/shabti/templates/moinmoin/data/moin/config/more_samples/security_wikiconfig_snippet

https://bitbucket.org/gawel/shabti · #! · 62 lines · 52 code · 10 blank · 0 comment · 0 complexity · 4bdb30668fe23c02237470f3b6f0914b MD5 · raw file

  1. # This is a sample configuration snippet that shows how to configure security
  2. # features of moin, like superuser, ACLs and anti-spam / anti-abuse measures.
  3. # This is checked by some rather critical and potentially harmful actions,
  4. # like despam or PackageInstaller action:
  5. #superuser = [u"YourName", ]
  6. # IMPORTANT: grant yourself admin rights! replace YourName with
  7. # your user name. See HelpOnAccessControlLists for more help.
  8. #acl_rights_before = u"YourName:read,write,delete,revert,admin"
  9. #acl_rights_default = u"Trusted:read,write,delete,revert Known:read,write,delete,revert All:read,write"
  10. #acl_rights_after = u"" # most users don't need this
  11. #acl_hierarchic = False # True to use hierarchical ACLs
  12. #actions_excluded = ['xmlrpc'] # change this if you need xmlrpc or to forbid other actions
  13. # Tracebacks are valuable for analyzing bugs / failures, but they can also
  14. # give more information to web client than you would like, so feel free to
  15. # disable showing them in the client's web browser:
  16. #traceback_show = True # if True, tracebacks are displayed in the web browser
  17. #traceback_log_dir = None # if set to a directory path, tracebacks are written to files there
  18. # Avoid users filling your hard disk with attachments:
  19. #unzip_single_file_size = 2.0 * 1000 ** 2
  20. #unzip_attachments_space = 200.0 * 1000 ** 2
  21. #unzip_attachments_count = 101 # 1 zip file + 100 files contained in it
  22. # Link spam protection for public wikis (default is disabled!):
  23. # a) TextChas (see HelpOnTextChas, strongly recommended!):
  24. #textchas = None # a data structure with site-specific questions/answers
  25. #textchas_disabled_group = None # e.g. u'NoTextChasGroup' if you are a member of this group, you don't get textchas
  26. # b) BadContent antispam regex updates (recommended, needs a reliable internet connection):
  27. #from MoinMoin.security.antispam import SecurityPolicy
  28. #antispam_master_url = "http://master.moinmo.in/?action=xmlrpc2"
  29. # Rate limit for requests (use = None to disable completely)
  30. #surge_action_limits = { # allow max. <count> <action> requests per <dt> secs
  31. # # action: (count, dt)
  32. # 'all': (30, 30),
  33. # 'show': (30, 60),
  34. # 'recall': (10, 120),
  35. # 'raw': (20, 40), # some people use this for css
  36. # 'AttachFile': (90, 60),
  37. # 'diff': (30, 60),
  38. # 'fullsearch': (10, 120),
  39. # 'edit': (30, 300), # can be lowered after making preview different from edit
  40. # 'rss_rc': (1, 60),
  41. # 'default': (30, 60),
  42. #}
  43. #surge_lockout_time = 3600 # secs you get locked out when you ignore warnings
  44. # if nothing else helps, you can use this to deny some IPs:
  45. #hosts_deny = []
  46. # a regex of HTTP_USER_AGENTS that should be excluded from logging
  47. # and receive a FORBIDDEN for anything except viewing a page
  48. # list must not contain 'java' because of twikidraw wanting to save drawing uses this useragent
  49. #ua_spiders = ('archiver|cfetch|charlotte|crawler|curl|gigabot|googlebot|heritrix|holmes|htdig|httrack|httpunit|'
  50. # 'intelix|jeeves|larbin|leech|libwww-perl|linkbot|linkmap|linkwalk|litefinder|mercator|'
  51. # 'microsoft.url.control|mirror| mj12bot|msnbot|msrbot|neomo|nutbot|omniexplorer|puf|robot|scooter|seekbot|'
  52. # 'sherlock|slurp|sitecheck|snoopy|spider|teleport|twiceler|voilabot|voyager|webreaper|wget|yeti')