settings.toml.example

# Session lifetime in seconds; 31 days by default
PERMANENT_SESSION_LIFETIME = 2678400

# Feed refresh interval in minutes
REFRESH_INTERVAL_MINUTES = 20

# Favicon re-check cadence (days). Successes are revalidated monthly; failures weekly.
# FAVICON_OK_REFRESH_DAYS = 30
# FAVICON_RETRY_DAYS = 7

# Block new user account registrations
BLOCK_NEW_ACCOUNTS = true

# Domain name. When set:
#   - nginx obtains a Let's Encrypt certificate for this domain automatically
#     (unless cert.pem/key.pem are present in the deployment directory)
#   - CORS is restricted to https://<domain>
# Without DOMAIN, nginx uses a self-signed certificate and CORS is unrestricted.
# DOMAIN = "your.domain.com"

# Let's Encrypt registration email. When specified, will receive expiry notices.
# LETSENCRYPT_EMAIL = "admin@your.domain.com"

# Uncomment to persist sessions across rebuilds.
# If omitted, a new key is generated on each build (all users are logged out).
# SECRET_KEY = "<generate a strong random string>"

# URLhaus (abuse.ch) Auth-Key for malware URL checking at subscribe time.
# Obtain a free key at https://urlhaus-api.abuse.ch/ (fair use; free for non-commercial use).
# When set, every subscribed URL is checked against the URLhaus database before the
# subscribe task is enqueued. OPML imports are checked inside the background task.
# If omitted, the check is skipped and a warning is logged per attempt.
# URLHAUS_API_KEY = "your-auth-key-here"