Changeset View
Changeset View
Standalone View
Standalone View
net/collabora-online/files/patch-coolwsd.xml.in
- This file was added.
| --- coolwsd.xml.in.orig 2026-02-02 17:45:08.449131000 +0100 | |||||
| +++ coolwsd.xml.in 2026-02-02 17:48:05.543815000 +0100 | |||||
| @@ -34,12 +34,12 @@ | |||||
| <auth_key desc="Auth Key generated by your account" type="string" default=""></auth_key> | |||||
| </deepl> | |||||
| - <sys_template_path desc="Path to a template tree with shared libraries etc to be used as source for chroot jails for child processes." type="path" relative="true" default="systemplate"></sys_template_path> | |||||
| - <child_root_path desc="Path to the directory under which the chroot jails for the child processes will be created. Should be on the same file system as systemplate and lotemplate. Must be an empty directory." type="path" relative="true" default="jails"></child_root_path> | |||||
| + <sys_template_path desc="Path to a template tree with shared libraries etc to be used as source for chroot jails for child processes." type="path" relative="true" default="systemplate">../share/collabora/systemplate</sys_template_path> | |||||
| + <child_root_path desc="Path to the directory under which the chroot jails for the child processes will be created. Should be on the same file system as systemplate and lotemplate. Must be an empty directory." type="path" relative="true" default="jails">../share/collabora/jails</child_root_path> | |||||
| <mount_jail_tree desc="Controls whether the systemplate and lotemplate contents are mounted or not, which is much faster than the default of linking/copying each file." type="bool" default="true">true</mount_jail_tree> | |||||
| <server_name desc="External hostname:port of the server running coolwsd. If empty, it's derived from the request (please set it if this doesn't work). May be specified when behind a reverse-proxy or when the hostname is not reachable directly." type="string" default=""></server_name> | |||||
| - <file_server_root_path desc="Path to the directory that should be considered root for the file server. This should be the directory containing cool." type="path" relative="true" default="browser/../"></file_server_root_path> | |||||
| + <file_server_root_path desc="Path to the directory that should be considered root for the file server. This should be the directory containing cool." type="path" relative="true" default="browser/../">../share/coolwsd</file_server_root_path> | |||||
| <hexify_embedded_urls desc="Enable to protect encoded URLs from getting decoded by intermediate hops. Particularly useful on Azure deployments" type="bool" default="false">false</hexify_embedded_urls> | |||||
| <experimental_features desc="Enable/Disable experimental features" type="bool" default="@ENABLE_EXPERIMENTAL@">@ENABLE_EXPERIMENTAL@</experimental_features> | |||||
| @@ -208,13 +208,13 @@ | |||||
| <ssl desc="SSL settings"> | |||||
| <!-- switches from https:// + wss:// to http:// + ws:// --> | |||||
| - <enable type="bool" desc="Controls whether SSL encryption between coolwsd and the network is enabled (do not disable for production deployment). If default is false, must first be compiled with SSL support to enable." default="@ENABLE_SSL@">@ENABLE_SSL@</enable> | |||||
| + <enable type="bool" desc="Controls whether SSL encryption between coolwsd and the network is enabled (do not disable for production deployment). If default is false, must first be compiled with SSL support to enable." default="@ENABLE_SSL@">false</enable> | |||||
| <!-- SSL off-load can be done in a proxy, if so disable SSL, and enable termination below in production --> | |||||
| - <termination desc="Connection via proxy where coolwsd acts as working via https, but actually uses http." type="bool" default="false">false</termination> | |||||
| + <termination desc="Connection via proxy where coolwsd acts as working via https, but actually uses http." type="bool" default="false">true</termination> | |||||
| <cert_file_path desc="Path to the cert file" type="path" relative="false">@COOLWSD_CONFIGDIR@/cert.pem</cert_file_path> | |||||
| <key_file_path desc="Path to the key file" type="path" relative="false">@COOLWSD_CONFIGDIR@/key.pem</key_file_path> | |||||
| <ca_file_path desc="Path to the ca file" type="path" relative="false">@COOLWSD_CONFIGDIR@/ca-chain.cert.pem</ca_file_path> | |||||
| - <ssl_verification desc="Enable or disable SSL verification of hosts remote to coolwsd. If true SSL verification will be strict, otherwise certs of hosts will not be verified. You may have to disable it in test environments with self-signed certificates." type="string" default="@SSL_VERIFY@">@SSL_VERIFY@</ssl_verification> | |||||
| + <ssl_verification desc="Enable or disable SSL verification of hosts remote to coolwsd. If true SSL verification will be strict, otherwise certs of hosts will not be verified. You may have to disable it in test environments with self-signed certificates." type="string" default="@SSL_VERIFY@">true</ssl_verification> | |||||
| <cipher_list desc="List of OpenSSL ciphers to accept" type="string" default="ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH"></cipher_list> | |||||
| <hpkp desc="Enable HTTP Public key pinning" enable="false" report_only="false"> | |||||
| <max_age desc="HPKP's max-age directive - time in seconds browser should remember the pins" enable="true" type="uint" default="1000">1000</max_age> | |||||