###################################################################################
####################        Webinoly Configuration file        ####################
###################################################################################

#        Don't like our defaults? Every part of Webinoly is overrideable!         #
#                                                                                 # 
# You should NEVER modify this file if you are not sure about what you are doing. #
# We have made a very detailed and extensive documentation just for you!
# Please, read: https://webinoly.com/documentation/                               #
#                                                                                 #
# 1 - Uncomment the variable (Remove the '#' at the beggining)                    #
# 2 - Set your custom value (var:value)                                           #
# 3 - And then 'sudo webinoly -server-reset' to changes take effect.              #
#                                                                                 #
# * Reset only one package is allowed: -server-reset=php (nginx,php,mysql)        #
# ** Operating System settings are loaded with Nginx.                             #
###################################################################################



############################
##### Operating System #####
############################

# Timezone
# Values: https://www.php.net/manual/en/timezones.php
# Default: <empty>
# Same as: sudo webinoly -timezone
###########################
#timezone:America/Mexico_City


# Kernel Optimization
# Values: boolean (true/false)
# Default: true
###########################
#kernel-optim:true


# Percentage of RAM assigned to /run folder
# Values: numeric int (10 < % < 70)
# Default: 25
###########################
#run-folder-size:25


# Size of linux swap file
# Values: numeric int (GB)
# Default: <variable> (calculated based on your server resources)
# Note: (server-reset with 'recalculate' is needed)
###########################
#swap-mem:1





###########################
#####      NGINX      #####
###########################

# Nginx Branch
# Values: stable | mainline
# Default: stable
# Note: (set before installing, server-reset not needed)
# Note: NEVER change this value here when Nginx package is already installed
###########################
#nginx-ppa:stable


# Maximum Upload file size
# Values: numeric int (MB)
# Default: 100
###########################
#max-mb-uploads:100


# Saved Email Address
# Values: <email-address>
# Default: <empty>
# Note: (server-reset not needed)
# Note: Let's Encrypt uses this email to register your certs.
# Note: Existing accounts won't be updated, in that case you better use the proper command shown below to update all your current certs.
# Same as: sudo webinoly -email=user@example.com
###########################
#mail:user@example.com


# SFTP Access for www-data user
# Values: boolean (true/false)
# Default: false
# Same as: sudo webinoly -login-www-data=on
###########################
#sftp-www-data:false


# FastCGI Cache
# Values: <time> (s,m,h,d,w,M,y)
# Default: 30d,7d,1m (Success,Inactive,Redirects)
# Note: https://webinoly.com/documentation/webinolys/#cache
# Same as: sudo webinoly -cache-valid
###########################
#fastcgi-conf:30d,7d,1m


# Nginx Access Logs Disabled
# Values: boolean (true/false)
# Default: true
# Same as: sudo log -only-error=on
###########################
#global-access-log-off:true


# Nginx Default Response
# Values: default | blackhole | <example.com>
# Default: default (Nginx Welcome Page)
# Note: For better security 'blackhole' is highly recommended.
# Same as: sudo webinoly -default-site=blackhole
###########################
#default-response:default


# Admin Tools Access
# Values: default | <example.com>
# Default: default
# Same as: sudo webinoly -tools-site
###########################
#tools-site:default


# Admin Tools Access Port
# Values: numeric int (< 65535)
# Default: 22222
# Same as: sudo webinoly -tools-port
###########################
#tools-port-set:22222


# HTTP Authentication Whitelist IP
# Values: <ip>,<ip>,<ip>...
# Default: <empty>
# Same as: sudo httpauth -whitelist
###########################
#auth-whitelist-ip:1.1.1.1,2.2.2.2


# Block IP Access
# Values: <ip>,<ip>,<ip>...
# Default: <empty>
# Same as: sudo webinoly -blockip
###########################
#blockip:1.1.1.1,2.2.2.2


# IAM Role (AWS Credentials)
# Values: boolean (true/false)
# Default: false
# Note: (server-reset not needed)
# Note: Set to 'true' if your EC2 instance has an IAM Role attached with full access to S3
# Same as: sudo webinoly -aws-s3-credentials=awsiamrole
###########################
#awsiamrole:false


# WordPress Login Basic Authentication
# Values: boolean (true/false)
# Default: true
# Note: (server-reset not needed)
# Note: It will be applied ONLY for sites created after this setting is changed.
# Note: For existing sites you should use the proper command 'sudo httpauth example.com -wp-admin=on'.
# Note: You can whitelist an IP to skip authentication. Read the docs!
###########################
#wp-admin-auth:true


# WordPress XMLRPC requests
# Values: open | limited | blocked
# Default: limited
###########################
#xmlrpc:limited


# Number of lines shown when log command is used (tail)
# Values: numeric int
# Default: 10
###########################
#log-lines:10


# HTTP Header: Cache Control
# Values: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control
# Default: no-cache
# Note: Use 'off' value to disable this header.
###########################
#header-cache-control:public, max-age=604800, immutable


# HTTP Header: Content Security Policy
# Values: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
# Default: <empty>
###########################
#header-csp:default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'
#header-csp-report-only:off


# HTTP Header: HTTP Strict Transport Security (HSTS)
# Values: default | preload | <max-age> | off
# Default: default (31536000)
# Note: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
###########################
#header-hsts:default


# HTTP Header: Permissions Policy
# Values: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy
# Default: <empty>
# Note: Use 'floc' value to automatically include the policy to forbid Topics API calculation.
# Note: https://developer.chrome.com/docs/privacy-sandbox/topics/#site-opt-out
###########################
#header-permissions:microphone 'none'; geolocation 'none'


# HTTP Header: Referrer Policy
# Values: no-referrer | no-referrer-when-downgrade | origin | origin-when-cross-origin | same-origin | strict-origin | strict-origin-when-cross-origin | unsafe-url | off
# Default: no-referrer-when-downgrade
# Note: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
###########################
#header-referrer:no-referrer-when-downgrade


# HTTP Header: X-Content-Type-Options
# Values: boolean (true/false)
# Default: true (nosniff)
# Note: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
###########################
#header-xcto:true


# HTTP Header: X-Frame-Options
# Values: deny | sameorigin | allow-from | off
# Default: sameorigin
# Note: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
###########################
#header-xfo:sameorigin
#header-xfo-url:<allow-from url>


# HTTP Header: X-Robots-Tag
# Values: https://developers.google.com/search/docs/advanced/robots/robots_meta_tag#xrobotstag
# Default: <empty>
# Note: Multiple X-Robots-Tag headers can be combined using the '|' delimiter.
# Note: For example, two separate headers will be added (googlebot: nofollow|otherbot: noindex, nofollow)
###########################
#header-robots:noindex,nofollow


# HTTP Header: X-XSS-Protection
# Values: boolean (true/false)
# Default: true (X-XSS-Protection: 1; mode=block)
# Note: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
###########################
#header-xssp:true


# HTTP Header: Add any other Custom Header
# Read: https://webinoly.com/documentation/webinolys/#customheaders
############################





###########################
######      PHP      ######
###########################

# PHP Version
# Values: https://www.php.net/supported-versions.php
# Default: <latest-stable>
# Note: (set before installing, server-reset not needed)
# Note: NEVER change this value here when PHP package is already installed, use the proper command instead.
# Same as: sudo stack -php-ver=8.1 (<-This is the proper command to change the PHP version even when is already installed)
###########################
#php-ver:8.1


# PHP Process Manager
# Values: static | dynamic | ondemand
# Default: <variable> (calculated based on your server resources)
###########################
#php-pm:dynamic

# PHP number of child processes to be created
# Values: numeric int
# Default: <variable> (calculated based on your server resources)
# Note: start, min and max_spare_servers are calculated automatically based on this 'max_child' value.
###########################
#php-max-child:10


# PHP maximum amount of memory that a script is allowed to allocate
# Values: numeric int (MB)
# Default: 192
###########################
#php-max-mem:192


# PHP maximum time in seconds a script is allowed to run before it is terminated
# Values: numeric int (seconds)
# Default: 60
###########################
#php-max-time:60


# PHP maximum number of files allowed to be uploaded simultaneously
# Values: numeric int
# Default: 20
# Note: To modify the max file/post size, see the 'max-mb-uploads' in Nginx section, that value is also taken by PHP.
###########################
#php-max-files:20


# PHP Path_Info
# Values: boolean (true/false)
# Default: true
# Note: (server-reset not needed)
# Note: It will be applied ONLY for sites created after this setting is changed.
# Note: This setting is always 'false' for WP sites.
###########################
#php-info:true


# Redis maximum amount of memory before eviction policies
# Values: numeric int (% < 100)
# Default: 10
###########################
#redis-max-mem:10





###########################
#####      MySQL      #####
###########################

# MariaDB Version
# Values: https://mariadb.com/kb/en/mariadb-server-release-dates/ (at least latest three stable)
# Default: <latest-stable>
# Note: (set before installing, server-reset not needed)
# Note: NEVER change this value here when MySQL (MariaDB) package is already installed, use the proper command instead.
# Same as: sudo stack -mysql-ver=10.6 (<-This is the proper command to change the MarianDB version even when is already installed)
###########################
#mysql-ver:10.6


# Saved External DB Credentials to use instead of localhost
# Values: <access-data>
# Default: <empty>
# Note: (server-reset not needed)
# Note: https://webinoly.com/documentation/sites/#externaldb
###########################
#external-dbh:<host>
#external-dbx:<port>
#external-dbu:<user>
#external-dbp:<pass>


# Default Database Privileges
# Values: basic | limited | extra | complete | full | grant | all
# Default: full
# Note: (server-reset not needed)
# Note: https://webinoly.com/documentation/webinolys/#privileges
###########################
#dbrole:full


# MySQL General Log
# Values: boolean (true/false)
# Default: false
# Note: When enabled, you can see this log in real-time using 'sudo log -mysql=general'
# Same as: sudo log -mysql=general -enable
#mysql-log-general:false


# MySQL Binary Log
# Values: boolean (true/false)
# Default: false
# Note: When enabled, you can see this log in real-time using 'sudo log -mysql=binary'
# Same as: sudo log -mysql=binary -enable
#mysql-log-binary:false


# MySQL Slow Query Log
# Values: boolean (true/false)
# Default: false
# Note: When enabled, you can see this log in real-time using 'sudo log -mysql=slow'
# Same as: sudo log -mysql=slow -enable
#mysql-log-slow:false


# MySQL Long Query Time
# Values: number int (seconds)
# Default: 10
# Note: If a query takes longer than this many seconds to execute, the query is logged to the slow query log.
# Same as: sudo log -mysql=slow -enable -long-query-time=3
#mysql-long-query-time:3


# MySQL Public/External Access
# Values: boolean (true/false)
# Default: false
# Same as: sudo webinoly -mysql-public-access=on
#mysql-public-access:false





#
##
#####
##########
##############
# Stop editing!
# You should NEVER change the values listed below.
# Just for internal use!
###################################################