code
e699027b4b
Every account created after the first must confirm a 24-hour link (Lib\Mailer::sendMail(), log-file or MailJet) before AdminAuth::attempt() allows login, folded into the same generic pass/fail as a disabled account or wrong password. First user and pre-migration rows are grandfathered; create-admin-user.php also auto-verifies for lockout recovery. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
64 lines
2.7 KiB
PHP
64 lines
2.7 KiB
PHP
<?php
|
|
|
|
// Override any subset of novaconium/config.php's defaults here — only list
|
|
// the keys you want to change. novaconium/bootstrap.php (and
|
|
// novaconium/bin/clear-cache.php) shallow-merge this over the framework
|
|
// defaults; see /admin/docs/config. Uncomment and adjust any of the
|
|
// examples below, or leave this file returning an empty array to keep
|
|
// every framework default as-is.
|
|
return [
|
|
// 'debug' => false,
|
|
|
|
// 'site_name' => 'My Site',
|
|
|
|
// Docs: /admin/docs/matomo
|
|
// 'matomo_url' => 'https://matomo.example.com/',
|
|
// 'matomo_site_id' => '1',
|
|
|
|
// Docs: /admin/docs/admin-auth — session login for /admin/* against
|
|
// the SQLite-backed users table. After enabling, create the first user
|
|
// at /admin/users, or beforehand (safer) with:
|
|
// php novaconium/bin/create-admin-user.php <username>
|
|
// 'admin_auth_enabled' => true,
|
|
|
|
// Docs: /admin/docs/database — adds (or overrides) named Lib\Db
|
|
// connections. This merges into db_connections by name rather than
|
|
// replacing the whole map, so adding 'legacy' here doesn't require
|
|
// repeating 'default' — see Lib\Db::config().
|
|
// 'db_connections' => [
|
|
// 'legacy' => [
|
|
// 'driver' => 'mysql',
|
|
// 'host' => 'localhost',
|
|
// 'port' => 3306,
|
|
// 'database' => 'legacy_app',
|
|
// 'username' => 'root',
|
|
// 'password' => '...',
|
|
// 'charset' => 'utf8mb4', // optional, defaults to utf8mb4
|
|
// 'migrations_dir' => __DIR__ . '/migrations/legacy', // optional
|
|
// ],
|
|
// ],
|
|
|
|
// Docs: /admin/docs/drafts — requires admin_auth_enabled above (and at
|
|
// least one user) to actually gate anything; open access otherwise,
|
|
// same as the rest of /admin/*.
|
|
// 'draft_routes' => ['blog/upcoming-post'],
|
|
|
|
// Docs: /admin/docs/content-index — powers /sitemap.xml, /search, and
|
|
// blog tag browsing. Off by default (depends on SQLite); enable with:
|
|
// 'content_index_enabled' => true,
|
|
//
|
|
// Or enable but skip the automatic lazy reindex, relying only on
|
|
// `php novaconium/bin/index-content.php` (e.g. from a deploy step):
|
|
// 'content_index_enabled' => true,
|
|
// 'content_index_auto' => false,
|
|
|
|
// Docs: /admin/docs/admin-auth — email verification. Set all four to
|
|
// switch Lib\Mailer's transactional mail (verification links, not the
|
|
// contact form) from the zero-dependency log fallback to MailJet:
|
|
// 'mail_driver' => 'mailjet',
|
|
// 'mail_from_email' => 'noreply@example.com',
|
|
// 'mail_from_name' => 'Example Site',
|
|
// 'mailjet_api_key' => '...',
|
|
// 'mailjet_api_secret' => '...',
|
|
];
|