Initial commit

config/default.example.toml

@@ -0,0 +1,123 @@
+# ============================================================================
+# CG.CX Default Configuration
+# ============================================================================
+# Copy this file to config/local.toml and override values there.
+# Environment variables prefixed with CGCX__ also override these values.
+# Example: CGCX_TELEGRAM__BOT_TOKEN=your_token
+# ============================================================================
+
+# ----------------------------------------------------------------------------
+# Content settings
+# ----------------------------------------------------------------------------
+[content]
+# Whether to keep content files on disk after deletion/blacklisting.
+# If false, files are physically deleted when content is removed.
+keep_content = true
+
+# Share mode: "b" = blacklist mode (allow unless blacklisted)
+#             "w" = whitelist mode (deny unless whitelisted)
+share_mode = "b"
+
+# Default download permission for new uploads.
+default_allow_download = true
+
+# Default max views before auto-destruction. Omit or comment out for no limit.
+# default_max_views = 10
+
+# ----------------------------------------------------------------------------
+# Cryptography
+# ----------------------------------------------------------------------------
+[crypto]
+# Master key source. The master key is used to wrap per-file content keys.
+# Options:
+#   { type = "file", path = "data/master.key" }  -- auto-generates if missing
+#   { type = "env", var = "CGCX_AES_MASTER_KEY" } -- reads from env var
+#
+# File-based is recommended for first setup because it auto-generates.
+aes_master_key_source = { type = "file", path = "data/master.key" }
+
+# ----------------------------------------------------------------------------
+# Telegram Bot
+# ----------------------------------------------------------------------------
+[telegram]
+# Bot token from @BotFather. REQUIRED.
+bot_token = "BOT_TOKEN_PLACEHOLDER"
+
+# Optional: local Bot API server URL for files > 20MB.
+# Leave commented if using default Telegram servers.
+# api_url = "http://localhost:8081"
+
+# ----------------------------------------------------------------------------
+# Telegram Groups
+# ----------------------------------------------------------------------------
+[groups]
+# Group IDs where admin commands (/reload, /blacklist_uid, /whitelist_uid) work.
+# Negative IDs for supergroups. Example: [-1001234567890]
+admin_group_ids = []
+
+# Group IDs where reported content is forwarded for moderator review.
+review_group_ids = []
+
+# ----------------------------------------------------------------------------
+# Storage Paths
+# ----------------------------------------------------------------------------
+[storage]
+# Directory layout for encrypted files.
+paths = { media = "./data/media", documents = "./data/documents", text = "./data/text", temp = "./data/temp" }
+
+# Chunk size for streaming upload/download. Clamped to [8 MiB, 256 MiB].
+chunk_size_bytes = 67_108_864  # 64 MiB
+
+# ----------------------------------------------------------------------------
+# Upload Limits
+# ----------------------------------------------------------------------------
+[upload_limits]
+# Maximum number of files per content entry.
+max_batch_size = 10
+
+# Maximum size of a single file (bytes).
+max_file_size_bytes = 838_860_800  # 800 MiB
+
+# Maximum total size of all files in one batch (bytes).
+max_total_batch_bytes = 2_147_483_648  # 2 GiB
+
+# ----------------------------------------------------------------------------
+# HTTP Server
+# ----------------------------------------------------------------------------
+[server]
+# Public base URL used in share links. MUST match your reverse proxy / TLS.
+base_url = "https://cg.cx"
+
+# Bind address and port for the Axum server.
+bind_address = "127.0.0.1"
+port = 8080
+
+# ----------------------------------------------------------------------------
+# Rate Limiting
+# ----------------------------------------------------------------------------
+[rate_limiting]
+# General API requests per minute (per IP).
+requests_per_minute = 60
+
+# Burst capacity for token bucket.
+burst = 10
+
+# Password attempt limit per minute (per content ID).
+password_attempts_per_minute = 5
+
+# ----------------------------------------------------------------------------
+# Logging
+# ----------------------------------------------------------------------------
+[logging]
+# Log level: trace, debug, info, warn, error
+level = "info"
+
+# ----------------------------------------------------------------------------
+# Frontend Behavior Toggles
+# ----------------------------------------------------------------------------
+[frontend.behavior_toggles]
+# Enable retro CRT-style loading animation.
+enable_retro_animation = true
+
+# Enable floating particle background (desktop only).
+enable_particles = true