diff options
Diffstat (limited to 'packaging/conf')
| -rw-r--r-- | packaging/conf/hub.toml.example | 41 |
1 files changed, 8 insertions, 33 deletions
diff --git a/packaging/conf/hub.toml.example b/packaging/conf/hub.toml.example index 850bee1..8e249a5 100644 --- a/packaging/conf/hub.toml.example +++ b/packaging/conf/hub.toml.example @@ -51,40 +51,15 @@ access_token_ttl = 14400 # 4 h # admin panel, not here. [captcha] -# reCAPTCHA v2 on registration and password reset, so no mail is ever sent -# before a human has been seen. Absent, or either key empty, disables it -# entirely — which is right for development and for a hub nobody can reach. -# See docs/MESHBAY_DESIGN.md §7.7. -site_key = "" -secret_key = "" +# A proof of work on registration and password reset, issued and checked by +# this hub alone: no third party, no cookie, nothing for a person to do — the +# page solves it while the form is filled in. On by default; turn it off only +# for development or a hub nobody can reach. See docs/MESHBAY_DESIGN.md §7.7. +enabled = true -# Hostnames a solved captcha may have been solved on, checked against the one -# `siteverify` reports — what Google observed, not what the client claims. -# -# Leave empty while the reCAPTCHA key does its own origin check: it is then -# already done, one layer up. Set it when you turn that check off in the -# reCAPTCHA console, and the two go together — turning the console check off -# without setting this leaves no origin check anywhere. -# -# The desktop client is why it exists. Its interface ships inside the package -# and is served from `app://meshbay`, so the hostname Google sees is not this -# hub's and never can be; with the console check on, the widget shows -# "Invalid domain for site key" and nothing client-side reaches that decision. -# -# allowed_hosts = ["hub.example.org", "localhost"] -allowed_hosts = [] - -# A solve Google cannot attribute to a domain reports an *empty* hostname — -# the desktop client's `app://` origin does, and so does any other non-web -# client. No `allowed_hosts` entry matches that, hence a flag rather than a -# blank list entry. -# -# What it admits is every non-web client, not only this project's: a file:// -# page or somebody else's Electron application look identical from here. The -# captcha still has to be solved per token; what is given up is the origin -# restriction for those clients. Leave it off unless you ship the desktop -# client. See docs/MESHBAY_DESIGN.md §7.7. -allow_unattributed_host = false +# The work asked of the page: half of this many SHA-256 on average, all of it +# at worst. The default takes about three seconds on a slow phone. +max_number = 500000 [mail] |