commit 98a49319f7221fecfa5830417e51abfafbef6abe parent 179962fc716237b48b1bda7f7c4c0860f4a95c39 Author: Christian Grothoff <christian@grothoff.org> Date: Tue, 4 Aug 2026 17:51:02 +0200 add missing config file Diffstat:
| A | src/authorization/authorization-file.conf | | | 21 | +++++++++++++++++++++ |
1 file changed, 21 insertions(+), 0 deletions(-)
diff --git a/src/authorization/authorization-file.conf b/src/authorization/authorization-file.conf @@ -0,0 +1,21 @@ +[authorization-file] + +# The "file" authorization method writes the challenge code to a file instead +# of sending it anywhere. It exists for TESTING (and for exercising user +# interfaces such as anastasis-gtk); anyone able to read the file can pass the +# challenge, so do not enable it on a production provider. + +# Set to 'YES' to enable (must then also specify 'COST') +ENABLED = NO + +# Set recovery cost: +# COST = + +# Directory the challenge files are written to. Nothing outside this +# directory can be written: the file name comes from the (client-supplied) +# truth data, and a name that escapes the directory is refused. +# +# The default is $TMPDIR/anastasis-file-challenges, which is a predictable +# name in a shared directory: on a multi-user host, point this somewhere only +# the provider can read. +# DIRECTORY = /var/lib/anastasis/file-challenges