969d60ab41
This allows setting up permissions before the LDAP users actually connect to Kanboard, and even importing the permissions from other tools.
114 lines
3.7 KiB
PHP
114 lines
3.7 KiB
PHP
<?php
|
|
|
|
// Enable/Disable debug
|
|
define('DEBUG', false);
|
|
|
|
// E-mail address for the "From" header (notifications)
|
|
define('MAIL_FROM', 'notifications@kanboard.local');
|
|
|
|
// Mail transport to use: "smtp", "sendmail" or "mail" (PHP mail function)
|
|
define('MAIL_TRANSPORT', 'mail');
|
|
|
|
// SMTP configuration to use when the "smtp" transport is chosen
|
|
define('MAIL_SMTP_HOSTNAME', '');
|
|
define('MAIL_SMTP_PORT', 25);
|
|
define('MAIL_SMTP_USERNAME', '');
|
|
define('MAIL_SMTP_PASSWORD', '');
|
|
define('MAIL_SMTP_ENCRYPTION', null); // Valid values are "null", "ssl" or "tls"
|
|
|
|
// Sendmail command to use when the transport is "sendmail"
|
|
define('MAIL_SENDMAIL_COMMAND', '/usr/sbin/sendmail -bs');
|
|
|
|
// Database driver: sqlite, mysql or postgres (sqlite by default)
|
|
define('DB_DRIVER', 'sqlite');
|
|
|
|
// Mysql/Postgres username
|
|
define('DB_USERNAME', 'root');
|
|
|
|
// Mysql/Postgres password
|
|
define('DB_PASSWORD', '');
|
|
|
|
// Mysql/Postgres hostname
|
|
define('DB_HOSTNAME', 'localhost');
|
|
|
|
// Mysql/Postgres database name
|
|
define('DB_NAME', 'kanboard');
|
|
|
|
// Enable LDAP authentication (false by default)
|
|
define('LDAP_AUTH', false);
|
|
|
|
// LDAP server hostname
|
|
define('LDAP_SERVER', '');
|
|
|
|
// LDAP server port (389 by default)
|
|
define('LDAP_PORT', 389);
|
|
|
|
// By default, require certificate to be verified for ldaps:// style URL. Set to false to skip the verification.
|
|
define('LDAP_SSL_VERIFY', true);
|
|
|
|
// Enable LDAP START_TLS
|
|
define('LDAP_START_TLS', false);
|
|
|
|
// LDAP bind type: "anonymous", "user" (use the given user/password from the form) and "proxy" (a specific user to browse the LDAP directory)
|
|
define('LDAP_BIND_TYPE', 'anonymous');
|
|
|
|
// LDAP username to connect with. null for anonymous bind (by default).
|
|
// Or for user bind type, you can use a pattern: %s@kanboard.local
|
|
define('LDAP_USERNAME', null);
|
|
|
|
// LDAP password to connect with. null for anonymous bind (by default).
|
|
define('LDAP_PASSWORD', null);
|
|
|
|
// LDAP account base, i.e. root of all user account
|
|
// Example: ou=People,dc=example,dc=com
|
|
define('LDAP_ACCOUNT_BASE', '');
|
|
|
|
// LDAP query pattern to use when searching for a user account
|
|
// Example for ActiveDirectory: '(&(objectClass=user)(sAMAccountName=%s))'
|
|
// Example for OpenLDAP: 'uid=%s'
|
|
define('LDAP_USER_PATTERN', '');
|
|
|
|
// Name of an attribute of the user account object which should be used as the full name of the user.
|
|
define('LDAP_ACCOUNT_FULLNAME', 'displayname');
|
|
|
|
// Name of an attribute of the user account object which should be used as the email of the user.
|
|
define('LDAP_ACCOUNT_EMAIL', 'mail');
|
|
|
|
// Name of an attribute of the user account object which should be used as the id of the user.
|
|
// Example for ActiveDirectory: 'samaccountname'
|
|
// Example for OpenLDAP: 'uid'
|
|
define('LDAP_ACCOUNT_ID', 'samaccountname');
|
|
|
|
// Enable/disable Google authentication
|
|
define('GOOGLE_AUTH', false);
|
|
|
|
// Google client id (Get this value from the Google developer console)
|
|
define('GOOGLE_CLIENT_ID', '');
|
|
|
|
// Google client secret key (Get this value from the Google developer console)
|
|
define('GOOGLE_CLIENT_SECRET', '');
|
|
|
|
// Enable/disable GitHub authentication
|
|
define('GITHUB_AUTH', false);
|
|
|
|
// GitHub client id (Copy it from your settings -> Applications -> Developer applications)
|
|
define('GITHUB_CLIENT_ID', '');
|
|
|
|
// GitHub client secret key (Copy it from your settings -> Applications -> Developer applications)
|
|
define('GITHUB_CLIENT_SECRET', '');
|
|
|
|
// Enable/disable the reverse proxy authentication
|
|
define('REVERSE_PROXY_AUTH', false);
|
|
|
|
// Header name to use for the username
|
|
define('REVERSE_PROXY_USER_HEADER', 'REMOTE_USER');
|
|
|
|
// Username of the admin, by default blank
|
|
define('REVERSE_PROXY_DEFAULT_ADMIN', '');
|
|
|
|
// Default domain to use for setting the email address
|
|
define('REVERSE_PROXY_DEFAULT_DOMAIN', '');
|
|
|
|
// Enable or disable "Strict-Transport-Security" HTTP header
|
|
define('ENABLE_HSTS', true);
|