mobilizon/config/config.exs

# This file is responsible for configuring your application
# and its dependencies with the aid of the Mix.Config module.
#
# This configuration file is loaded before any dependency and
# is restricted to this project.
import Config

# General application configuration
config :mobilizon,
  ecto_repos: [Mobilizon.Storage.Repo],
  env: config_env()

config :mobilizon, Mobilizon.Storage.Repo, types: Mobilizon.Storage.PostgresTypes

config :mobilizon, :instance,
  name: "My Mobilizon Instance",
  description: "Change this to a proper description of your instance",
  hostname: "localhost",
  registrations_open: false,
  registration_email_allowlist: [],
  registration_email_denylist: [],
  disable_database_login: false,
  languages: [],
  default_language: "en",
  demo: false,
  repository: Mix.Project.config()[:source_url],
  allow_relay: true,
  federating: true,
  remote_limit: 100_000,
  upload_limit: 10_485_760,
  avatar_upload_limit: 2_097_152,
  banner_upload_limit: 4_194_304,
  remove_orphan_uploads: true,
  orphan_upload_grace_period_hours: 48,
  remove_unconfirmed_users: true,
  unconfirmed_user_grace_period_hours: 48,
  activity_expire_days: 365,
  activity_keep_number: 100,
  enable_instance_feeds: false,
  email_from: "noreply@localhost",
  email_reply_to: "noreply@localhost"

config :mobilizon, :groups, enabled: true
config :mobilizon, :events, creation: true

config :mobilizon, :restrictions, only_admin_can_create_groups: false
config :mobilizon, :restrictions, only_groups_can_create_events: false

# Configures the endpoint
config :mobilizon, Mobilizon.Web.Endpoint,
  url: [
    host: "mobilizon.local",
    scheme: "https"
  ],
  secret_key_base: "1yOazsoE0Wqu4kXk3uC5gu3jDbShOimTCzyFL3OjCdBmOXMyHX87Qmf3+Tu9s0iM",
  render_errors: [view: Mobilizon.Web.ErrorView, accepts: ~w(html json)],
  pubsub_server: Mobilizon.PubSub,
  cache_static_manifest: "priv/static/cache_manifest.json",
  has_reverse_proxy: true

config :mime, :types, %{
  "application/activity+json" => ["activity-json"],
  "application/ld+json" => ["activity-json"],
  "application/jrd+json" => ["jrd-json"],
  "application/xrd+xml" => ["xrd-xml"]
}

config :mime, :extensions, %{
  "activity-json" => "application/activity+json"
}

# Upload configuration
config :mobilizon, Mobilizon.Web.Upload,
  uploader: Mobilizon.Web.Upload.Uploader.Local,
  filters: [
    Mobilizon.Web.Upload.Filter.AnalyzeMetadata,
    Mobilizon.Web.Upload.Filter.Resize,
    Mobilizon.Web.Upload.Filter.Optimize,
    Mobilizon.Web.Upload.Filter.BlurHash,
    Mobilizon.Web.Upload.Filter.Dedupe
  ],
  allow_list_mime_types: ["image/gif", "image/jpeg", "image/png", "image/webp"],
  link_name: true,
  proxy_remote: false,
  proxy_opts: [
    redirect_on_failure: false,
    max_body_length: 25 * 1_048_576,
    http: [
      follow_redirect: true,
      pool: :upload
    ]
  ]

config :mobilizon, Mobilizon.Web.Upload.Uploader.Local, uploads: "/var/lib/mobilizon/uploads"

config :tz_world, data_dir: "/var/lib/mobilizon/timezones"

config :mobilizon, Timex.Gettext, default_locale: "en"

config :mobilizon, :media_proxy,
  enabled: true,
  proxy_opts: [
    redirect_on_failure: false,
    max_body_length: 25 * 1_048_576,
    # Note: max_read_duration defaults to Mobilizon.Web.ReverseProxy.max_read_duration_default/1
    max_read_duration: 30_000,
    http: [
      follow_redirect: true,
      pool: :media
    ]
  ]

config :mobilizon, Mobilizon.Web.Email.Mailer,
  adapter: Swoosh.Adapters.SMTP,
  relay: "localhost",
  username: "",
  password: "",
  # can be `:always` or `:never`
  auth: :if_available,
  # can be `true`
  # ssl: false,
  # can be `:always` or `:never`
  tls: :if_available,
  allowed_tls_versions: [:tlsv1, :"tlsv1.1", :"tlsv1.2"],
  tls_options: [
    verify: :verify_peer,
    versions: [:"tlsv1.2", :"tlsv1.3"],
    cacerts: if :public_key.cacerts_load(System.get_env("SSL_CERT_FILE")) == :ok do
        :public_key.cacerts_get()
      end,
    server_name_indication: "localhost",
    depth: 99
  ],
  retries: 1,
  # can be `true`
  no_mx_lookups: false

config :vite_phx,
  release_app: :mobilizon,
  # to tell prod and dev env appart
  environment: config_env(),
  # this manifest is different from the Phoenix "cache_manifest.json"!
  # optional
  vite_manifest: "priv/static/manifest.json",
  # optional
  dev_server_address: "http://localhost:5173"

# Configures Elixir's Logger
config :logger, :console,
  backends: [:console],
  format: "$time $metadata[$level] $message\n",
  metadata: [:request_id, :graphql_operation_name, :user_id, :actor_name, :trace]

config :mobilizon, Mobilizon.Web.Auth.Guardian,
  issuer: "mobilizon",
  token_ttl: %{
    "access" => {15, :minutes},
    "refresh" => {60, :days}
  }

config :guardian, Guardian.DB,
  repo: Mobilizon.Storage.Repo,
  # default
  schema_name: "guardian_tokens",
  # store all token types if not set
  token_types: ["refresh"],
  # default: 60 minutes
  sweep_interval: 60

config :elixir, :time_zone_database, Tzdata.TimeZoneDatabase

config :mobilizon,
       Mobilizon.Service.Auth.Authenticator,
       Mobilizon.Service.Auth.MobilizonAuthenticator

config :ueberauth,
       Ueberauth,
       providers: []

config :mobilizon, :auth, oauth_consumer_strategies: []

config :geolix,
  databases: [
    %{
      id: :city,
      adapter: Geolix.Adapter.MMDB2,
      source: "/var/lib/mobilizon/geo/GeoLite2-City.mmdb"
    }
  ]

config :mobilizon, Mobilizon.Service.Formatter,
  class: false,
  rel: "noopener noreferrer ugc",
  new_window: true,
  truncate: false,
  strip_prefix: false,
  extra: true,
  validate_tld: :no_scheme

config :tesla, adapter: Tesla.Adapter.Hackney

config :phoenix, :format_encoders, json: Jason, "activity-json": Jason
config :phoenix, :filter_parameters, ["password", "token"]

config :absinthe, schema: Mobilizon.GraphQL.Schema
config :absinthe, Absinthe.Logger, filter_variables: ["token", "password", "secret"]

config :codepagex, :encodings, [
  :ascii,
  ~r[iso8859]i,
  :"VENDORS/MICSFT/WINDOWS/CP1252"
]

config :mobilizon, Mobilizon.Web.Gettext, split_module_by: [:locale, :domain]

config :ex_cldr,
  default_locale: "en",
  default_backend: Mobilizon.Cldr

config :http_signatures,
  adapter: Mobilizon.Federation.HTTPSignatures.Signature

config :mobilizon, :cldr,
  locales: [
    "fr",
    "en",
    "ru",
    "ar"
  ]

config :mobilizon, :activitypub,
  # One day
  actor_stale_period: 3_600 * 48,
  actor_key_rotation_delay: 3_600 * 48,
  sign_object_fetches: true,
  stale_actor_search_exclusion_after: 3_600 * 24 * 7

config :mobilizon, Mobilizon.Service.Geospatial, service: Mobilizon.Service.Geospatial.Nominatim

config :mobilizon, Mobilizon.Service.Geospatial.Nominatim,
  endpoint: "https://nominatim.openstreetmap.org",
  api_key: nil

config :mobilizon, Mobilizon.Service.Geospatial.Addok,
  endpoint: "https://api-adresse.data.gouv.fr"

config :mobilizon, Mobilizon.Service.Geospatial.Photon, endpoint: "https://photon.komoot.de"

config :mobilizon, Mobilizon.Service.Geospatial.GoogleMaps,
  api_key: nil,
  fetch_place_details: true

config :mobilizon, Mobilizon.Service.Geospatial.MapQuest, api_key: nil

config :mobilizon, Mobilizon.Service.Geospatial.Mimirsbrunn, endpoint: nil

config :mobilizon, Mobilizon.Service.Geospatial.Pelias, endpoint: nil

config :mobilizon, :maps,
  tiles: [
    endpoint: "https://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png",
    attribution: "© The OpenStreetMap Contributors"
  ],
  routing: [
    type: :openstreetmap
  ]

config :mobilizon, :http_security,
  enabled: true,
  sts: false,
  sts_max_age: 31_536_000,
  csp_policy: [
    script_src: [],
    style_src: [],
    connect_src: [],
    font_src: [],
    img_src: ["*.tile.openstreetmap.org"],
    manifest_src: [],
    media_src: [],
    object_src: [],
    frame_src: [],
    frame_ancestors: []
  ],
  referrer_policy: "same-origin"

config :mobilizon, :anonymous,
  participation: [
    allowed: true,
    validation: %{
      email: [
        enabled: true,
        confirmation_required: true
      ],
      captcha: [enabled: false]
    }
  ],
  event_creation: [
    allowed: false,
    validation: %{
      email: [
        enabled: true,
        confirmation_required: true
      ],
      captcha: [enabled: false]
    }
  ],
  reports: [
    allowed: false
  ]

config :mobilizon, Oban,
  repo: Mobilizon.Storage.Repo,
  log: false,
  queues: [default: 10, search: 5, mailers: 10, background: 5, activity: 5, notifications: 5],
  plugins: [
    {Oban.Plugins.Cron,
     crontab: [
       {"@hourly", Mobilizon.Service.Workers.BuildSiteMap, queue: :background},
       {"17 4 * * *", Mobilizon.Service.Workers.RefreshGroups, queue: :background},
       {"36 3 * * *", Mobilizon.Service.Workers.RefreshInstances, queue: :background},
       {"@hourly", Mobilizon.Service.Workers.CleanOrphanMediaWorker, queue: :background},
       {"@hourly", Mobilizon.Service.Workers.CleanUnconfirmedUsersWorker, queue: :background},
       {"@hourly", Mobilizon.Service.Workers.ExportCleanerWorker, queue: :background},
       {"@hourly", Mobilizon.Service.Workers.SendActivityRecapWorker, queue: :notifications},
       {"@daily", Mobilizon.Service.Workers.CleanOldActivityWorker, queue: :background},
       {"@hourly", Mobilizon.Service.Workers.CleanApplicationData,
        queue: :background, args: %{type: :application_token}},
       {"@hourly", Mobilizon.Service.Workers.CleanApplicationData,
        queue: :background, args: %{type: :application_device_activation}}
     ]},
    {Oban.Plugins.Pruner, max_age: 300}
  ]

config :hammer,
  backend: {Hammer.Backend.ETS, [expiry_ms: 60_000 * 60 * 4, cleanup_interval_ms: 60_000 * 10]}

config :mobilizon, :rich_media,
  parsers: [
    Mobilizon.Service.RichMedia.Parsers.OEmbed,
    Mobilizon.Service.RichMedia.Parsers.OGP,
    Mobilizon.Service.RichMedia.Parsers.TwitterCard,
    Mobilizon.Service.RichMedia.Parsers.Fallback
  ]

config :mobilizon, Mobilizon.Service.ResourceProviders,
  types: [],
  providers: %{}

config :mobilizon, :external_resource_providers, %{
  "https://drive.google.com/" => :google_drive,
  "https://docs.google.com/document/" => :google_docs,
  "https://docs.google.com/presentation/" => :google_presentation,
  "https://docs.google.com/spreadsheets/" => :google_spreadsheets
}

config :mobilizon, Mobilizon.Service.Notifier,
  notifiers: [
    Mobilizon.Service.Notifier.Email,
    Mobilizon.Service.Notifier.Push
  ]

config :mobilizon, Mobilizon.Service.Notifier.Email, enabled: true

config :mobilizon, Mobilizon.Service.Notifier.Push, enabled: true

config :mobilizon, :exports,
  path: "/var/lib/mobilizon/uploads/exports",
  formats: [
    Mobilizon.Service.Export.Participants.CSV
  ]

config :mobilizon, :analytics, providers: []

config :mobilizon, Mobilizon.Service.Pictures, service: Mobilizon.Service.Pictures.Unsplash

config :mobilizon, Mobilizon.Service.Pictures.Unsplash,
  app_name: "Mobilizon",
  access_key: nil

config :mobilizon, :search, global: [is_default_search: false, is_enabled: true]

config :mobilizon, Mobilizon.Service.GlobalSearch,
  service: Mobilizon.Service.GlobalSearch.SearchMobilizon

config :mobilizon, Mobilizon.Service.GlobalSearch.SearchMobilizon,
  endpoint: "https://search.joinmobilizon.org",
  csp_policy: [
    img_src: ["search.joinmobilizon.org"]
  ]

config :mobilizon, Mobilizon.Service.AntiSpam, service: Mobilizon.Service.AntiSpam.Akismet

# Import environment specific config. This must remain at the bottom
# of this file so it overrides the configuration defined above.
import_config "#{config_env()}.exs"