is not in Idle state 230 | ; because CPU calculation is done when the request 231 | ; processing has terminated; 232 | ; last request memory - the max amount of memory the last request consumed 233 | ; it's always 0 if the process is not in Idle state 234 | ; because memory calculation is done when the request 235 | ; processing has terminated; 236 | ; If the process is in Idle state, then informations are related to the 237 | ; last request the process has served. Otherwise informations are related to 238 | ; the current request being served. 239 | ; Example output: 240 | ; ************************ 241 | ; pid: 31330 242 | ; state: Running 243 | ; start time: 01/Jul/2011:17:53:49 +0200 244 | ; start since: 63087 245 | ; requests: 12808 246 | ; request duration: 1250261 247 | ; request method: GET 248 | ; request URI: /test_mem.php?N=10000 249 | ; content length: 0 250 | ; user: - 251 | ; script: /home/fat/web/docs/php/test_mem.php 252 | ; last request cpu: 0.00 253 | ; last request memory: 0 254 | ; 255 | ; Note: There is a real-time FPM status monitoring sample web page available 256 | ; It's available in: /usr/local/share/php/fpm/status.html 257 | ; 258 | ; Note: The value must start with a leading slash (/). The value can be 259 | ; anything, but it may not be a good idea to use the .php extension or it 260 | ; may conflict with a real PHP file. 261 | ; Default Value: not set 262 | ;pm.status_path = /status 263 | 264 | ; The address on which to accept FastCGI status request. This creates a new 265 | ; invisible pool that can handle requests independently. This is useful 266 | ; if the main pool is busy with long running requests because it is still possible 267 | ; to get the status before finishing the long running requests. 268 | ; 269 | ; Valid syntaxes are: 270 | ; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on 271 | ; a specific port; 272 | ; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on 273 | ; a specific port; 274 | ; 'port' - to listen on a TCP socket to all addresses 275 | ; (IPv6 and IPv4-mapped) on a specific port; 276 | ; '/path/to/unix/socket' - to listen on a unix socket. 277 | ; Default Value: value of the listen option 278 | ;pm.status_listen = 127.0.0.1:9001 279 | 280 | ; The ping URI to call the monitoring page of FPM. If this value is not set, no 281 | ; URI will be recognized as a ping page. This could be used to test from outside 282 | ; that FPM is alive and responding, or to 283 | ; - create a graph of FPM availability (rrd or such); 284 | ; - remove a server from a group if it is not responding (load balancing); 285 | ; - trigger alerts for the operating team (24/7). 286 | ; Note: The value must start with a leading slash (/). The value can be 287 | ; anything, but it may not be a good idea to use the .php extension or it 288 | ; may conflict with a real PHP file. 289 | ; Default Value: not set 290 | ;ping.path = /ping 291 | 292 | ; This directive may be used to customize the response of a ping request. The 293 | ; response is formatted as text/plain with a 200 response code. 294 | ; Default Value: pong 295 | ;ping.response = pong 296 | 297 | ; The access log file 298 | ; Default: not set 299 | ;access.log = log/$pool.access.log 300 | 301 | ; The access log format. 302 | ; The following syntax is allowed 303 | ; %%: the '%' character 304 | ; %C: %CPU used by the request 305 | ; it can accept the following format: 306 | ; - %{user}C for user CPU only 307 | ; - %{system}C for system CPU only 308 | ; - %{total}C for user + system CPU (default) 309 | ; %d: time taken to serve the request 310 | ; it can accept the following format: 311 | ; - %{seconds}d (default) 312 | ; - %{milliseconds}d 313 | ; - %{milli}d 314 | ; - %{microseconds}d 315 | ; - %{micro}d 316 | ; %e: an environment variable (same as $_ENV or $_SERVER) 317 | ; it must be associated with embraces to specify the name of the env 318 | ; variable. Some examples: 319 | ; - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e 320 | ; - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e 321 | ; %f: script filename 322 | ; %l: content-length of the request (for POST request only) 323 | ; %m: request method 324 | ; %M: peak of memory allocated by PHP 325 | ; it can accept the following format: 326 | ; - %{bytes}M (default) 327 | ; - %{kilobytes}M 328 | ; - %{kilo}M 329 | ; - %{megabytes}M 330 | ; - %{mega}M 331 | ; %n: pool name 332 | ; %o: output header 333 | ; it must be associated with embraces to specify the name of the header: 334 | ; - %{Content-Type}o 335 | ; - %{X-Powered-By}o 336 | ; - %{Transfert-Encoding}o 337 | ; - .... 338 | ; %p: PID of the child that serviced the request 339 | ; %P: PID of the parent of the child that serviced the request 340 | ; %q: the query string 341 | ; %Q: the '?' character if query string exists 342 | ; %r: the request URI (without the query string, see %q and %Q) 343 | ; %R: remote IP address 344 | ; %s: status (response code) 345 | ; %t: server time the request was received 346 | ; it can accept a strftime(3) format: 347 | ; %d/%b/%Y:%H:%M:%S %z (default) 348 | ; The strftime(3) format must be encapsulated in a %{}t tag 349 | ; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t 350 | ; %T: time the log has been written (the request has finished) 351 | ; it can accept a strftime(3) format: 352 | ; %d/%b/%Y:%H:%M:%S %z (default) 353 | ; The strftime(3) format must be encapsulated in a %{}t tag 354 | ; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t 355 | ; %u: remote user 356 | ; 357 | ; Default: "%R - %u %t \"%m %r\" %s" 358 | ;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{milli}d %{kilo}M %C%%" 359 | 360 | ; A list of request_uri values which should be filtered from the access log. 361 | ; 362 | ; As a security precuation, this setting will be ignored if: 363 | ; - the request method is not GET or HEAD; or 364 | ; - there is a request body; or 365 | ; - there are query parameters; or 366 | ; - the response code is outwith the successful range of 200 to 299 367 | ; 368 | ; Note: The paths are matched against the output of the access.format tag "%r". 369 | ; On common configurations, this may look more like SCRIPT_NAME than the 370 | ; expected pre-rewrite URI. 371 | ; 372 | ; Default Value: not set 373 | ;access.suppress_path[] = /ping 374 | ;access.suppress_path[] = /health_check.php 375 | 376 | ; The log file for slow requests 377 | ; Default Value: not set 378 | ; Note: slowlog is mandatory if request_slowlog_timeout is set 379 | ;slowlog = log/$pool.log.slow 380 | 381 | ; The timeout for serving a single request after which a PHP backtrace will be 382 | ; dumped to the 'slowlog' file. A value of '0s' means 'off'. 383 | ; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) 384 | ; Default Value: 0 385 | ;request_slowlog_timeout = 0 386 | 387 | ; Depth of slow log stack trace. 388 | ; Default Value: 20 389 | ;request_slowlog_trace_depth = 20 390 | 391 | ; The timeout for serving a single request after which the worker process will 392 | ; be killed. This option should be used when the 'max_execution_time' ini option 393 | ; does not stop script execution for some reason. A value of '0' means 'off'. 394 | ; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) 395 | ; Default Value: 0 396 | ;request_terminate_timeout = 0 397 | 398 | ; The timeout set by 'request_terminate_timeout' ini option is not engaged after 399 | ; application calls 'fastcgi_finish_request' or when application has finished and 400 | ; shutdown functions are being called (registered via register_shutdown_function). 401 | ; This option will enable timeout limit to be applied unconditionally 402 | ; even in such cases. 403 | ; Default Value: no 404 | ;request_terminate_timeout_track_finished = no 405 | 406 | ; Set open file descriptor rlimit. 407 | ; Default Value: system defined value 408 | ;rlimit_files = 1024 409 | 410 | ; Set max core size rlimit. 411 | ; Possible Values: 'unlimited' or an integer greater or equal to 0 412 | ; Default Value: system defined value 413 | ;rlimit_core = 0 414 | 415 | ; Chroot to this directory at the start. This value must be defined as an 416 | ; absolute path. When this value is not set, chroot is not used. 417 | ; Note: you can prefix with '$prefix' to chroot to the pool prefix or one 418 | ; of its subdirectories. If the pool prefix is not set, the global prefix 419 | ; will be used instead. 420 | ; Note: chrooting is a great security feature and should be used whenever 421 | ; possible. However, all PHP paths will be relative to the chroot 422 | ; (error_log, sessions.save_path, ...). 423 | ; Default Value: not set 424 | ;chroot = 425 | 426 | ; Chdir to this directory at the start. 427 | ; Note: relative path can be used. 428 | ; Default Value: current directory or / when chroot 429 | ;chdir = /var/www 430 | 431 | ; Redirect worker stdout and stderr into main error log. If not set, stdout and 432 | ; stderr will be redirected to /dev/null according to FastCGI specs. 433 | ; Note: on highloaded environment, this can cause some delay in the page 434 | ; process time (several ms). 435 | ; Default Value: no 436 | ;catch_workers_output = yes 437 | 438 | ; Decorate worker output with prefix and suffix containing information about 439 | ; the child that writes to the log and if stdout or stderr is used as well as 440 | ; log level and time. This options is used only if catch_workers_output is yes. 441 | ; Settings to "no" will output data as written to the stdout or stderr. 442 | ; Default value: yes 443 | ;decorate_workers_output = no 444 | 445 | ; Clear environment in FPM workers 446 | ; Prevents arbitrary environment variables from reaching FPM worker processes 447 | ; by clearing the environment in workers before env vars specified in this 448 | ; pool configuration are added. 449 | ; Setting to "no" will make all environment variables available to PHP code 450 | ; via getenv(), $_ENV and $_SERVER. 451 | ; Default Value: yes 452 | clear_env = no 453 | 454 | ; Limits the extensions of the main script FPM will allow to parse. This can 455 | ; prevent configuration mistakes on the web server side. You should only limit 456 | ; FPM to .php extensions to prevent malicious users to use other extensions to 457 | ; execute php code. 458 | ; Note: set an empty value to allow all extensions. 459 | ; Default Value: .php 460 | ;security.limit_extensions = .php .php3 .php4 .php5 .php7 461 | 462 | ; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from 463 | ; the current environment. 464 | ; Default Value: clean env 465 | ;env[HOSTNAME] = $HOSTNAME 466 | ;env[PATH] = /usr/local/bin:/usr/bin:/bin 467 | ;env[TMP] = /tmp 468 | ;env[TMPDIR] = /tmp 469 | ;env[TEMP] = /tmp 470 | 471 | ; Additional php.ini defines, specific to this pool of workers. These settings 472 | ; overwrite the values previously defined in the php.ini. The directives are the 473 | ; same as the PHP SAPI: 474 | ; php_value/php_flag - you can set classic ini defines which can 475 | ; be overwritten from PHP call 'ini_set'. 476 | ; php_admin_value/php_admin_flag - these directives won't be overwritten by 477 | ; PHP call 'ini_set' 478 | ; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no. 479 | 480 | ; Defining 'extension' will load the corresponding shared extension from 481 | ; extension_dir. Defining 'disable_functions' or 'disable_classes' will not 482 | ; overwrite previously defined php.ini values, but will append the new value 483 | ; instead. 484 | 485 | ; Note: path INI options can be relative and will be expanded with the prefix 486 | ; (pool, global or /usr/local) 487 | 488 | ; Default Value: nothing is defined by default except the values in php.ini and 489 | ; specified at startup with the -d argument 490 | ;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com 491 | ;php_flag[display_errors] = off 492 | ;php_admin_value[error_log] = /var/log/fpm-php.www.log 493 | ;php_admin_flag[log_errors] = on 494 | ;php_admin_value[memory_limit] = 32M 495 | -------------------------------------------------------------------------------- /install.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | 3 | # 4 | # Install Nextcloud on FreeBSD/HardenedBSD 5 | # 6 | # Last update: 2025-01-30 7 | # https://github.com/theGeeBee/NextCloudOnFreeBSD/ 8 | # 9 | 10 | # 11 | # Check for root privileges 12 | # 13 | if [ "$(id -u)" -ne 0 ]; then 14 | echo "This script must be run with root privileges." 15 | echo "Type 'su' to switch to root and remain in this directory." 16 | exit 1 17 | fi 18 | 19 | # Check if HBSD is present in uname string 20 | hbsd_test=$(uname -a | grep -o 'HBSD') 21 | 22 | # Load config settings 23 | CONFIG_FILE="${PWD}/install.conf" 24 | 25 | if [ -f "$CONFIG_FILE" ]; then 26 | . "$CONFIG_FILE" 27 | else 28 | echo "Config file '$CONFIG_FILE' not found. Please create the config file by running pre-install.sh and try again." 29 | exit 1 30 | fi 31 | 32 | # 33 | # Set `pkg` to use LATEST if set (default setting) 34 | # 35 | if [ "$FREEBSD_REPO" = "latest" ]; then 36 | mkdir -p /usr/local/etc/pkg/repos 37 | echo "FreeBSD: { enabled: no }" > /usr/local/etc/pkg/repos/FreeBSD.conf 38 | cp /etc/pkg/FreeBSD.conf /usr/local/etc/pkg/repos/nextcloud.conf 39 | sed -i '' "s|quarterly|latest|" /usr/local/etc/pkg/repos/nextcloud.conf 40 | fi 41 | 42 | # 43 | # Install `pkg`, update repository, upgrade existing packages 44 | # 45 | echo "Installing pkg and updating repositories" 46 | pkg bootstrap -y 47 | pkg update 48 | pkg upgrade -y 49 | 50 | # Install required packages 51 | xargs pkg install -y < "${PWD}/includes/requirements.txt" 52 | 53 | # Check if not running in a jail + CREATE_DATASET_*=true 54 | # then create datasets for mariaDB's databases and log files that are optimised 55 | # Also create dataset for nextcloud data - this is not useful if you have multiple datasets 56 | # because it creates it under the root dataset, so modify accordingly, or turn off and create as a directory 57 | # use recommended settings from this script as a guide. 58 | if [ "$(sysctl -n security.jail.jailed)" -ne 1 ] && [ "$CREATE_DATASET_MARIADB" = "true" ]; then 59 | # Remove the directories created by MariaDB so that we can create new ZFS datasets in their place. 60 | rm -r /var/db/mysql 61 | rm -r /var/log/mysql 62 | # Find the ZFS dataset containing the root file system 63 | zfs_dataset=$(zfs list -H -o name -r -t filesystem -o name,mountpoint | awk 'NR==1 {print $1}') 64 | 65 | # Check if the dataset is found 66 | if [ -z "$zfs_dataset" ]; then 67 | echo "Error: Root ZFS dataset not found." 68 | exit 1 69 | fi 70 | # Create the MariaDB dataset with the desired properties, including primarycache=metadata 71 | zfs create -o recordsize=16K -o aclmode=restricted -o mountpoint=/var/db/mysql -o primarycache=metadata -o compression=lz4 "$zfs_dataset"/mariadb_data 72 | # Create the second dataset for /var/log/mysql with the same properties 73 | zfs create -o recordsize=128K -o aclmode=restricted -o mountpoint=/var/log/mysql -o primarycache=metadata -o compression=lz4 "$zfs_dataset"/mariadb_logs 74 | # Set ownership to the MySQL user for both datasets 75 | chown -R mysql:mysql /var/db/mysql /var/log/mysql 76 | fi 77 | 78 | if [ "$(sysctl -n security.jail.jailed)" -ne 1 ] && [ "$CREATE_DATASET_DATA" = "true" ]; then 79 | # Create Nextcloud dataset with the desired properties 80 | zfs create -o recordsize=16K -o aclmode=restricted -o mountpoint="${DATA_DIRECTORY}" -o primarycache=metadata -o compression=lz4 "${zfs_dataset}/${DATASET}" 81 | # Set ownership to the www user for the dataset 82 | chown www:www "${DATA_DIRECTORY}" 83 | else 84 | # Create the Nextcloud data directory and set ownership to the www user 85 | mkdir -p "${DATA_DIRECTORY}" 86 | chown www:www "${DATA_DIRECTORY}" 87 | fi 88 | 89 | # Download virus definitions 90 | freshclam 91 | 92 | # 93 | # Download and verify Nextcloud 94 | # 95 | clear 96 | echo "Downloading Nextcloud v${NEXTCLOUD_VERSION}..." 97 | FILE="latest-${NEXTCLOUD_VERSION}.tar.bz2" 98 | if ! fetch -o /tmp "https://download.nextcloud.com/server/releases/${FILE}" "https://download.nextcloud.com/server/releases/${FILE}".asc https://nextcloud.com/nextcloud.asc 99 | then 100 | echo "Failed to download Nextcloud" 101 | exit 1 102 | fi 103 | gpg --import /tmp/nextcloud.asc 104 | if ! gpg --verify "/tmp/${FILE}.asc" 105 | then 106 | echo "GPG Signature Verification Failed!" 107 | echo "The Nextcloud download is corrupt." 108 | exit 1 109 | fi 110 | 111 | # Set `sysctl` values (necessary for `redis`) 112 | sysctl kern.ipc.somaxconn=1024 113 | echo "kern.ipc.somaxconn=1024" >> /etc/sysctl.conf 114 | 115 | # Fix that allows memories app to load correctly, should you choose to install it 116 | 117 | ln -s /usr/local/bin/perl /usr/bin/perl 118 | ln -s /usr/local/bin/perl5 /usr/bin/perl5 119 | 120 | # 121 | # Enable services 122 | # 123 | sysrc sendmail_enable="YES" 124 | sysrc apache24_enable="YES" 125 | sysrc mysql_enable="YES" 126 | sysrc php_fpm_enable="YES" 127 | sysrc redis_enable="YES" 128 | sysrc clamav_clamd_enable="YES" 129 | sysrc clamav_freshclam_enable="YES" 130 | 131 | # Add user `www` to group `redis` 132 | pw usermod www -G redis 133 | 134 | # Extract Nextcloud and give `www` ownership of the directory 135 | tar xjf "/tmp/${FILE}" -C "${WWW_DIR}/" 136 | mv "${WWW_DIR}/nextcloud" "${WWW_DIR}/${HOST_NAME}" 137 | chown -R www:www "${WWW_DIR}/${HOST_NAME}" 138 | 139 | # 140 | # Start services 141 | # 142 | service sendmail start 143 | service redis start 144 | apachectl start 145 | service mysql-server start 146 | service php_fpm start 147 | service clamav_clamd onestart 148 | 149 | 150 | # Create self-signed SSL certificate 151 | if [ "$SSL_DIRECTORY" = "OFF" ]; then 152 | echo "SSL is disabled on this host, please setup SSL on your reverse proxy" 153 | elif [ "$SSL_DIRECTORY" = "PUBLIC" ]; then 154 | SSL_DIRECTORY="/usr/local/etc/letsencrypt/live/${HOST_NAME}" 155 | sed -i '' "s|nextcloud.crt|fullchain.pem|" "${PWD}/includes/nextcloud.conf" 156 | sed -i '' "s|nextcloud.key|privkey.pem|" "${PWD}/includes/nextcloud.conf" 157 | pkg install -y security/py-certbot-apache 158 | certbot certonly --apache --agree-tos --email "$EMAIL_ADDRESS" -n -d "$HOST_NAME" 159 | else 160 | mkdir -p "${SSL_DIRECTORY}" 161 | chown www:www "${SSL_DIRECTORY}" 162 | OPENSSL_REQUEST="/C=${COUNTRY_CODE}/CN=${HOST_NAME}" 163 | openssl req -x509 -nodes -days 3652 -sha512 -subj "$OPENSSL_REQUEST" -newkey rsa:2048 -keyout "${SSL_DIRECTORY}/nextcloud.key" -out "${SSL_DIRECTORY}/nextcloud.crt" 164 | fi 165 | 166 | # Update virus definitions again to report update to daemon 167 | freshclam --quiet 168 | 169 | # 170 | # Copy pre-writting config files and edit in place 171 | # 172 | sed -i '' "s|HOST_NAME|${HOST_NAME}|g" "${PWD}/includes/nextcloud.conf" 173 | sed -i '' "s|IP_ADDRESS|${IP_ADDRESS}|" "${PWD}/includes/nextcloud.conf" 174 | sed -i '' "s|IP_ADDRESS|${IP_ADDRESS}|" "${PWD}/includes/httpd.conf" 175 | sed -i '' "s|EMAIL_ADDRESS|${EMAIL_ADDRESS}|" "${PWD}/includes/httpd.conf" 176 | sed -i '' "s|WWW_DIR|${WWW_DIR}|" "${PWD}/includes/nextcloud.conf" 177 | sed -i '' "s|SSL_DIRECTORY|${SSL_DIRECTORY}|" "${PWD}/includes/nextcloud.conf" 178 | sed -i '' "s|MYTIMEZONE|${TIME_ZONE}|" "${PWD}/includes/php.ini" 179 | sed -i '' "s|IP_ADDRESS|${IP_ADDRESS}|" "${PWD}/includes/certbot.conf" 180 | sed -i '' "s|HOST_NAME|${HOST_NAME}|" "${PWD}/includes/certbot.conf" 181 | 182 | 183 | # Disable self-signed SSL certificate if SSL_DIRECTORY="OFF" 184 | if [ "$SSL_DIRECTORY" = "OFF" ]; then 185 | sed -i '' "s|LISTEN_PORT|80|" "${PWD}/includes/nextcloud.conf" 186 | sed -i '' "s|LISTEN_PORT|80|" "${PWD}/includes/httpd.conf" 187 | sed -i '' "s|SSL_OFF_|# |" "${PWD}/includes/nextcloud.conf" 188 | sed -i '' "s|SSL_OFF_|# |" "${PWD}/includes/httpd.conf" 189 | sed -i '' "s|Header|# Header|" "${PWD}/includes/nextcloud.conf" 190 | else 191 | sed -i '' "s|LISTEN_PORT|443|" "${PWD}/includes/nextcloud.conf" 192 | sed -i '' "s|LISTEN_PORT|443|" "${PWD}/includes/httpd.conf" 193 | sed -i '' "s|SSL_OFF_||" "${PWD}/includes/nextcloud.conf" 194 | sed -i '' "s|SSL_OFF_||" "${PWD}/includes/httpd.conf" 195 | fi 196 | 197 | # Disable PHP Just-in-Time compilation for HardenedBSD support 198 | if [ "$hbsd_test" ] 199 | then 200 | sed -i '' "s|pcre.jit=1|pcre.jit=0|" "${PWD}/includes/php.ini" 201 | sed -i '' "s|opcache.jit = 1255|opcache.jit = 0|" "${PWD}/includes/php.ini" 202 | sed -i '' "s|opcache.jit_buffer_size = 8M|opcache.jit_buffer_size = 0|" "${PWD}/includes/php.ini" 203 | fi 204 | mkdir /usr/local/etc/apache24/vhosts 205 | cp -f "${PWD}/includes/httpd.conf" /usr/local/etc/apache24/ 206 | cp -f "${PWD}/includes/php.ini" /usr/local/etc/php.ini 207 | cp -f "${PWD}/includes/www.conf" /usr/local/etc/php-fpm.d/ 208 | cp -f "${PWD}/includes/redis.conf" /usr/local/etc/redis.conf 209 | cp -f "${PWD}/includes/certbot.conf" /usr/local/etc/apache24/vhosts/certbot.conf 210 | cp -f "${PWD}/includes/nextcloud.conf" "/usr/local/etc/apache24/vhosts/${HOST_NAME}.conf" 211 | cp -f "${PWD}/includes/030_php-fpm.conf" /usr/local/etc/apache24/modules.d/ 212 | cp -f "${PWD}/includes/my.cnf" /usr/local/etc/mysql/ 213 | 214 | # 215 | # Restart Services for modified configuration to take effect 216 | # 217 | apachectl restart 218 | service php_fpm restart 219 | service redis restart 220 | service mysql-server restart 221 | 222 | # Create Nextcloud log directory 223 | mkdir -p /var/log/nextcloud/ 224 | chown www:www /var/log/nextcloud 225 | 226 | # 227 | # Create Nextcloud database, secure database, set MariaDB root password, create Nextcloud DB, user, and password 228 | # 229 | mariadb -u root -e "DELETE FROM mysql.user WHERE User='';" 230 | mariadb -u root -e "DELETE FROM mysql.user WHERE User='root' AND Host NOT IN ('localhost', '127.0.0.1', '::1');" 231 | mariadb -u root -e "DROP DATABASE IF EXISTS test;" 232 | mariadb -u root -e "DELETE FROM mysql.db WHERE Db='test' OR Db='test\\_%';" 233 | mariadb -u root -e "CREATE DATABASE ${DB_NAME} CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;" 234 | mariadb -u root -e "CREATE USER '${DB_USERNAME}'@'127.0.0.1' IDENTIFIED BY '${DB_PASSWORD}';" 235 | mariadb -u root -e "GRANT ALL PRIVILEGES ON ${DB_NAME}.* TO '${DB_USERNAME}'@'127.0.0.1';" 236 | mariadb -u root -e "FLUSH PRIVILEGES;" 237 | mariadb-admin --user=root password "${DB_ROOT_PASSWORD}" reload 238 | 239 | # The next two lines allow `root` to login to mysql> without a password 240 | sed -i '' "s|MYPASSWORD|${DB_ROOT_PASSWORD}|" "${PWD}/includes/root_my.cnf" 241 | cp -f "${PWD}/includes/root_my.cnf" /root/.my.cnf 242 | 243 | # 244 | # CLI installation and configuration of Nextcloud 245 | # 246 | clear 247 | echo "Installing Nextcloud..." 248 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" maintenance:install --database="mysql" --database-name="${DB_NAME}" --database-user="${DB_USERNAME}" --database-pass="${DB_PASSWORD}" --database-host="127.0.0.1" --admin-user="${ADMIN_USERNAME}" --admin-pass="${ADMIN_PASSWORD}" --data-dir="${DATA_DIRECTORY}" 249 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" db:add-missing-primary-keys 250 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" db:add-missing-indices 251 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" db:add-missing-columns 252 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" db:convert-filecache-bigint --no-interaction 253 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" maintenance:mimetype:update-db 254 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set allow_local_remote_servers --value=true --type=boolean 255 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set maintenance_window_start --value=1 --type=integer 256 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set default_phone_region --value="${COUNTRY_CODE}" 257 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set logtimezone --value="${TIME_ZONE}" 258 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set logdateformat --value="Y-m-d H:i:s T" 259 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set log_type --value=file 260 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set logfile --value="/var/log/nextcloud/${INSTANCE_NAME}.log" 261 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set loglevel --value=2 --type=integer 262 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set logrotate_size --value=104847600 --type=integer 263 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set filelocking.enabled --value=true --type=boolean 264 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set memcache.local --value="\OC\Memcache\APCu" 265 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set redis host --value=/var/run/redis/redis.sock 266 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set redis port --value=0 --type=integer 267 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set memcache.distributed --value="\OC\Memcache\Redis" 268 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set memcache.locking --value="\OC\Memcache\Redis" 269 | if [ "$USE_HOSTNAME" = "true" ]; then 270 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set trusted_domains 0 --value="${HOST_NAME}" 271 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set overwritehost --value="${HOST_NAME}" 272 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set overwrite.cli.url --value="https://${HOST_NAME}" 273 | else 274 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set trusted_domains 0 --value="${IP_ADDRESS}" 275 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set trusted_domains 1 --value="${HOST_NAME}" 276 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set overwrite.cli.url --value="https://${IP_ADDRESS}" 277 | fi 278 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set overwriteprotocol --value=https 279 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set htaccess.RewriteBase --value=/ 280 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" maintenance:update:htaccess 281 | # Set Nextcloud to use sendmail (you can change this later in the GUI) 282 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set mail_smtpmode --value=sendmail 283 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set mail_sendmailmode --value=pipe 284 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set mail_domain --value="${HOST_NAME}" 285 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:system:set mail_from_address --value="${SERVER_EMAIL}" 286 | # Disable contactsinteraction because the behaviour is unwanted, and confusing 287 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:disable contactsinteraction 288 | # Enable external storage support (Example: mount a SMB share in Nextcloud). 289 | # Users are not allowed to mount external storage, but can be allowed under Settings -> Admin -> External Storage 290 | if [ "$EXTERNAL_STORAGE" = "true" ]; then 291 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:enable files_external 292 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:app:set files_external allow_user_mounting --value=no 293 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:app:set files_external user_mounting_backends --value="ftp,dav,owncloud,sftp,amazons3,swift,smb,\\OC\\Files\\Storage\\SFTP_Key,\\OC\\Files\\Storage\\SMB_OC" 294 | fi 295 | 296 | # 297 | # Install Nextcloud Featured Apps if (alphabetical) 298 | # 299 | if [ "$INSTALL_APPS" = "true" ]; then 300 | clear 301 | echo "Nextcloud is now installed, installing recommended Apps..." 302 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:install calendar 303 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:install contacts 304 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:install deck 305 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:install mail 306 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:install notes 307 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:install spreed # Nextcloud Talk 308 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:install tasks 309 | fi 310 | 311 | # 312 | # Install Antivirus for Files 313 | # 314 | clear 315 | echo "Now installing and configuring Antivirus for File using ClamAV..." 316 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:install files_antivirus 317 | ### set correct value for path on FreeBSD and set default action 318 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:app:set files_antivirus av_mode --value=socket 319 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:app:set files_antivirus av_socket --value=/var/run/clamav/clamd.sock 320 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:app:set files_antivirus av_stream_max_length --value=104857600 --type=integer 321 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:app:set files_antivirus av_infected_action --value=only_log 322 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:app:set activity notify_notification_virus_detected --value=1 --type=integer 323 | 324 | # 325 | # SERVER SIDE ENCRYPTION 326 | # Server-side encryption makes it possible to encrypt files which are uploaded to this server. 327 | # This comes with limitations like a performance penalty, so enable this only if needed. 328 | # 329 | if [ "$ENCRYPT_DATA" = "true" ]; then 330 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:enable encryption 331 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" encryption:enable 332 | fi 333 | 334 | # Set Nextcloud to run maintenance tasks as a cron job 335 | sed -i '' "s|WWW_DIR|${WWW_DIR}|" "${PWD}/includes/www-crontab" 336 | sed -i '' "s|HOST_NAME|${HOST_NAME}|" "${PWD}/includes/www-crontab" 337 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" background:cron 338 | crontab -u www "${PWD}/includes/www-crontab" 339 | 340 | # Create reference file 341 | if [ "$SSL_DIRECTORY" = "OFF" ]; then 342 | cat >> "/root/${HOST_NAME}_reference.txt" <> "/root/${HOST_NAME}_reference.txt" <> /etc/fstab 54 | 55 | # Start services 56 | service linux start 57 | 58 | # Document Server Community Edition 59 | echo "Installing Document Server for Nextcloud." 60 | 61 | # ONLYOFFICE 62 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:install onlyoffice 63 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" app:install documentserver_community 64 | 65 | # set ONLYOFFICE to accept the self-signed certificate and point it to ${MY_IP} instead of localhost 66 | # ${HOST_NAME} would work instead if DNS is set up correctly 67 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:app:set onlyoffice verify_peer_off --value="true" 68 | if [ "$USE_HOSTNAME" = "true" ]; then 69 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:app:set onlyoffice DocumentServerUrl --value="https://${HOST_NAME}/apps/documentserver_community/" 70 | else 71 | sudo -u www php "${WWW_DIR}/${HOST_NAME}/occ" config:app:set onlyoffice DocumentServerUrl --value="https://${MY_IP}/apps/documentserver_community/" 72 | fi 73 | -------------------------------------------------------------------------------- /optional/fstab: -------------------------------------------------------------------------------- 1 | 2 | # Linux compatibility 3 | linprocfs /compat/linux/proc linprocfs rw 0 0 4 | linsysfs /compat/linux/sys linsysfs rw 0 0 5 | tmpfs /compat/linux/dev/shm tmpfs rw,mode=1777 0 0 6 | -------------------------------------------------------------------------------- /optional/showip.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | 3 | ### Show available IP addresses on your system 4 | ### Maybe use this in future to auto-generate IP of Jail/VM (?) 5 | ifconfig | sed -n '/.inet /{s///;s/ .*//;p;}' | head -1 -------------------------------------------------------------------------------- /pre-install.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | 3 | # Check for root privileges 4 | if ! [ "$(id -u)" = 0 ]; then 5 | echo "This script must be run with root privileges." 6 | exit 1 7 | fi 8 | 9 | # 10 | # Copy the default config, ready for editing, and pre-populate the IP address 11 | cp sample.conf install.conf 12 | ip_address=$(ifconfig | sed -n '/.inet /{s///;s/ .*//;p;}' | head -1) 13 | sed -i '' "s|IP_ADDRESS_VALUE|${ip_address}|" install.conf 14 | 15 | # 16 | # Check if in a jail? 17 | # 18 | if [ "$(sysctl -n security.jail.jailed)" = 1 ]; then 19 | echo "This script is running inside a jail." 20 | echo " 21 | Next steps: 22 | ----------- 23 | 24 | 1. Edit the variables in install.conf 25 | 2. run install.sh 26 | 27 | That should be it. 28 | Please log a ticket on the github page should you have any issues" 29 | else 30 | echo "This script is running outside a jail" 31 | # Create Boot Environment 32 | echo "Creating Boot Environment for Nextcloud" 33 | bectl create nextcloud 34 | bectl activate nextcloud 35 | echo " 36 | Next steps: 37 | ----------- 38 | 39 | 1. Reboot the system 40 | 2. su - again and edit the variables in install.conf 41 | 4. run install.sh 42 | 43 | That should be it. 44 | Please log a ticket on the github page should you have any issues" 45 | fi 46 | -------------------------------------------------------------------------------- /sample.conf: -------------------------------------------------------------------------------- 1 | # Common settings 2 | FREEBSD_REPO="latest" # Set repository for FreeBSD 3 | HOST_NAME="nextcloud.my.network" # Hostname for the server 4 | IP_ADDRESS="IP_ADDRESS_VALUE" # IP address of the server 5 | COUNTRY_CODE="XW" # Example: AU/CA/DE/FR/UK/US/ZA, etc. 6 | TIME_ZONE="UTC" # See: https://www.php.net/manual/en/timezones.php 7 | WWW_DIR="/usr/local/www" # NOTE: no trailing / 8 | 9 | # Email settings 10 | EMAIL_USERNAME="nextcloud-admin" # Used for the `ServerAdmin` variable in Apache's httpd.conf 11 | SERVER_EMAIL="nextcloud-alert" # will have ${HOST_NAME} automatically appended, used to send out alerts from the server by `sendmail` 12 | EMAIL_ADDRESS="${EMAIL_USERNAME}@${HOST_NAME}" # Used for the `ServerAdmin` variable in Apache's httpd.conf 13 | 14 | # SSL settings 15 | SSL_DIRECTORY="/usr/local/www/ssl" # NOTE: no trailing / 16 | # SSL_DIRECTORY="OFF" if you want to disable SSL (e.g., using reverse proxy with SSL) 17 | # SSL_DIRECTORY="PUBLIC" if your hostname is a public address and you want to generate a certificate with LetsEncrypt 18 | 19 | # OpenSSL settings (used for self-signed certificates only, do not modify) 20 | OPENSSL_REQUEST="/C=${COUNTRY_CODE}/CN=${HOST_NAME}" # This populates the `-subj` field of the `openssl` request 21 | 22 | # Nextcloud settings 23 | INSTANCE_NAME="unique_name" # eg. "mycloud" | used for log file and db_name 24 | NEXTCLOUD_VERSION="30" # v29, v30 tested 25 | ADMIN_USERNAME="admin" # Username for the Nextcloud Web UI 26 | ADMIN_PASSWORD="$(openssl rand -base64 12)" # Password for the Nextcloud Web UI 27 | ENCRYPT_DATA=false # Default is false, comes with a massive performance penalty 28 | USE_HOSTNAME=true # Set to true will use your hostname instead of IP address. 29 | # Make sure your DNS server can resolve this hostname. 30 | INSTALL_APPS=true # Install Recommended apps in Nextcloud (default: true) 31 | EXTERNAL_STORAGE=true # Enable external storage support, to access remote storage 32 | # from within Nextcloud 33 | 34 | # Dataset settings 35 | CREATE_DATASET_DATA=false # Set to false to override creation of datasets 36 | # (Setting to true will not work inside a jail) 37 | CREATE_DATASET_MARIADB=true # Set to true to create datasets for MariaDB 38 | DATASET="nextcloud_data" # This will be created under the root dataset; e.g. zroot/DATASET 39 | DATA_DIRECTORY="/mnt/${DATASET}" # This is the mountpoint of your dataset 40 | 41 | # MariaDB settings (for Nextcloud) 42 | DB_ROOT_PASSWORD="$(openssl rand -base64 16)" # Root password for MariaDB 43 | DB_USERNAME="nextcloud" # Database username for Nextcloud 44 | DB_PASSWORD="$(openssl rand -base64 16)" # Database password for Nextcloud 45 | DB_NAME=$INSTANCE_NAME # Database name for Nextcloud 46 | # We recommend using ${HOSTNAME} for your DB_NAME if you plan to 47 | # have multiple nextcloud instances 48 | --------------------------------------------------------------------------------