gargoyle/config.example.yml at main · myfedi/gargoyle · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
debug: false
domain: example.org
# Optional externally visible base URL when running behind a reverse proxy.
# If omitted, Gargoyle builds this from tls/domain/port.
# public_host: https://example.org
port: 80
tls: true
sqlite:
  uri: "file:./local.db?_pragma=foreign_keys(1)"

oauth:
  # Disabled by default. Enable only for trusted compatibility setups that need
  # Mastodon password-grant login.
  allow_password_grant: false

# Optional local client API surface. This mounts OAuth and Mastodon-compatible
# /api routes used by the first-party UI and third-party Mastodon clients.
client_api:
  enabled: true
  # Required for Mastodon-compatible push notifications (Ivory, mobile apps).
  # Generate once and keep stable; changing these invalidates client subscriptions.
  # A small helper can be added later, or use webpush-go's GenerateVAPIDKeys.
  vapid_public_key: ""
  vapid_private_key: ""
  # Recommended format: mailto:admin@example.org
  vapid_subject: ""

media:
  # Uploaded media bytes are stored on disk; only metadata is kept in SQLite.
  storage_dir: "./media"
  cleanup_interval: "1h"
  unattached_ttl: "24h"

# Optional CORS support for browser UIs hosted on a different origin.
# Prefer same-origin reverse proxying when possible. If this list is empty or
# omitted, CORS is disabled. Wildcard origins are intentionally rejected.
web:
  cors:
    allowed_origins: []
    # Example for local Vite dev:
    # allowed_origins:
    #   - http://localhost:5173
    allowed_methods:
      - GET
      - POST
      - PUT
      - PATCH
      - DELETE
      - OPTIONS
    allowed_headers:
      - Authorization
      - Content-Type
    allow_credentials: false

activitypub:
  body_limit_bytes: 1048576
  # Optional per-host exceptions for local compatibility setups. Production
  # federation should normally require HTTPS and public IP addresses.
  remote_url_exceptions: []
  # Example for local GoToSocial on gts.test -> 127.0.0.1:
  # remote_url_exceptions:
  #   - host: gts.test
  #     allow_http: true
  #     allow_private_ip: true