2023-09-10 09:58:04 +02:00
|
|
|
;<?php http_response_code(403); /*
|
2016-08-12 18:23:15 +02:00
|
|
|
; config file for PrivateBin
|
2016-09-03 18:12:24 +02:00
|
|
|
;
|
2016-08-12 18:23:15 +02:00
|
|
|
; An explanation of each setting can be find online at https://github.com/PrivateBin/PrivateBin/wiki/Configuration.
|
2012-04-29 19:15:06 +02:00
|
|
|
|
2012-05-19 23:59:41 +02:00
|
|
|
[main]
|
2017-01-01 16:33:11 +01:00
|
|
|
; (optional) set a project name to be displayed on the website
|
|
|
|
; name = "PrivateBin"
|
|
|
|
|
2022-10-29 07:54:42 +02:00
|
|
|
; The full URL, with the domain name and directories that point to the
|
|
|
|
; PrivateBin files, including an ending slash (/). This URL is essential to
|
|
|
|
; allow Opengraph images to be displayed on social networks.
|
|
|
|
; basepath = "https://privatebin.example.com/"
|
Make Opengraph really functional
3 URLs of images used on social networks are passed in absolute URL.
Note that I did not pass all the images in absolute URLs, but, it could be consistent to do so, but, if the images work, maybe a relative call is more efficient?
Remove the version of PrivateBin, at the end of each image. This apparently prevents the opengraph from working, and, so I deleted on all of the images, to remain consistent at this level. This will make fewer requests, and, anyway, the images are not intended to change with each version.
2020-06-30 22:36:36 +02:00
|
|
|
|
2015-08-31 00:01:35 +02:00
|
|
|
; enable or disable the discussion feature, defaults to true
|
|
|
|
discussion = true
|
|
|
|
|
|
|
|
; preselect the discussion feature, defaults to false
|
|
|
|
opendiscussion = false
|
2012-04-29 19:15:06 +02:00
|
|
|
|
2015-09-12 17:33:16 +02:00
|
|
|
; enable or disable the password feature, defaults to true
|
|
|
|
password = true
|
2015-08-17 23:18:33 +02:00
|
|
|
|
2015-09-16 22:51:48 +02:00
|
|
|
; enable or disable the file upload feature, defaults to false
|
|
|
|
fileupload = false
|
|
|
|
|
2015-08-29 20:29:14 +02:00
|
|
|
; preselect the burn-after-reading feature, defaults to false
|
2013-10-30 23:54:42 +01:00
|
|
|
burnafterreadingselected = false
|
|
|
|
|
2015-09-19 14:22:29 +02:00
|
|
|
; which display mode to preselect by default, defaults to "plaintext"
|
2015-09-12 17:33:16 +02:00
|
|
|
; make sure the value exists in [formatter_options]
|
2015-09-19 14:22:29 +02:00
|
|
|
defaultformatter = "plaintext"
|
2015-09-12 17:33:16 +02:00
|
|
|
|
|
|
|
; (optional) set a syntax highlighting theme, as found in css/prettify/
|
|
|
|
; syntaxhighlightingtheme = "sons-of-obsidian"
|
2015-08-31 00:01:35 +02:00
|
|
|
|
2019-09-20 07:04:26 +02:00
|
|
|
; size limit per paste or comment in bytes, defaults to 10 Mebibytes
|
|
|
|
sizelimit = 10485760
|
2012-05-19 23:59:41 +02:00
|
|
|
|
2017-01-08 10:02:07 +01:00
|
|
|
; template to include, default is "bootstrap" (tpl/bootstrap.php)
|
2015-08-23 18:08:45 +02:00
|
|
|
template = "bootstrap"
|
2013-10-31 22:24:40 +01:00
|
|
|
|
2020-09-01 07:59:28 +02:00
|
|
|
; (optional) info text to display
|
2020-10-13 07:28:35 +02:00
|
|
|
; use single, instead of double quotes for HTML attributes
|
|
|
|
;info = "More information on the <a href='https://privatebin.info/'>project page</a>."
|
2020-09-01 07:59:28 +02:00
|
|
|
|
2015-08-17 23:18:33 +02:00
|
|
|
; (optional) notice to display
|
|
|
|
; notice = "Note: This is a test service: Data may be deleted anytime. Kittens will die if you abuse this service."
|
|
|
|
|
2016-07-10 11:02:31 +02:00
|
|
|
; by default PrivateBin will guess the visitors language based on the browsers
|
2015-09-19 11:21:13 +02:00
|
|
|
; settings. Optionally you can enable the language selection menu, which uses
|
|
|
|
; a session cookie to store the choice until the browser is closed.
|
|
|
|
languageselection = false
|
|
|
|
|
2015-10-18 20:38:07 +02:00
|
|
|
; set the language your installs defaults to, defaults to English
|
|
|
|
; if this is set and language selection is disabled, this will be the only language
|
|
|
|
; languagedefault = "en"
|
|
|
|
|
2022-10-29 07:54:42 +02:00
|
|
|
; (optional) URL shortener address to offer after a new paste is created.
|
|
|
|
; It is suggested to only use this with self-hosted shorteners as this will leak
|
|
|
|
; the pastes encryption key.
|
2016-01-31 09:56:06 +01:00
|
|
|
; urlshortener = "https://shortener.example.com/api?link="
|
|
|
|
|
2017-12-25 14:59:15 +01:00
|
|
|
; (optional) Let users create a QR code for sharing the paste URL with one click.
|
|
|
|
; It works both when a new paste is created and when you view a paste.
|
|
|
|
; qrcode = true
|
|
|
|
|
2023-09-09 22:26:11 +02:00
|
|
|
; (optional) Let users send an email sharing the paste URL with one click.
|
|
|
|
; It works both when a new paste is created and when you view a paste.
|
|
|
|
; email = true
|
|
|
|
|
2016-08-10 17:41:46 +02:00
|
|
|
; (optional) IP based icons are a weak mechanism to detect if a comment was from
|
2022-10-26 07:11:02 +02:00
|
|
|
; a different user when the same username was used in a comment. It might get
|
|
|
|
; used to get the IP of a comment poster if the server salt is leaked and a
|
|
|
|
; SHA512 HMAC rainbow table is generated for all (relevant) IPs.
|
2022-10-26 06:53:56 +02:00
|
|
|
; Can be set to one these values:
|
2022-10-30 09:05:29 +01:00
|
|
|
; "none" / "identicon" (default) / "jdenticon" / "vizhash".
|
2020-01-09 05:42:42 +01:00
|
|
|
; icon = "none"
|
2016-07-18 10:14:38 +02:00
|
|
|
|
2016-08-09 14:46:32 +02:00
|
|
|
; Content Security Policy headers allow a website to restrict what sources are
|
|
|
|
; allowed to be accessed in its context. You need to change this if you added
|
|
|
|
; custom scripts from third-party domains to your templates, e.g. tracking
|
|
|
|
; scripts or run your site behind certain DDoS-protection services.
|
|
|
|
; Check the documentation at https://content-security-policy.com/
|
2019-09-19 19:24:28 +02:00
|
|
|
; Notes:
|
|
|
|
; - If you use a bootstrap theme, you can remove the allow-popups from the
|
|
|
|
; sandbox restrictions.
|
|
|
|
; - By default this disallows to load images from third-party servers, e.g. when
|
|
|
|
; they are embedded in pastes. If you wish to allow that, you can adjust the
|
|
|
|
; policy here. See https://github.com/PrivateBin/PrivateBin/wiki/FAQ#why-does-not-it-load-embedded-images
|
|
|
|
; for details.
|
|
|
|
; - The 'unsafe-eval' is used in two cases; to check if the browser supports
|
|
|
|
; async functions and display an error if not and for Chrome to enable
|
|
|
|
; webassembly support (used for zlib compression). You can remove it if Chrome
|
|
|
|
; doesn't need to be supported and old browsers don't need to be warned.
|
2022-03-27 08:45:33 +02:00
|
|
|
; cspheader = "default-src 'none'; base-uri 'self'; form-action 'none'; manifest-src 'self'; connect-src * blob:; script-src 'self' 'unsafe-eval'; style-src 'self'; font-src 'self'; frame-ancestors 'none'; img-src 'self' data: blob:; media-src blob:; object-src blob:; sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals allow-downloads"
|
2016-08-09 14:46:32 +02:00
|
|
|
|
2016-07-11 11:58:15 +02:00
|
|
|
; stay compatible with PrivateBin Alpha 0.19, less secure
|
2016-07-06 11:37:13 +02:00
|
|
|
; if enabled will use base64.js version 1.7 instead of 2.1.9 and sha1 instead of
|
|
|
|
; sha256 in HMAC for the deletion token
|
2019-06-23 19:45:40 +02:00
|
|
|
; zerobincompatibility = false
|
2016-07-06 11:37:13 +02:00
|
|
|
|
2019-06-23 19:45:40 +02:00
|
|
|
; Enable or disable the warning message when the site is served over an insecure
|
|
|
|
; connection (insecure HTTP instead of HTTPS), defaults to true.
|
2019-06-21 19:50:40 +02:00
|
|
|
; Secure transport methods like Tor and I2P domains are automatically whitelisted.
|
|
|
|
; It is **strongly discouraged** to disable this.
|
|
|
|
; See https://github.com/PrivateBin/PrivateBin/wiki/FAQ#why-does-it-show-me-an-error-about-an-insecure-connection for more information.
|
2019-06-23 19:45:40 +02:00
|
|
|
; httpwarning = true
|
|
|
|
|
|
|
|
; Pick compression algorithm or disable it. Only applies to pastes/comments
|
|
|
|
; created after changing the setting.
|
2020-01-09 05:42:42 +01:00
|
|
|
; Can be set to one these values: "none" / "zlib" (default).
|
|
|
|
; compression = "zlib"
|
2019-06-17 21:40:37 +02:00
|
|
|
|
2013-10-30 23:54:42 +01:00
|
|
|
[expire]
|
|
|
|
; expire value that is selected per default
|
|
|
|
; make sure the value exists in [expire_options]
|
2015-08-22 22:46:35 +02:00
|
|
|
default = "1week"
|
2013-10-30 23:54:42 +01:00
|
|
|
|
|
|
|
[expire_options]
|
|
|
|
; Set each one of these to the number of seconds in the expiration period,
|
|
|
|
; or 0 if it should never expire
|
|
|
|
5min = 300
|
|
|
|
10min = 600
|
|
|
|
1hour = 3600
|
|
|
|
1day = 86400
|
|
|
|
1week = 604800
|
|
|
|
; Well this is not *exactly* one month, it's 30 days:
|
|
|
|
1month = 2592000
|
|
|
|
1year = 31536000
|
|
|
|
never = 0
|
|
|
|
|
2015-09-12 17:33:16 +02:00
|
|
|
[formatter_options]
|
|
|
|
; Set available formatters, their order and their labels
|
|
|
|
plaintext = "Plain Text"
|
|
|
|
syntaxhighlighting = "Source Code"
|
|
|
|
markdown = "Markdown"
|
|
|
|
|
2012-05-19 23:59:41 +02:00
|
|
|
[traffic]
|
|
|
|
; time limit between calls from the same IP address in seconds
|
2013-10-30 23:54:42 +01:00
|
|
|
; Set this to 0 to disable rate limiting.
|
2012-05-19 23:59:41 +02:00
|
|
|
limit = 10
|
2015-09-18 22:31:01 +02:00
|
|
|
|
2022-02-28 16:23:11 +01:00
|
|
|
; (optional) Set IPs addresses (v4 or v6) or subnets (CIDR) which are exempted
|
2022-02-20 09:09:20 +01:00
|
|
|
; from the rate-limit. Invalid IPs will be ignored. If multiple values are to
|
|
|
|
; be exempted, the list needs to be comma separated. Leave unset to disable
|
|
|
|
; exemptions.
|
|
|
|
; exempted = "1.2.3.4,10.10.10/24"
|
|
|
|
|
|
|
|
; (optional) If you want only some source IP addresses (v4 or v6) or subnets
|
|
|
|
; (CIDR) to be allowed to create pastes, set these here. Invalid IPs will be
|
|
|
|
; ignored. If multiple values are to be exempted, the list needs to be comma
|
|
|
|
; separated. Leave unset to allow anyone to create pastes.
|
|
|
|
; creators = "1.2.3.4,10.10.10/24"
|
2020-05-05 23:16:22 +02:00
|
|
|
|
2015-09-18 22:31:01 +02:00
|
|
|
; (optional) if your website runs behind a reverse proxy or load balancer,
|
|
|
|
; set the HTTP header containing the visitors IP address, i.e. X_FORWARDED_FOR
|
|
|
|
; header = "X_FORWARDED_FOR"
|
|
|
|
|
2016-07-18 09:13:23 +02:00
|
|
|
[purge]
|
|
|
|
; minimum time limit between two purgings of expired pastes, it is only
|
|
|
|
; triggered when pastes are created
|
2016-07-18 14:47:32 +02:00
|
|
|
; Set this to 0 to run a purge every time a paste is created.
|
2016-07-18 09:13:23 +02:00
|
|
|
limit = 300
|
|
|
|
|
|
|
|
; maximum amount of expired pastes to delete in one purge
|
|
|
|
; Set this to 0 to disable purging. Set it higher, if you are running a large
|
|
|
|
; site
|
|
|
|
batchsize = 10
|
|
|
|
|
2012-05-19 23:59:41 +02:00
|
|
|
[model]
|
2012-04-29 19:15:06 +02:00
|
|
|
; name of data model class to load and directory for storage
|
2016-08-09 11:54:42 +02:00
|
|
|
; the default model "Filesystem" stores everything in the filesystem
|
|
|
|
class = Filesystem
|
2015-08-31 00:01:35 +02:00
|
|
|
[model_options]
|
|
|
|
dir = PATH "data"
|
2012-04-29 19:15:06 +02:00
|
|
|
|
2021-08-19 10:18:08 +02:00
|
|
|
;[model]
|
2021-05-28 22:39:50 +02:00
|
|
|
; example of a Google Cloud Storage configuration
|
|
|
|
;class = GoogleCloudStorage
|
|
|
|
;[model_options]
|
|
|
|
;bucket = "my-private-bin"
|
|
|
|
;prefix = "pastes"
|
2022-10-06 06:19:06 +02:00
|
|
|
;uniformacl = false
|
2021-05-28 22:39:50 +02:00
|
|
|
|
2012-05-19 23:59:41 +02:00
|
|
|
;[model]
|
2012-04-29 19:15:06 +02:00
|
|
|
; example of DB configuration for MySQL
|
2016-08-09 11:54:42 +02:00
|
|
|
;class = Database
|
2012-05-19 23:59:41 +02:00
|
|
|
;[model_options]
|
2016-07-11 11:58:15 +02:00
|
|
|
;dsn = "mysql:host=localhost;dbname=privatebin;charset=UTF8"
|
|
|
|
;tbl = "privatebin_" ; table prefix
|
|
|
|
;usr = "privatebin"
|
2012-05-19 23:59:41 +02:00
|
|
|
;pwd = "Z3r0P4ss"
|
|
|
|
;opt[12] = true ; PDO::ATTR_PERSISTENT
|
2012-04-29 19:15:06 +02:00
|
|
|
|
2012-05-19 23:59:41 +02:00
|
|
|
;[model]
|
2012-04-29 19:15:06 +02:00
|
|
|
; example of DB configuration for SQLite
|
2016-08-09 11:54:42 +02:00
|
|
|
;class = Database
|
2015-08-31 00:01:35 +02:00
|
|
|
;[model_options]
|
|
|
|
;dsn = "sqlite:" PATH "data/db.sq3"
|
|
|
|
;usr = null
|
|
|
|
;pwd = null
|
2016-07-06 11:37:13 +02:00
|
|
|
;opt[12] = true ; PDO::ATTR_PERSISTENT
|
2022-06-05 18:41:09 +02:00
|
|
|
|
|
|
|
;[model]
|
|
|
|
; example of DB configuration for PostgreSQL
|
|
|
|
;class = Database
|
|
|
|
;[model_options]
|
2022-06-05 18:42:54 +02:00
|
|
|
;dsn = "pgsql:host=localhost;dbname=privatebin"
|
2022-06-05 18:41:09 +02:00
|
|
|
;tbl = "privatebin_" ; table prefix
|
|
|
|
;usr = "privatebin"
|
|
|
|
;pwd = "Z3r0P4ss"
|
|
|
|
;opt[12] = true ; PDO::ATTR_PERSISTENT
|
2022-10-20 23:23:01 +02:00
|
|
|
|
|
|
|
;[model]
|
|
|
|
; example of S3 configuration for Rados gateway / CEPH
|
|
|
|
;class = S3Storage
|
|
|
|
;[model_options]
|
|
|
|
;region = ""
|
|
|
|
;version = "2006-03-01"
|
|
|
|
;endpoint = "https://s3.my-ceph.invalid"
|
|
|
|
;use_path_style_endpoint = true
|
|
|
|
;bucket = "my-bucket"
|
|
|
|
;accesskey = "my-rados-user"
|
|
|
|
;secretkey = "my-rados-pass"
|
|
|
|
|
|
|
|
;[model]
|
|
|
|
; example of S3 configuration for AWS
|
|
|
|
;class = S3Storage
|
|
|
|
;[model_options]
|
|
|
|
;region = "eu-central-1"
|
|
|
|
;version = "latest"
|
|
|
|
;bucket = "my-bucket"
|
|
|
|
;accesskey = "access key id"
|
|
|
|
;secretkey = "secret access key"
|
2022-10-23 00:19:43 +02:00
|
|
|
|
2023-02-27 22:30:58 +01:00
|
|
|
;[model]
|
|
|
|
; example of S3 configuration for AWS using its SDK default credential provider chain
|
|
|
|
; if relying on environment variables, the AWS SDK will look for the following:
|
|
|
|
; - AWS_ACCESS_KEY_ID
|
|
|
|
; - AWS_SECRET_ACCESS_KEY
|
|
|
|
; - AWS_SESSION_TOKEN (if needed)
|
|
|
|
; for more details, see https://docs.aws.amazon.com/sdk-for-php/v3/developer-guide/guide_credentials.html#default-credential-chain
|
|
|
|
;class = S3Storage
|
|
|
|
;[model_options]
|
|
|
|
;region = "eu-central-1"
|
|
|
|
;version = "latest"
|
|
|
|
;bucket = "my-bucket"
|
|
|
|
|
2022-10-23 00:19:43 +02:00
|
|
|
[yourls]
|
2022-10-29 07:54:42 +02:00
|
|
|
; When using YOURLS as a "urlshortener" config item:
|
|
|
|
; - By default, "urlshortener" will point to the YOURLS API URL, with or without
|
|
|
|
; credentials, and will be visible in public on the PrivateBin web page.
|
|
|
|
; Only use this if you allow short URL creation without credentials.
|
|
|
|
; - Alternatively, using the parameters in this section ("signature" and
|
|
|
|
; "apiurl"), "urlshortener" needs to point to the base URL of your PrivateBin
|
|
|
|
; instance with "shortenviayourls?link=" appended. For example:
|
|
|
|
; urlshortener = "${basepath}shortenviayourls?link="
|
|
|
|
; This URL will in turn call YOURLS on the server side, using the URL from
|
|
|
|
; "apiurl" and the "access signature" from the "signature" parameters below.
|
2022-10-23 00:19:43 +02:00
|
|
|
|
|
|
|
; (optional) the "signature" (access key) issued by YOURLS for the using account
|
|
|
|
; signature = ""
|
|
|
|
; (optional) the URL of the YOURLS API, called to shorten a PrivateBin URL
|
2023-09-10 09:58:04 +02:00
|
|
|
; apiurl = "https://yourls.example.com/yourls-api.php"
|