github.com/cs3org/reva/v2@v2.27.7/tests/oc-integration-tests/local/combined.toml (about)

     1  [shared]
     2  jwt_secret = "Pive-Fumkiu4"
     3  
     4  [shared.grpc_client_options]
     5  tls_mode = "insecure"
     6  
     7  [log]
     8  #level = "warn"
     9  #mode = "json"
    10  
    11  # This frontend-global.toml config file will start a reva service that:
    12  # - serves as the entrypoint for owncloud APIs but with a globally accessible namespace.
    13  # - serves http endpoints on port 20180
    14  #   - / --------------- ocdav
    15  #   - /ocs ------------ ocs
    16  #   - /oauth2 --------- oidcprovider
    17  #   - /.well-known ---- wellknown service to announce openid-configuration
    18  #   - TODO(diocas): ocm
    19  # - authenticates requests using oidc bearer auth and basic auth as fallback
    20  # - serves the grpc services on port 20199
    21  [grpc]
    22  
    23  [grpc.tls_settings]
    24  enabled = true
    25  
    26  [grpc.services.gateway]
    27  #preferencessvc = "localhost:18000"
    28  #userprovidersvc = "localhost:18000"
    29  #groupprovidersvc = "localhost:18000"
    30  # other
    31  commit_share_to_storage_grant = true
    32  #share_folder = "Shares"
    33  transfer_expires = 6 # give it a moment
    34  #disable_home_creation_on_login = true
    35  
    36  [grpc.services.authregistry]
    37  [grpc.services.authregistry.drivers.static.rules]
    38  #publicshares = "localhost:17000" # started with the shares.toml
    39  #basic = "localhost:18000" # started with the users.toml
    40  basic = "localhost:19000" # started with the combined.toml
    41  #bearer = "localhost:20099" # started with the frontend.toml
    42  machine = "localhost:21000" # started with the machine-auth.toml
    43  
    44  [grpc.services.storageregistry]
    45  driver = "spaces"
    46  
    47  [grpc.services.storageregistry.drivers.spaces]
    48  home_provider = "/home"
    49  
    50  [grpc.services.storageregistry.drivers.spaces.rules]
    51  "/home" = {"address" = "localhost:11000", "space_type" = "personal", "space_owner_self" = true}
    52  "/home/Shares" = {"address" = "localhost:19000", "space_type" = "share", "path_template" = "/home/Shares/{{.Space.Name}}", "description" = "shares"}
    53  "/users" = {"address" = "localhost:11000", "space_type" = "personal", "path_template" = "/users/{{.Owner.Id.OpaqueId}}", "description" = "personal spaces"}
    54  
    55  # the /virtual namespace is only accessible via the frontend-global service
    56  ##"/virtual/[a-k]" = {"address" = "localhost:11100", "path_template" = "/virtual/{.Owner.Id.OpaqueId}"}
    57  ##"/virtual/[l-z]" = {"address" = "localhost:11110", "path_template" = "/virtual/{.Owner.Id.OpaqueId}"}
    58  
    59  "/public" = {"address" = "localhost:13000",  "space_type" = "public", "path_template" = "/public/{{.Space.Name}}", "description" = "public links"}
    60  
    61  [grpc.services.authprovider]
    62  [grpc.services.authprovider.auth_managers.json]
    63  users = "users.demo.json"
    64  
    65  [grpc.services.userprovider]
    66  [grpc.services.userprovider.drivers.json]
    67  users = "users.demo.json"
    68  
    69  # This is a storage provider that grants direct access to the wrapped storage
    70  # we have a locally running dataprovider
    71  #[grpc.services.storageprovider]
    72  #driver = "ocis"
    73  #expose_data_server = true
    74  
    75  #[grpc.services.storageprovider.drivers.ocis]
    76  #root = "/tmp/reva/data"
    77  #enable_home = false
    78  #treetime_accounting = true
    79  #treesize_accounting = true
    80  
    81  [grpc.services.sharesstorageprovider]
    82  usershareprovidersvc = "0.0.0.0:19000"
    83  
    84  # FIXME start as a separate service ... collides with the storageprovider:
    85  # Server.RegisterService found duplicate service registration for "cs3.storage.provider.v1beta1.ProviderAPI"
    86  #[grpc.services.sharesstorageprovider]
    87  
    88  [grpc.services.usershareprovider]
    89  driver = "memory"
    90  
    91  
    92  [http]
    93  [http.middlewares.cors]
    94  allow_credentials = true
    95  
    96  [http.services.datagateway]
    97  
    98  [http.services.ocdav]
    99  # serve ocdav on the root path
   100  prefix = ""
   101  # for user lookups
   102  # prefix the path of requests to /dav/files with this namespace
   103  # While owncloud has only listed usernames at this endpoint CERN has
   104  # been exposing more than just usernames. For owncloud deployments we
   105  # can prefix the path to jail the requests to the correct CS3 namespace.
   106  # In this deployment we mounted the owncloud storage provider at /users. It
   107  # expects a username as the first path segment.
   108  # currently, only the desktop client will use this endpoint, but only if
   109  # the dav.chunking capability is available
   110  # TODO implement a path wrapper that rewrites `<username>` into the path
   111  # layout for the users home?
   112  # no, use GetHome?
   113  # for eos we need to rewrite the path
   114  # TODO strip the username from the path so the CS3 namespace can be mounted
   115  # at the files/<username> endpoint? what about migration? separate reva instance
   116  files_namespace = "/personal/{{.Id.OpaqueId}}"
   117  
   118  # similar to the dav/files endpoint we can configure a prefix for the old webdav endpoint
   119  # we use the old webdav endpoint to present the cs3 namespace
   120  # note: this changes the tree that is rendered at remote.php/webdav from the users home to the cs3 namespace
   121  # use webdav_namespace = "/home" to use the old namespace that only exposes the users files
   122  # this endpoint should not affect the desktop client sync but will present different folders for the other clients:
   123  # - the desktop clients use a hardcoded remote.php/dav/files/<username> if the dav.chunkung capability is present
   124  # - the ios ios uses the core.webdav-root capability which points to remote.php/webdav in oc10
   125  # - the oc js sdk is hardcoded to the remote.php/webdav so it will see the new tree
   126  # - TODO android? no sync ... but will see different tree
   127  webdav_namespace = "/home"
   128  machine_auth_apikey = "change-me-please"
   129  
   130  [http.services.ocs]
   131  machine_auth_apikey = "change-me-please"
   132  
   133  [http.services.ocs.capabilities.capabilities.core.status]
   134  version = "10.0.11.5"
   135  versionstring = "10.0.11"
   136  
   137  [http.services.ocs.capabilities.capabilities.files_sharing]
   138  api_enabled = true
   139  group_sharing = true
   140  auto_accept_share = true
   141  share_with_group_members_only = true
   142  share_with_membership_groups_only = true
   143  default_permissions = 22
   144  search_min_length = 3
   145  
   146  [http.services.ocs.capabilities.capabilities.files_sharing.public]
   147  enabled = true
   148  send_mail = true
   149  social_share = true
   150  upload = true
   151  multiple = true
   152  supports_upload_only = true
   153  
   154  [http.services.ocs.capabilities.capabilities.files_sharing.public.password]
   155  enforced = false
   156  
   157  [http.services.ocs.capabilities.capabilities.files_sharing.public.password.enforced_for]
   158  read_only = false
   159  read_write = false
   160  read_write_delete = false
   161  upload_only = false
   162  
   163  [http.services.ocs.capabilities.capabilities.files_sharing.public.expire_date]
   164  enabled = true
   165  
   166  [http.services.ocs.capabilities.capabilities.files_sharing.user]
   167  send_mail = true
   168  
   169  [http.services.ocs.capabilities.capabilities.files_sharing.user_enumeration]
   170  enabled = true
   171  group_members_only = true
   172  
   173  [http.services.ocs.capabilities.capabilities.files_sharing.federation]
   174  outgoing = true
   175  incoming = true
   176  
   177  [http.services.ocs.capabilities.capabilities.notifications]
   178  endpoints = []
   179  
   180  [http.services.ocs.capabilities.capabilities.files.tus_support]
   181  version = "1.0.0"
   182  resumable = "1.0.0"
   183  extension = "creation,creation-with-upload"
   184  http_method_override = ""
   185  max_chunk_size = 0
   186  
   187  [http.services.dataprovider]
   188  driver = "ocis"
   189  temp_folder = "/tmp/reva/tmp"
   190  
   191  [http.services.dataprovider.drivers.ocis]
   192  root = "/tmp/reva/data"
   193  treetime_accounting = true
   194  treesize_accounting = true