mk6i-open-oscar-server/config/ssl/settings.env

# Network listeners for core OSCAR services. For multi-homed servers, allows
# users to connect from multiple networks. For example, you can allow both LAN
# and Internet clients to connect to the same server using different connection
# settings.
# 
# Format:
# 	- Comma-separated list of [NAME]://[HOSTNAME]:[PORT]
# 	- Listener names and ports must be unique
# 	- Listener names are user-defined
# 	- Each listener needs a listener in OSCAR_ADVERTISED_LISTENERS_PLAIN
# 
# Examples:
# 	// Listen on all interfaces
# 	LAN://0.0.0.0:5190
# 	// Separate Internet and LAN config
# 	WAN://142.250.176.206:5190,LAN://192.168.1.10:5191
export OSCAR_LISTENERS=LOCAL://0.0.0.0:5190

# Hostnames published by the server that clients connect to for accessing
# various OSCAR services. These hostnames are NOT the bind addresses. For
# multi-homed use servers, allows clients to connect using separate hostnames
# per network.
# 
# Format:
# 	- Comma-separated list of [NAME]://[HOSTNAME]:[PORT]
# 	- Each listener config must correspond to a config in OSCAR_LISTENERS
# 	- Clients MUST be able to connect to these hostnames
# 
# Examples:
# 	// Local LAN config, server behind NAT
# 	LAN://192.168.1.10:5190
# 	// Separate Internet and LAN config
# 	WAN://aim.example.com:5190,LAN://192.168.1.10:5191
export OSCAR_ADVERTISED_LISTENERS_PLAIN=LOCAL://ras.dev:5190

# Network listeners for core OSCAR services that receive decrypted traffic from
# an SSL terminator such as nginx. Clients that connect through these listeners
# are redirected to the hostnames in OSCAR_ADVERTISED_LISTENERS_SSL, keeping
# them on the SSL path for the rest of the session.
# 
# Format:
# 	- Comma-separated list of [NAME]://[HOSTNAME]:[PORT]
# 	- Listener names and ports must be unique
# 	- Each listener needs a listener in OSCAR_LISTENERS and
# OSCAR_ADVERTISED_LISTENERS_SSL
# 	- A listener without a matching OSCAR_ADVERTISED_LISTENERS_SSL entry is not
# started
# 
# Examples:
# 	// Listen on all interfaces
# 	LAN://0.0.0.0:5191
# 	// Separate Internet and LAN config
# 	WAN://142.250.176.206:5191,LAN://192.168.1.10:5192
export OSCAR_LISTENERS_SSL=LOCAL://0.0.0.0:5191

# Same as OSCAR_ADVERTISED_LISTENERS_PLAIN, except the hostname is for the
# server that terminates SSL. Each listener defined here must have a matching
# listener in OSCAR_LISTENERS_SSL for the terminator to forward decrypted
# traffic to.
export OSCAR_ADVERTISED_LISTENERS_SSL=LOCAL://ras.dev:5193

# Network listeners for Kerberos authentication. See OSCAR_LISTENERS doc for
# more details.
# 
# Examples:
# 	// Listen on all interfaces
# 	LAN://0.0.0.0:1088
# 	// Separate Internet and LAN config
# 	WAN://142.250.176.206:1088,LAN://192.168.1.10:1087
export KERBEROS_LISTENERS=LOCAL://0.0.0.0:1088

# Network listeners for TOC protocol service.
# 
# Format: Comma-separated list of hostname:port pairs.
# 
# Examples:
# 	// All interfaces
# 	0.0.0.0:9898
# 	// Multiple listeners
# 	0.0.0.0:9898,192.168.1.10:9899
export TOC_LISTENERS=0.0.0.0:9898

# Network listener for management API binds to. Only 1 listener can be
# specified. (Default 127.0.0.1 restricts to same machine only).
export API_LISTENER=127.0.0.1:8080

# Enable the WebAPI, which serves web-based AIM clients such as AIM Express.
# When enabled, the server listens on WEBAPI_LISTENERS.
export WEBAPI_ENABLED=true

# Network listeners for WebAPI. See OSCAR_LISTENERS doc for more details.
# 
# Examples:
# 	// Listen on all interfaces
# 	LAN://0.0.0.0:8081
# 	// Separate Internet and LAN config
# 	WAN://142.250.176.206:8081,LAN://192.168.1.10:8082
export WEBAPI_LISTENERS=0.0.0.0:8081

# Origins allowed to call the WebAPI from a browser (CORS). A browser blocks a
# cross-origin response whose origin is not listed here, so the client serving
# the web app must appear in this list.
# 
# Format:
# 	- Comma-separated list of [SCHEME]://[HOSTNAME]:[PORT]
# 	- An origin is the scheme, host and port together: a client served from
# another port needs its own entry
# 	- Omit the port when it is the scheme default, the way a browser writes it:
# https://aim.example.com, not https://aim.example.com:443
# 	- No trailing slash, path, query or fragment
# 	- An entry may contain one wildcard (*) standing in for 0 or more characters,
# in the host or the port: https://*.example.com, http://localhost:* . Only one
# wildcard per entry, the scheme cannot be wildcarded, and matching one costs a
# little more per request
# 	- A lone * allows any origin, which is also what an unset or empty value
# means
# 
# Examples:
# 	// Single origin
# 	https://ras.dev
# 	// Web app on a separate port, plus the API host itself
# 	http://localhost:8000,https://ras.dev
# 	// Any origin (development only)
# 	*
export WEBAPI_ALLOWED_ORIGINS=http://localhost:*

# The path to the SQLite database file. The file and DB schema are auto-created
# if they doesn't exist.
export DB_PATH=oscar.sqlite

# Disable password check and auto-create new users at login time. Useful for
# quickly creating new accounts during development without having to register
# new users via the management API.
export DISABLE_AUTH=true

# Disable notification sent when another client signs in with the same screen
# name.
export DISABLE_MULTI_LOGIN_NOTIF=true

# Set logging granularity. Possible values: 'trace', 'debug', 'info', 'warn',
# 'error'.
export LOG_LEVEL=info

# Fallback character set used to transcode IMs between Unicode-capable and
# legacy clients. Possible values: Windows1250 (central european: polish, czech,
# hungarian), Windows1251 (russian), Windows1252 (western european: english,
# french, german), Windows1253 (greek), Windows1254 (turkish), Windows1255
# (hebrew), Windows1256 (arabic), Windows1257 (baltic: lithuanian, latvian,
# estonian), Windows1258 (vietnamese), KOI8R (russian), KOI8U (ukrainian).
export ICBM_LEGACY_CHARSET=Windows1251

# Enable legacy ICQ protocol support (v2-v5). Allows vintage ICQ clients to
# connect.
export ICQ_LEGACY_ENABLED=true

# UDP listener address for legacy ICQ protocols.
# 
# Format: HOST:PORT
# 
# Examples:
# 	// All interfaces
# 	0.0.0.0:4000
# 	// Specific interface
# 	192.168.1.10:4000
export ICQ_LEGACY_UDP_LISTENER=0.0.0.0:4000

# Comma-separated list of supported ICQ protocol versions. Valid values: 1, 2,
# 3, 4, 5 (V1 is experimental).
export ICQ_LEGACY_VERSIONS=2,3,4,5

# Session timeout for legacy ICQ connections. Sessions are cleaned up after this
# duration of inactivity.
export ICQ_LEGACY_SESSION_TIMEOUT=120s

# Expected keep-alive interval from clients. Used for timeout calculations.
export ICQ_LEGACY_KEEPALIVE_INTERVAL=120s

# Allow automatic user registration from legacy clients. When enabled, new UINs
# can be created via the legacy protocol.
export ICQ_LEGACY_AUTO_REGISTRATION=false

# Enable department listing feature (groupware functionality).
export ICQ_LEGACY_DEPARTMENTS_ENABLED=false

# Enable broadcast message functionality.
export ICQ_LEGACY_BROADCAST_ENABLED=true

# Enable Web Pager (WWP) message support.
export ICQ_LEGACY_WWP_ENABLED=true

# Comma-separated list of protocol versions that send real connection info (IP,
# port) in user online notifications. Disabled for privacy and interoperability.
# Required for peer-to-peer features (file transfer, direct chat). Example: 5 or
# 3,4,5
export ICQ_LEGACY_DIRECT_CONNECTIONS=5