[TASK] Deprecate GeneralUtility::isAbsPath()
[Packages/TYPO3.CMS.git] / typo3 / sysext / core / Configuration / DefaultConfigurationDescription.yaml
1 GFX:
2 type: container
3 description: 'Image Processing'
4 items:
5 thumbnails:
6 type: bool
7 description: 'Enables the use of thumbnails in the backend interface.'
8 thumbnails_png:
9 type: bool
10 description: 'If disabled, thumbnails from non-image files will be converted to ''gif'', otherwise ''png'' (default).'
11 gif_compress:
12 type: bool
13 description: 'Enables the use of the <code>\TYPO3\CMS\Core\Imaging\GraphicalFunctions::gifCompress()</code> workaround function for compressing .gif files made with GD or IM, which probably use only RLE or no compression at all.'
14 imagefile_ext:
15 type: list
16 description: 'Commalist of file extensions perceived as images by TYPO3. List should be set to ''gif,png,jpeg,jpg'' if IM is not available. Lowercase and no spaces between!'
17 gdlib:
18 type: bool
19 description: 'Enables the use of GD.'
20 gdlib_png:
21 type: bool
22 description: 'Enables the use of GD, with PNG only. This means that all items normally generated as gif-files will be png-files instead!'
23 processor_enabled:
24 type: bool
25 description: 'Enables the use of Image- or GraphicsMagick.'
26 processor_path:
27 type: text
28 description: 'Path to the IM tools ''convert'', ''combine'', ''identify''.'
29 processor_path_lzw:
30 type: text
31 description: 'Path to the IM tool ''convert'' with LZW enabled! See ''gif_compress''. If your version 4.2.9 of ImageMagick is compiled with LZW you may leave this field blank AND disable the flag ''gif_compress''! Tip: You can call LZW ''convert'' with a prefix like ''myver_convert'' by setting this path with it, eg. <code>/usr/bin/myver_</code> instead of just <code>/usr/bin/</code>.'
32 processor:
33 type: dropdown
34 allowedValues:
35 'ImageMagick': 'Choose ImageMagick for processing images'
36 'GraphicsMagick': 'Choose GraphicsMagick for processing images'
37 description: 'Select which external software on the server should process images - see also the Preset functionality to see what is available.'
38 processor_effects:
39 type: bool
40 description: 'If enabled, apply blur and sharpening in ImageMagick/GraphicMagick functions'
41 processor_allowUpscaling:
42 type: bool
43 description: 'If set, images can be scaled up if told so (in <code>\TYPO3\CMS\Core\Imaging\GraphicalFunctions</code>)'
44 processor_allowFrameSelection:
45 type: bool
46 description: 'If set, the [x] frame selector is appended to input filenames in stdgraphic. This speeds up image processing for PDF files considerably. Disable if your image processor or environment can''t cope with the frame selection.'
47 processor_allowTemporaryMasksAsPng:
48 type: bool
49 description: 'This should be set if your processor supports using PNGs as masks as this is usually faster.'
50 processor_stripColorProfileByDefault:
51 type: bool
52 description: 'If set, the processor_stripColorProfileCommand is used with all processor image operations by default. See tsRef for setting this parameter explicitly for IMAGE generation.'
53 processor_stripColorProfileCommand:
54 type: text
55 description: 'String: Specify the command to strip the profile information, which can reduce thumbnail size up to 60KB. Command can differ in IM/GM, IM also know the -strip command. See <a href="http://www.imagemagick.org/Usage/thumbnails/#profiles" target="_blank" rel="noreferrer">imagemagick.org</a> for details'
56 processor_colorspace:
57 type: text
58 description: 'String: Specify the colorspace to use. Some ImageMagick versions (like 6.7.0 and above) use the sRGB colorspace, so all images are darker then the original. <br />Possible Values: CMY, CMYK, Gray, HCL, HSB, HSL, HWB, Lab, LCH, LMS, Log, Luv, OHTA, Rec601Luma, Rec601YCbCr, Rec709Luma, Rec709YCbCr, RGB, sRGB, Transparent, XYZ, YCbCr, YCC, YIQ, YCbCr, YUV'
59 processor_interlace:
60 type: text
61 description: 'String: Specify the interlace option to use. The result differs in different GM / IM versions. See manual of GraphicsMagick or ImageMagick for right option. <br />Possible values: None, Line, Plane, Partition'
62 jpg_quality:
63 type: int
64 description: 'Integer: Default JPEG generation quality'
65 SYS:
66 type: container
67 description: 'System'
68 items:
69 fileCreateMask:
70 type: text
71 description: 'File mode mask for Unix file systems (when files are uploaded/created).'
72 folderCreateMask:
73 type: text
74 description: 'As above, but for folders.'
75 createGroup:
76 type: text
77 description: 'Group for newly created files and folders (Unix only). Group ownership can be changed on Unix file systems (see above). Set this if you want to change the group ownership of created files/folders to a specific group. This makes sense in all cases where the webserver is running with a different user/group as you do. Create a new group on your system and add you and the webserver user to the group. Now you can safely set the last bit in fileCreateMask/folderCreateMask to 0 (e.g. 770). Important: The user who is running your webserver needs to be a member of the group you specify here! Otherwise you might get some error messages.'
78 sitename:
79 type: text
80 description: 'Name of the base-site.'
81 encryptionKey:
82 type: text
83 description: 'This is a "salt" used for various kinds of encryption, CRC checksums and validations. You can enter any rubbish string here but try to keep it secret. You should notice that a change to this value might invalidate temporary information, URLs etc. At least, clear all cache if you change this so any such information can be rebuilt with the new key.'
84 cookieDomain:
85 type: text
86 description: 'Restricts the domain name for FE and BE session cookies. When setting the value to ".domain.com" (replace domain.com with your domain!), login sessions will be shared across subdomains. Alternatively, if you have more than one domain with sub-domains, you can set the value to a regular expression to match against the domain of the HTTP request. The result of the match is used as the domain for the cookie. eg. <code>/\.(example1|example2)\.com$/</code> or <code>/\.(example1\.com)|(example2\.net)$/</code>. Separate domains for FE and BE can be set using <a href="#FE-cookieDomain">$TYPO3_CONF_VARS[''FE''][''cookieDomain'']</a> and <a href="#BE-cookieDomain">$TYPO3_CONF_VARS[''BE''][''cookieDomain'']</a> respectively.'
87 trustedHostsPattern:
88 type: text
89 description: 'Regular expression pattern that matches all allowed hostnames (including their ports) of this TYPO3 installation, or the string "SERVER_NAME" (default). The default value <code>SERVER_NAME</code> checks if the HTTP Host header equals the SERVER_NAME and SERVER_PORT. This is secure in correctly configured hosting environments and does not need further configuration. If you cannot change your hosting environment, you can enter a regular expression here. Examples: <code>.*\.domain\.com</code> matches all hosts that end with <code>.domain.com</code> with all corresponding subdomains. <code>(.*\.domain|.*\.otherdomain)\.com</code> matches all hostnames with subdomains from <code>.domain.com</code> and <code>.otherdomain.com</code>. Be aware that HTTP Host header may also contain a port. If your installation runs on a specific port, you need to explicitly allow this in your pattern, e.g. <code>www\.domain\.com:88</code> allows only <code>www.domain.com:88</code>, <strong>not</strong> <code>www.domain.com</code>. To disable this check completely (not recommended because it is <strong>insecure</strong>) you can use ".*" as pattern.'
90 devIPmask:
91 type: text
92 description: 'Defines a list of IP addresses which will allow development-output to display. The debug() function will use this as a filter. See the function <code>\TYPO3\CMS\Core\Utility\GeneralUtility::cmpIP()</code> for details on syntax. Setting this to blank value will deny all. Setting to "*" will allow all.'
93 ddmmyy:
94 type: text
95 description: 'Format of Day-Month-Year - see PHP-function <a href="https://php.net/date" target="_blank" rel="noreferrer">date()</a>'
96 hhmm:
97 type: text
98 description: 'Format of Hours-Minutes - see PHP-function <a href="https://php.net/date" target="_blank" rel="noreferrer">date()</a>'
99 USdateFormat:
100 type: bool
101 description: 'If TRUE, dates entered in the TCEforms of the backend will be formatted mm-dd-yyyy'
102 loginCopyrightWarrantyProvider:
103 type: text
104 description: 'If you provide warranty for TYPO3 to your customers insert you (company) name here. It will appear in the login-dialog as the warranty provider. (You must also set URL below).'
105 loginCopyrightWarrantyURL:
106 type: text
107 description: 'Add the URL where you explain the extend of the warranty you provide. This URL is displayed in the login dialog as the place where people can learn more about the conditions of your warranty. Must be set (more than 10 chars) in addition with the ''loginCopyrightWarrantyProvider'' message.'
108 textfile_ext:
109 type: text
110 description: 'Text file extensions. Those that can be edited. Executable PHP files may not be editable if disallowed!'
111 mediafile_ext:
112 type: text
113 description: 'Commalist of file extensions perceived as media files by TYPO3. Lowercase and no spaces between!'
114 binPath:
115 type: text
116 description: 'List of absolute paths where external programs should be searched for. Eg. <code>/usr/local/webbin/,/home/xyz/bin/</code>. (ImageMagick path have to be configured separately)'
117 binSetup:
118 type: multiline
119 description: 'List of programs (separated by newline or comma). By default programs will be searched in default paths and the special paths defined by <code>binPath</code>. When PHP has openbasedir enabled the programs can not be found and have to be configured here. Example: <code>perl=/usr/bin/perl,unzip=/usr/local/bin/unzip</code>'
120 setMemoryLimit:
121 type: int
122 description: 'Integer: memory_limit in MB: If more than 16, TYPO3 will try to use ini_set() to set the memory limit of PHP to the value. This works only if the function ini_set() is not disabled by your sysadmin.'
123 phpTimeZone:
124 type: text
125 description: 'timezone to force for all date() and mktime() functions. A list of supported values can be found at <a href="https://php.net/manual/en/timezones.php" target="_blank" rel="noreferrer">php.net</a>. If this is not set, a valid fallback will be searched for by PHP (php.ini''s <a href="http://www.php.net/manual/en/datetime.configuration.php#ini.date.timezone" target="_blank" rel="noreferrer">date.timezone</a> setting, server defaults, etc); and if no fallback is found, the value of "UTC" is used instead.'
126 UTF8filesystem:
127 type: bool
128 description: |
129 If TRUE then TYPO3 uses utf-8 to store file names. This allows for accented Latin letters as well as any other non-latin characters like Cyrillic and Chinese.
130 <strong>IMPORTANT:</strong> This requires a UTF-8 compatible locale in order to work. Otherwise problems with filenames containing special characters will occur.
131 See [SYS][systemLocale] and <a href="https://php.net/manual/en/function.setlocale.php" target="_blank" rel="noreferrer">setlocale()</a>.
132 systemLocale:
133 type: text
134 description: 'Locale used for certain system related functions, e.g. escaping shell commands. If problems with filenames containing special characters occur, the value of this option is probably wrong. See <a href="https://php.net/manual/en/function.setlocale.php" target="_blank" rel="noreferrer">setlocale()</a>.'
135 reverseProxyIP:
136 type: list
137 description: 'List of IP addresses. If TYPO3 is behind one or more (intransparent) reverse proxies the IP addresses must be added here.'
138 reverseProxyHeaderMultiValue:
139 type: text
140 allowedValues:
141 'none': 'Do not evaluate the reverse proxy header'
142 'first': 'Use the first IP address in the proxy header'
143 'last': 'Use the last IP address in the proxy header'
144 description: 'Defines which values of a proxy header (eg HTTP_X_FORWARDED_FOR) to use, if more than one is found.'
145 reverseProxyPrefix:
146 type: text
147 description: 'Optional prefix to be added to the internal URL (SCRIPT_NAME and REQUEST_URI). Example: When proxying ext-domain.com to int-server.com/prefix this has to be set to <em>prefix</em>'
148 reverseProxySSL:
149 type: text
150 description: '''*'' or list of IP addresses of proxies that use SSL (https) for the connection to the client, but an unencrypted connection (http) to the server. If ''*'' all proxies defined in <a href="#SYS-reverseProxyIP">[SYS][reverseProxyIP]</a> use SSL.'
151 reverseProxyPrefixSSL:
152 type: text
153 description: 'Prefix to be added to the internal URL (SCRIPT_NAME and REQUEST_URI) when accessing the server via an SSL proxy. This setting overrides <a href="#SYS-reverseProxyPrefix">[SYS][reverseProxyPrefix]</a>.'
154 defaultCategorizedTables:
155 type: list
156 description: 'List of comma separated tables that are categorizable by default.'
157 displayErrors:
158 type: int
159 allowedValues:
160 '-1': 'TYPO3 does not touch the PHP setting. If [SYS][devIPmask] matches the user''s IP address, the configured [SYS][debugExceptionHandler] is used instead of the [SYS][productionExceptionHandler] to handle exceptions.'
161 '0': 'Live: Do not display any PHP error message. Sets "display_errors=0". Overrides the value of [SYS][exceptionalErrors] and sets it to 0 (= no errors are turned into exceptions). The configured [SYS][productionExceptionHandler] is used as exception handler.'
162 '1': 'Debug: Display error messages with the registered [SYS][errorHandler]. Sets "display_errors=1". The configured [SYS][debugExceptionHandler] is used as exception handler.'
163 description: 'Configures whether PHP errors or Exceptions should be displayed, effectively setting the PHP option <code>display_errors</code> during runtime.'
164 productionExceptionHandler:
165 type: phpClass
166 description: 'Classname to handle exceptions that might happen in the TYPO3-code. Leave empty to disable exception handling. Default: "TYPO3\CMS\Core\Error\ProductionExceptionHandler". This exception handler displays a nice error message when something went wrong. The error message is logged to the configured logs. Note: The configured "productionExceptionHandler" is used if [SYS][displayErrors] is set to "0" or is set to "-1" and [SYS][devIPmask] doesn''t match the user''s IP.'
167 debugExceptionHandler:
168 type: phpClass
169 description: 'Classname to handle exceptions that might happen in the TYPO3-code. Leave empty to disable exception handling. Default: "TYPO3\CMS\Core\Error\DebugExceptionHandler". This exception handler displays the complete stack trace of any encountered exception. The error message and the stack trace is logged to the configured logs. Note: The configured "debugExceptionHandler" is used if [SYS][displayErrors] is set to "1" or is set to "-1" or "2" and the [SYS][devIPmask] matches the user''s IP.'
170 errorHandler:
171 type: phpClass
172 description: 'Classname to handle PHP errors. E.g.: TYPO3\CMS\Core\Error\ErrorHandler. This class displays and logs all errors that are registered as [SYS][errorHandlerErrors]. Leave empty to disable error handling. Errors will be logged and can be sent to the optionally installed developer log or to the "syslog" database table. If an error is registered in [SYS][exceptionalErrors] it will be turned into an exception to be handled by the configured exceptionHandler.'
173 errorHandlerErrors:
174 type: errors
175 description: 'The E_* constant that will be handled by the [SYS][errorHandler]. Not all PHP error types can be handled! <code>E_USER_DEPRECATED</code> will always be handled, regardless of this setting. Default is 30466 = <code>E_ALL & ~(E_STRICT | E_NOTICE | E_COMPILE_WARNING | E_COMPILE_ERROR | E_CORE_WARNING | E_CORE_ERROR | E_PARSE | E_ERROR)</code> (see <a href="https://php.net/manual/en/errorfunc.constants.php" target="_blank" rel="noreferrer">PHP documentation</a>).'
176 exceptionalErrors:
177 type: errors
178 description: 'The E_* constant that will be converted into an exception by the default [SYS][errorHandler]. Default is 4096 = <code>E_ALL & ~(E_STRICT | E_NOTICE | E_COMPILE_WARNING | E_COMPILE_ERROR | E_CORE_WARNING | E_CORE_ERROR | E_PARSE | E_ERROR | E_DEPRECATED | E_USER_DEPRECATED | E_WARNING | E_USER_ERROR | E_USER_NOTICE | E_USER_WARNING)</code> (see <a href="https://php.net/manual/en/errorfunc.constants.php" target="_blank rel="noreferrer"">PHP documentation</a>). E_USER_DEPRECATED is always excluded to avoid exceptions to be thrown for deprecation messages.'
179 belogErrorReporting:
180 type: errors
181 description: 'Configures which PHP errors should be logged to the "syslog" database table (extension: belog). If set to "0" no PHP errors are logged to the sys_log table. Default is 30711 = <code>E_ALL & ~(E_STRICT | E_NOTICE)</code> (see <a href="https://php.net/manual/en/errorfunc.constants.php" target="_blank" rel="noreferrer">PHP documentation</a>).'
182 generateApacheHtaccess:
183 type: bool
184 description: 'TYPO3 can create <em>.htaccess</em> files which are used by Apache Webserver. They are useful for access protection or performance improvements. Currently <em>.htaccess</em> files in the following directories are created, if they do not exist: <ul><li>typo3temp/compressor/</li></ul>You want to disable this feature, if you are not running Apache or want to use own rulesets.'
185 ipAnonymization:
186 type: int
187 allowedValues:
188 '0': 'Disabled - Do not modify IP addresses at all'
189 '1': 'Mask the last byte for IPv4 addresses / Mask the Interface ID for IPv6 addresses (default)'
190 '2': 'Mask the last two bytes for IPv4 addresses / Mask the Interface ID and SLA ID for IPv6 addresses'
191 description: 'Configures if and how IP addresses stored via TYPO3''s API should be anonymized ("masked") with a zero-numbered replacement. This is respected within anonymization Task, not while creating new log entries.'
192 systemMaintainers:
193 type: array
194 description: 'A list of backend user IDs allowed to access the Install Tool'
195 features:
196 type: container
197 description: 'New features of TYPO3 that are activated on new installations but upgrading installations can still use the old behaviour'
198 items:
199 subrequestPageErrors:
200 type: bool
201 description: 'If on, error pages in the Frontend (such as 404 pages) will be requested internally via the TYPO3 Frontend instead of using an external HTTP request. It may be enabled on an experimental basis, as there are some cases where stateful information is not correctly reset for the subrequest. Disable this feature if you have trouble with stateful services or when some custom extensions overriding PHPs global variables.'
202 redirects.hitCount:
203 type: bool
204 description: 'If on, and if extension "redirects" is loaded, each performed redirect is counted and last hit time is logged to the database.'
205 security.frontend.htmlSanitizeParseFuncDefault:
206 type: bool
207 description: 'If on, HTML sanitizer is enabled in parseFunc during frontend rendering as fall-back, in case it has not define more specifically'
208 security.backend.htmlSanitizeRte:
209 type: bool
210 description: 'If on, rich-text content persisted in backend is processed with HTML Sanitizer to purge cross-site scripting from markup'
211 security.backend.enforceReferrer:
212 type: bool
213 description: 'If on, HTTP referrer headers are enforced for backend and install tool requests to mitigate
214 potential same-site request forgery attacks. The behavior can be disabled in case HTTP proxies filter
215 required `Referer` header. As this is a potential security risk, it is recommended to enable this option.'
216 yamlImportsFollowDeclarationOrder:
217 type: bool
218 description: 'If on, the YAML imports are imported in the order they are defined in the importing YAML configuration.'
219 availablePasswordHashAlgorithms:
220 type: array
221 description: 'A list of available password hash mechanisms. Extensions may register additional mechanisms here. This is usually not extended in LocalConfiguration.php.'
222 EXT:
223 type: container
224 description: 'Extension Installation'
225 items:
226 allowGlobalInstall:
227 type: bool
228 description: 'If set, global extensions in typo3/ext/ are allowed to be installed, updated and deleted etc.'
229 allowLocalInstall:
230 type: bool
231 description: 'If set, local extensions in typo3conf/ext/ are allowed to be installed, updated and deleted etc.'
232 excludeForPackaging:
233 type: list
234 description: 'List of directories and files which will not be packaged into extensions nor taken into account otherwise by the Extension Manager. Perl regular expression syntax!'
235 BE:
236 type: container
237 description: 'Backend'
238 items:
239 languageDebug:
240 type: bool
241 description: 'If enabled, language labels will be shown with additional debug information.'
242 fileadminDir:
243 type: text
244 description: 'Path to the primary directory of files for editors. This is relative to the public web dir, DefaultStorage will be created with that configuration, do not access manually but via <code>\TYPO3\CMS\Core\Resource\ResourceFactory::getDefaultStorage().</code>'
245 lockRootPath:
246 type: text
247 description: 'This path is used to evaluate if paths outside of public web path should be allowed. Ending slash required!'
248 userHomePath:
249 type: text
250 description: 'Combined folder identifier of the directory where TYPO3 backend-users have their home-dirs. A combined folder identifier looks like this: [storageUid]:[folderIdentifier]. Eg. <code>2:users/</code>. A home for backend user 2 would be: <code>2:users/2/</code>. Ending slash required!'
251 groupHomePath:
252 type: text
253 description: 'Combined folder identifier of the directory where TYPO3 backend-groups have their home-dirs. A combined folder identifier looks like this: [storageUid]:[folderIdentifier]. Eg. <code>2:groups/</code>. A home for backend group 1 would be: <code>2:groups/1/</code>. Ending slash required!'
254 userUploadDir:
255 type: text
256 description: 'Suffix to the user home dir which is what gets mounted in TYPO3. Eg. if the user dir is <code>../123_user/</code> and this value is <code>/upload</code> then <code>../123_user/upload</code> gets mounted.'
257 warning_email_addr:
258 type: text
259 description: 'Email address that will receive notification whenever an attempt to login to the Install Tool is made and that will also receive warnings whenever more than 3 failed backend login attempts (regardless of user) are detected within an hour.'
260 warning_mode:
261 type: int
262 allowedValues:
263 '0': 'Do not send notification-emails upon backend-login'
264 '1': 'Send a notification-email every time a backend user logs in'
265 '2': 'Send a notification-email every time an ADMIN backend user logs in'
266 description: 'Send emails to <code>warning_email_addr</code> upon backend-login'
267 passwordReset:
268 type: bool
269 description: 'Enable password reset functionality on the backend login for TYPO3 Backend users. Can be disabled for systems where only e.g. LDAP / OAuth login is allowed. Password reset will then still work on CLI and for admins in the backend.'
270 passwordResetForAdmins:
271 type: bool
272 description: 'Enable password reset functionality for TYPO3 Administrators. This will affect all places such as backend login or CLI. Disable this option for increased security.'
273 requireMfa:
274 type: int
275 allowedValues:
276 '0': 'Do not require multi-factor authentication'
277 '1': 'Require multi-factor authentication for all users'
278 '2': 'Require multi-factor authentication only for non-admin users'
279 '3': 'Require multi-factor authentication only for admin users'
280 '4': 'Require multi-factor authentication only for system maintainers'
281 description: 'Define users which should be required to set up multi-factor authentication.'
282 recommendedMfaProvider:
283 type: text
284 description: 'Set the identifier of the multi-factor authentication provider, recommended for all users.'
285 loginRateLimit:
286 type: int
287 description: 'Maximum amount of login attempts for the time interval in [BE][loginRateLimitInterval], before further login requests will be denied. Setting this value to "0" will disable login rate limiting.'
288 loginRateLimitInterval:
289 type: dropdown
290 allowedValues:
291 '1 minute': '1 minute'
292 '5 minutes': '5 minutes'
293 '15 minutes': '15 minutes'
294 '30 minutes': '30 minutes'
295 description: 'Allowed time interval for the configured rate limit. Individual values using PHP relative formats can be set in AdditionalConfiguration.php.'
296 loginRateLimitIpExcludeList:
297 type: list
298 description: 'IP-numbers (with *-wildcards) that are excluded from rate limiting. Syntax similar to [BE][IPmaskList]. An empty value disables the exclude list check.'
299 lockIP:
300 type: int
301 allowedValues:
302 '0': 'Default: Do not lock Backend User sessions to their IP address at all'
303 '1': 'Use the first part of the editors'' IPv4 address (e.g. "192.") as part of the session locking of Backend Users'
304 '2': 'Use the first two parts of the editors'' IPv4 address (e.g. "192.168") as part of the session locking of Backend Users'
305 '3': 'Use the first three parts of the editors'' IPv4 address (e.g. "192.168.13") as part of the session locking of Backend Users'
306 '4': 'Use the editors'' full IPv4 address (e.g. "192.168.13.84") as part of the session locking of Backend Users (highest security)'
307 description: 'Session IP locking for backend users. See <a href="#FE-lockIP">[FE][lockIP]</a> for details.'
308 lockIPv6:
309 type: int
310 allowedValues:
311 '0': 'Default: Do not lock Backend User sessions to their IP address at all'
312 '1': 'Use the first block (16 bits) of the editors'' IPv6 address (e.g. "2001:") as part of the session locking of Backend Users'
313 '2': 'Use the first two blocks (32 bits) of the editors'' IPv6 address (e.g. "2001:0db8") as part of the session locking of Backend Users'
314 '3': 'Use the first three blocks (48 bits) of the editors'' IPv6 address (e.g. "2001:0db8:85a3") as part of the session locking of Backend Users'
315 '4': 'Use the first four blocks (64 bits) of the editors'' IPv6 address (e.g. "2001:0db8:85a3:08d3") as part of the session locking of Backend Users'
316 '5': 'Use the first five blocks (80 bits) of the editors'' IPv6 address (e.g. "2001:0db8:85a3:08d3:1319") as part of the session locking of Backend Users'
317 '6': 'Use the first six blocks (96 bits) of the editors'' IPv6 address (e.g. "2001:0db8:85a3:08d3:1319:8a2e") as part of the session locking of Backend Users'
318 '7': 'Use the first seven blocks (112 bits) of the editors'' IPv6 address (e.g. "2001:0db8:85a3:08d3:1319:8a2e:0370") as part of the session locking of Backend Users'
319 '8': 'Use the editors'' full IPv6 address (e.g. "2001:0db8:85a3:08d3:1319:8a2e:0370:7344") as part of the session locking of Backend Users (highest security)'
320 description: 'Session IPv6 locking for backend users. See <a href="#FE-lockIPv6">[FE][lockIPv6]</a> for details.'
321 sessionTimeout:
322 type: int
323 description: 'Session time out for backend users in seconds. The value must be at least 180 to avoid side effects. Default is 28.800 seconds = 8 hours.'
324 IPmaskList:
325 type: list
326 description: 'Lets you define a list of IP-numbers (in CIDR-notation, e.g. 194.168.0.0/16,2002::1234:abcd:ffff:c0a8:101/64) that are the ONLY ones allowed access to ANY backend activity. On error an error header is sent and the script exits. Works like IP masking for users configurable through TSconfig. See syntax for that (or look up syntax for the function <code>\TYPO3\CMS\Core\Utility\GeneralUtility::cmpIP())</code>'
327 lockSSL:
328 type: bool
329 description: 'If set, the backend can only be operated from an SSL-encrypted connection (https). A redirect to the SSL version of a URL will happen when a user tries to access non-https admin-urls'
330 lockSSLPort:
331 type: int
332 description: 'Use a non-standard HTTPS port for lockSSL. Set this value if you use lockSSL and the HTTPS port of your webserver is not 443.'
333 cookieDomain:
334 type: text
335 description: 'Same as <a href="#SYS-cookieDomain">$TYPO3_CONF_VARS[''SYS''][''cookieDomain'']</a> but only for BE cookies. If empty, $TYPO3_CONF_VARS[''SYS''][''cookieDomain''] value will be used.'
336 cookieName:
337 type: text
338 description: 'Set the name for the cookie used for the back-end user session'
339 cookieSameSite:
340 type: text
341 allowedValues:
342 'lax': 'Cookies set by TYPO3 are only available for the current site, third-party integrations are not allowed to read cookies, except for links and simple HTML forms'
343 'strict': 'Cookies sent by TYPO3 are only available for the current site, never shared to other third-party packages'
344 'none': 'Allow cookies set by TYPO3 to be sent to other sites as well, please note - this only works with HTTPS connections'
345 description: 'Indicates that the cookie should send proper information where the cookie can be shared (first-party cookies vs. third-party cookies) in TYPO3 Backend.'
346 showRefreshLoginPopup:
347 type: bool
348 description: 'If set, the Ajax relogin will show a real popup window for relogin after the count down. Some auth services need this as they add custom validation to the login form. If it''s not set, the Ajax relogin will show an inline relogin window.'
349 adminOnly:
350 type: int
351 allowedValues:
352 '-1': 'Total shutdown for maintenance purposes'
353 '0': 'Default: All users can access the TYPO3 Backend'
354 '1': 'Only administrators / system maintainers can log in, CLI interface is disabled as well'
355 '2': 'Only administrators / system maintainers have access to the TYPO3 Backend, CLI executions are allowed as well'
356 description: 'Restricts access to the TYPO3 Backend - especially useful when doing maintenance or updates'
357 disable_exec_function:
358 type: bool
359 description: 'Don''t use exec() function (except for ImageMagick which is disabled by <a href="#GFX-im">[GFX][im]</a>=0). If set, all file operations are done by the default PHP-functions. This is necessary under Windows! On Unix the system commands by exec() can be used, unless this is disabled.'
360 compressionLevel:
361 type: text
362 description: 'Determines output compression of BE output. Makes output smaller but slows down the page generation depending on the compression level. Requires a) zlib in your PHP installation and b) special rewrite rules for .css.gzip and .js.gzip (please see <code>_.htacces</code> for an example). Range 1-9, where 1 is least compression and 9 is greatest compression. ''true'' as value will set the compression based on the PHP default settings (usually 5). Suggested and most optimal value is 5.'
363 checkStoredRecords:
364 type: bool
365 description: 'If set, values of the record are validated after saving in DataHandler. Disable only if using a database in strict mode.'
366 checkStoredRecordsLoose:
367 type: bool
368 description: 'If set, make a loose comparison ('''' equals 0) when validating record values after saving in DataHandler.'
369 fileDenyPattern:
370 type: text
371 description: 'A perl-compatible and JavaScript-compatible regular expression (without delimiters "/"!) that - if it matches a filename - will deny the file upload/rename or whatever. For security reasons, files with multiple extensions have to be denied on an Apache environment with mod_alias, if the filename contains a valid php handler in an arbitrary position. Also, ".htaccess" files have to be denied. Matching is done case-insensitive. Default value is stored in PHP constant FILE_DENY_PATTERN_DEFAULT'
372 interfaces:
373 type: text
374 description: 'This determines which interface options are available in the login prompt (All options: "backend,frontend")'
375 explicitADmode:
376 type: dropdown
377 allowedValues:
378 'explicitAllow': 'Administrators have to explicitly grant access for all editors and groups'
379 'explicitDeny': 'Editors have access to all content types by default, access has to explicitly restricted'
380 description: 'Sets the general allow/deny mode for Content Element Types (CTypes) when granting or restricting access for backend users'
381 flexformForceCDATA:
382 type: bool
383 description: 'If set, will add CDATA to Flexform XML. Some versions of libxml have a bug that causes HTML entities to be stripped from any XML content and this setting will avoid the bug by adding CDATA.'
384 versionNumberInFilename:
385 type: bool
386 description: |
387 If enabled, included CSS and JS files loaded in the TYPO3 Backend will have the timestamp embedded in the filename, ie. <code>filename.1269312081.js</code>.
388 This will make browsers and proxies reload the files if they change (thus avoiding caching issues).
389 <strong>IMPORTANT:</strong> This feature requires extra <code>.htaccess</code> rules to work (please refer to the <code>typo3/sysext/install/Resources/Private/FolderStructureTemplateFiles/root-htaccess</code> file shipped with TYPO3).<br />
390 If disabled the last modification date of the file will be appended as a query-string.
391 debug:
392 type: bool
393 description: 'If enabled, the loginrefresh is disabled and pageRenderer is set to debug mode. Furthermore the fieldname is appended to the label of fields. Use this to debug the backend only!'
394 passwordHashing:
395 type: container
396 items:
397 className:
398 type: dropdown
399 allowedValues:
400 'TYPO3\CMS\Core\Crypto\PasswordHashing\Argon2iPasswordHash': 'Good password hash mechanism. Used by default if available.'
401 'TYPO3\CMS\Core\Crypto\PasswordHashing\Argon2idPasswordHash': 'Good password hash mechanism.'
402 'TYPO3\CMS\Core\Crypto\PasswordHashing\BcryptPasswordHash': 'Good password hash mechanism.'
403 'TYPO3\CMS\Core\Crypto\PasswordHashing\Pbkdf2PasswordHash': 'Fallback hash mechanism if argon and bcrypt are not available.'
404 'TYPO3\CMS\Core\Crypto\PasswordHashing\PhpassPasswordHash': 'Fallback hash mechanism if none of the above are available.'
405 options:
406 type: array
407 description: 'Special settings for specific hashes.'
408 FE:
409 type: container
410 description: 'Frontend'
411 items:
412 addAllowedPaths:
413 type: list
414 description: 'Additional relative paths (comma-list) to allow TypoScript resources be in. Should be prepended with ''/''. If not, then any path where the first part is like this path will match. That is: ''myfolder/ , myarchive'' will match eg. ''myfolder/'', ''myarchive/'', ''myarchive_one/'', ''myarchive_2/'' ... No check is done to see if this directory actually exists in the root of the site. Paths are matched by simply checking if these strings equals the first part of any TypoScript resource filepath. (See class template, function init() in <code>\TYPO3\CMS\Core\TypoScript\Parser\TypoScriptParser)</code>'
415 debug:
416 type: bool
417 description: 'If enabled, the total parsetime of the page is added as HTTP response header "X-TYPO3-Parsetime". This can also be enabled/disabled via the TypoScript option <code>config.debug = 0</code>.'
418 compressionLevel:
419 type: int
420 description: 'Determines output compression of FE output. Makes output smaller but slows down the page generation depending on the compression level. Requires zlib in your PHP installation. Range 1-9, where 1 is least compression and 9 is greatest compression. ''true'' as value will set the compression based on the PHP default settings (usually 5). Suggested and most optimal value is 5.'
421 pageNotFoundOnCHashError:
422 type: bool
423 description: 'If TRUE, a page not found call is made when cHash evaluation error occurs, otherwise caching is disabled and page output is displayed.'
424 pageUnavailable_force:
425 type: bool
426 description: 'If TRUE, every frontend page is shown as "unavailable". If the client matches <a href="#SYS-devIPmask">[SYS][devIPmask]</a>, the page is shown as normal. This is useful during temporary site maintenance.'
427 addRootLineFields:
428 type: list
429 description: 'Comma-list of fields from the ''pages''-table. These fields are added to the select query for fields in the rootline.'
430 checkFeUserPid:
431 type: bool
432 description: 'If set, the pid of fe_user logins must be sent in the form as the field ''pid'' and then the user must be located in the pid. If you unset this, you should change the fe_users.username eval-flag ''uniqueInPid'' to ''unique'' in $TCA. This will do: <code>$TCA[''fe_users''][''columns''][''username''][''config''][''eval'']= ''nospace,lower,required,unique'';</code>'
433 loginRateLimit:
434 type: int
435 description: 'Maximum amount of login attempts for the time interval in [FE][loginRateLimitInterval], before further login requests will be denied. Setting this value to "0" will disable login rate limiting.'
436 loginRateLimitInterval:
437 type: dropdown
438 allowedValues:
439 '1 minute': '1 minute'
440 '5 minutes': '5 minutes'
441 '15 minutes': '15 minutes'
442 '30 minutes': '30 minutes'
443 description: 'Allowed time interval for the configured rate limit. Individual values using PHP relative formats can be set in AdditionalConfiguration.php.'
444 loginRateLimitIpExcludeList:
445 type: list
446 description: 'IP-numbers (with *-wildcards) that are excluded from rate limiting. Syntax similar to [BE][IPmaskList]. An empty value disables the exclude list check.'
447 lockIP:
448 type: int
449 allowedValues:
450 '0': 'Default: Do not lock Frontend User sessions to their IP address at all'
451 '1': 'Use the first part of the visitors'' IPv4 address (e.g. "192.") as part of the session locking of Frontend Users'
452 '2': 'Use the first two parts of the visitors'' IPv4 address (e.g. "192.168") as part of the session locking of Frontend Users'
453 '3': 'Use the first three parts of the visitors'' IPv4 address (e.g. "192.168.13") as part of the session locking of Frontend Users'
454 '4': 'Use the visitors'' full IPv4 address (e.g. "192.168.13.84") as part of the session locking of Frontend Users (highest security)'
455 description: 'If activated, Frontend Users are locked to (a part of) their public IP (<code>$_SERVER[''REMOTE_ADDR'']</code>) for their session, if REMOTE_ADDR is an IPv4-address. Enhances security but may throw off users that may change IP during their session (in which case you can lower it). The integer indicates how many parts of the IP address to include in the check for the session.'
456 lockIPv6:
457 type: int
458 allowedValues:
459 '0': 'Default: Do not lock Backend User sessions to their IP address at all'
460 '1': 'Use the first block (16 bits) of the editors'' IPv6 address (e.g. "2001:") as part of the session locking of Backend Users'
461 '2': 'Use the first two blocks (32 bits) of the editors'' IPv6 address (e.g. "2001:0db8") as part of the session locking of Backend Users'
462 '3': 'Use the first three blocks (48 bits) of the editors'' IPv6 address (e.g. "2001:0db8:85a3") as part of the session locking of Backend Users'
463 '4': 'Use the first four blocks (64 bits) of the editors'' IPv6 address (e.g. "2001:0db8:85a3:08d3") as part of the session locking of Backend Users'
464 '5': 'Use the first five blocks (80 bits) of the editors'' IPv6 address (e.g. "2001:0db8:85a3:08d3:1319") as part of the session locking of Backend Users'
465 '6': 'Use the first six blocks (96 bits) of the editors'' IPv6 address (e.g. "2001:0db8:85a3:08d3:1319:8a2e") as part of the session locking of Backend Users'
466 '7': 'Use the first seven blocks (112 bits) of the editors'' IPv6 address (e.g. "2001:0db8:85a3:08d3:1319:8a2e:0370") as part of the session locking of Backend Users'
467 '8': 'Use the visitors'' full IPv6 address (e.g. "2001:0db8:85a3:08d3:1319:8a2e:0370:7344") as part of the session locking of Backend Users (highest security)'
468 description: 'If activated, Frontend Users are locked to (a part of) their public IP (<code>$_SERVER[''REMOTE_ADDR'']</code>) for their session, if REMOTE_ADDR is an IPv6-address. Enhances security but may throw off users that may change IP during their session (in which case you can lower it). The integer indicates how many parts of the IP address to include in the check for the session.'
469 lifetime:
470 type: int
471 description: 'If >0 and the option permalogin is >=0, the cookie of FE users will have a lifetime of the number of seconds this value indicates. Otherwise it will be a session cookie (deleted when browser is shut down). Setting this value to 604800 will result in automatic login of FE users during a whole week, 86400 will keep the FE users logged in for a day.'
472 sessionTimeout:
473 type: int
474 description: 'Server side session timeout for frontend users in seconds. Will be overwritten by the lifetime property if the lifetime is longer.'
475 sessionDataLifetime:
476 type: int
477 description: 'If >0, the session data of an anonymous session will timeout and be removed after the number of seconds given (86400 seconds represents 24 hours).'
478 permalogin:
479 type: text
480 description: '<dl><dt>-1</dt><dd>Permanent login for FE users is disabled.</dd><dt>0</dt><dd>By default permalogin is disabled for FE users but can be enabled by a form control in the login form.</dd><dt>1</dt><dd>Permanent login is by default enabled but can be disabled by a form control in the login form.</dd><dt>2</dt><dd>Permanent login is forced to be enabled.</dd></dl> In any case, permanent login is only possible if <a href="#FE-lifetime">[FE][lifetime]</a> lifetime is > 0.'
481 cookieDomain:
482 type: text
483 description: 'Same as <a href="#SYS-cookieDomain">$TYPO3_CONF_VARS[''SYS''][''cookieDomain'']</a> but only for FE cookies. If empty, $TYPO3_CONF_VARS[''SYS''][''cookieDomain''] value will be used.'
484 cookieName:
485 type: text
486 description: 'Set the name for the cookie used for the front-end user session'
487 cookieSameSite:
488 type: text
489 allowedValues:
490 'lax': 'Cookies set by TYPO3 are only available for the current site, third-party integrations are not allowed to read cookies, except for links and simple HTML forms'
491 'strict': 'Cookies sent by TYPO3 are only available for the current site, never shared to other third-party packages'
492 'none': 'Allow cookies set by TYPO3 to be sent to other sites as well, please note - this only works with HTTPS connections'
493 description: 'Indicates that the cookie should send proper information where the cookie can be shared (first-party cookies vs. third-party cookies) in TYPO3 Frontend.'
494 defaultUserTSconfig:
495 type: multiline
496 description: 'Enter lines of default frontend user/group TSconfig.'
497 defaultTypoScript_constants:
498 type: multiline
499 description: 'Enter lines of default TypoScript, constants-field.'
500 compareValuesWithCurrentConfiguration: false
501 defaultTypoScript_setup:
502 type: multiline
503 description: 'Enter lines of default TypoScript, setup-field.'
504 compareValuesWithCurrentConfiguration: false
505 additionalAbsRefPrefixDirectories:
506 type: text
507 description: 'Enter additional directories to be prepended with absRefPrefix. Directories must be comma-separated. TYPO3 already prepends the following directories: typo3/, typo3temp/, typo3conf/ext/ and all local storages'
508 enable_mount_pids:
509 type: bool
510 description: 'If enabled, the mount_pid feature allowing ''symlinks'' in the page tree (for frontend operation) is allowed.'
511 hidePagesIfNotTranslatedByDefault:
512 type: bool
513 description: 'If enabled, pages that has no translation will be hidden by default. Basically this will inverse the effect of the page localization setting "Hide page if no translation for current language exists" to "Show page even if no translation exists"'
514 disableNoCacheParameter:
515 type: bool
516 description: 'If set, the no_cache request parameter will become ineffective. This is currently still an experimental feature and will require a website only with plugins that don''t use this parameter. However, using "&amp;no_cache=1" should be avoided anyway because there are better ways to disable caching for a certain part of the website (see COA_INT/USER_INT documentation in TSref).'
517 cacheHash:
518 type: container
519 items:
520 cachedParametersWhiteList:
521 type: array
522 description: 'Only the given parameters will be evaluated in the cHash calculation. Example: tx_news_pi1[uid]'
523 requireCacheHashPresenceParameters:
524 type: array
525 description: 'Configure Parameters that require a cHash. If no cHash is given but one of the parameters are set, then TYPO3 triggers the configured cHash Error behaviour'
526 excludedParameters:
527 type: array
528 description: 'The given parameters will be ignored in the cHash calculation. Example: L,tx_search_pi1[query]'
529 excludedParametersIfEmpty:
530 type: array
531 description: 'Configure Parameters that are only relevant for the cHash if there''s an associated value available. Set excludeAllEmptyParameters to true to skip all empty parameters.'
532 excludeAllEmptyParameters:
533 type: bool
534 description: 'If true, all parameters which are relevant for cHash are only considered if they are non-empty.'
535 additionalCanonicalizedUrlParameters:
536 type: array
537 description: The given parameters will be included when calculating canonicalized URL
538 workspacePreviewLogoutTemplate:
539 type: text
540 description: 'If set, points to an HTML file relative to the TYPO3_site root which will be read and outputted as template for this message. Example: <code>fileadmin/templates/template_workspace_preview_logout.html</code>. Inside you can put the marker %1$s to insert the URL to go back to. Use this in <code>&lt;a href="%1$s"&gt;Go back...&lt;/a&gt;</code> links.'
541 versionNumberInFilename:
542 type: dropdown
543 allowedValues:
544 '': "Do not include the version/timestamp of the file at all"
545 'embed': 'Include the timestamp of the last modification timestamp of files embedded in the filename - e.g. "filename.1269312081.js"'
546 'querystring': 'Default - Append the last modification timestamp of the file as query string e.g. "filename.js?1269312081"'
547 description: |
548 Allows to automatically include a version number (timestamp of the file) to referred CSS and JS filenames
549 on the rendered page. This will make browsers and proxies reload the files if they change (thus avoiding caching issues).
550 <strong>IMPORTANT</strong>: ''embed'' requires extra <code>.htaccess</code> rules to work (please refer to the <code>root-htaccess</code> file shipped with TYPO3 in <code>typo3/sysext/install/Resources/Private/FolderStructureTemplateFiles</code>)
551 passwordHashing:
552 type: container
553 items:
554 className:
555 type: dropdown
556 allowedValues:
557 'TYPO3\CMS\Core\Crypto\PasswordHashing\Argon2iPasswordHash': 'Good password hash mechanism. Used by default if available.'
558 'TYPO3\CMS\Core\Crypto\PasswordHashing\Argon2idPasswordHash': 'Good password hash mechanism.'
559 'TYPO3\CMS\Core\Crypto\PasswordHashing\BcryptPasswordHash': 'Good password hash mechanism.'
560 'TYPO3\CMS\Core\Crypto\PasswordHashing\Pbkdf2PasswordHash': 'Fallback hash mechanism if argon and bcrypt are not available.'
561 'TYPO3\CMS\Core\Crypto\PasswordHashing\PhpassPasswordHash': 'Fallback hash mechanism if none of the above are available.'
562 options:
563 type: array
564 description: 'Special settings for specific hashes.'
565 exposeRedirectInformation:
566 type: bool
567 description: 'If set, redirects executed by TYPO3 publicly expose the page ID in the HTTP header. As this is an internal information about the TYPO3 system, it should only be enabled for debugging purposes.'
568
569 MAIL:
570 type: container
571 description: 'Mail'
572 items:
573 format:
574 type: dropdown
575 allowedValues:
576 'html': 'Send emails only in HTML format'
577 'plain': 'Send emails only in plain text format'
578 'both': 'Send emails in HTML and plain text format'
579 description: 'The Mailer API allows to send out templated emails, which can be configured on a system-level to send out HTML-based emails or plain text emails, or emails with both variants.'
580 layoutRootPaths:
581 type: array
582 description: 'List of paths to look for layouts for templated emails. Should be specified as .txt and .html files.'
583 partialRootPaths:
584 type: array
585 description: 'List of paths to look for partials for templated emails. Should be specified as .txt and .html files.'
586 templateRootPaths:
587 type: array
588 description: 'List of paths to look for template files for templated emails. Should be specified as .txt and .html files.'
589 validators:
590 type: array
591 description: 'List of validators used to validate an email address. <br>Available validators are <code>\Egulias\EmailValidator\Validation\DNSCheckValidation</code>, <code>\Egulias\EmailValidator\Validation\SpoofCheckValidation</code>, <code>\Egulias\EmailValidator\Validation\NoRFCWarningsValidation</code> or by implementing a custom validator.'
592 transport:
593 type: text
594 description: '<dl><dt>smtp</dt><dd>Sends messages over the (standardized) Simple Message Transfer Protocol. It can deal with encryption and authentication. Most flexible option, requires a mail server and configurations in transport_smtp_* settings below. Works the same on Windows, Unix and MacOS.</dd><dt>sendmail</dt><dd>Sends messages by communicating with a locally installed MTA - such as sendmail. See setting transport_sendmail_command bellow.<dd><dt>dsn</dt><dd>Sends messages with the Symfony Mailer. Configure [MAIL][dsn] setting below.</dd><dt>mbox</dt><dd>This doesn''t send any mail out, but instead will write every outgoing mail to a file adhering to the RFC 4155 mbox format, which is a simple text file where the mails are concatenated. Useful for debugging the mail sending process and on development machines which cannot send mails to the outside. Configure the file to write to in the ''transport_mbox_file'' setting below</dd><dt>&lt;classname&gt;</dt><dd>Custom class which implements \Symfony\Component\Mailer\Transport\TransportInterface. The constructor receives all settings from the MAIL section to make it possible to add custom settings.</dd></dl>'
595 transport_smtp_server:
596 type: text
597 description: '<em>only with transport=smtp</em>: &lt;server:port> of mailserver to connect to. &lt;port> defaults to "25".'
598 transport_smtp_encrypt:
599 type: bool
600 description: '<em>only with transport=smtp</em>: Connect to the server using SSL/TLS (disables STARTTLS which is used by default if supported by the server). Must not be enabled when connecting to port 587, as servers will use STARTTLS (inner encryption) via SMTP instead of SMTPS. It will automatically be enabled if port is 465.'
601 transport_smtp_username:
602 type: text
603 description: '<em>only with transport=smtp</em>: If your SMTP server requires authentication, enter your username here.'
604 transport_smtp_password:
605 type: password
606 description: '<em>only with transport=smtp</em>: If your SMTP server requires authentication, enter your password here.'
607 transport_sendmail_command:
608 type: text
609 description: '<em>only with transport=sendmail</em>: The command to call to send a mail locally.'
610 transport_mbox_file:
611 type: text
612 description: '<em>only with transport=mbox</em>: The file where to write the mails into. This file will be conforming the mbox format described in RFC 4155. It is a simple text file with a concatenation of all mails. Path must be absolute.'
613 transport_spool_type:
614 type: text
615 description: '<dl><dt>file</dt><dd>Messages get stored to the file system till they get sent through the command mailer:spool:send.</dd><dt>memory</dt><dd>Messages get sent at the end of the running process.</dd><dt>&lt;classname&gt;</dt><dd>Custom class which implements the \TYPO3\CMS\Core\Mail\DelayedTransportInterface interface.</dd></dl>'
616 transport_spool_filepath:
617 type: text
618 description: '<em>only with transport_spool_type=file</em>: Path where messages get temporarily stored. Ensure that this is stored outside of your webroot.'
619 dsn:
620 type: text
621 description: '<em>only with transport=dsn</em>: The DSN configuration of the Symfony mailer (eg. smtp://user:pass@smtp.example.com:25). For 3rd party transports you have to add additional dependencies. See https://symfony.com/doc/current/mailer.html for more details.'
622 defaultMailFromAddress:
623 type: text
624 description: 'This default email address is used when no other "from" address is set for a TYPO3-generated email. You can specify an email address only (eg. info@example.org).'
625 defaultMailFromName:
626 type: text
627 description: 'This default name is used when no other "from" name is set for a TYPO3-generated email.'
628 defaultMailReplyToAddress:
629 type: text
630 description: 'This default email address is used when no other "reply-to" address is set for a TYPO3-generated email. You can specify an email address only (eg. info@example.org).'
631 defaultMailReplyToName:
632 type: text
633 description: 'This default name is used when no other "reply-to" name is set for a TYPO3-generated email.'
634 HTTP:
635 type: container
636 description: 'Connection'
637 items:
638 cert:
639 type: mixed
640 description: 'Mixed: Set to a string to specify the path to a file containing a PEM formatted client side certificate. See http://docs.guzzlephp.org/en/latest/request-options.html#cert'
641 connect_timeout:
642 type: int
643 description: 'Default timeout for connection. Exception will be thrown if connecting to remote host takes more than this number of seconds.'
644 proxy:
645 type: mixed
646 description: |
647 Default single proxy server as &quot;proxy.example.org&quot;.<br />
648 Multiple proxies for different protocols can be added separately as array as well as authentication and port; see <a href="http://docs.guzzlephp.org/en/latest/request-options.html#proxy" target="_blank" rel="noreferrer">the documentation</a> for details.<br />
649 The configuration with an array must be made in the <code>AdditionalConfiguration.php</code>; see <a href="https://docs.typo3.org/m/typo3/reference-coreapi/master/en-us/ApiOverview/GlobalValues/Typo3ConfVars/Index.html#file-additionalconfiguration-php" target="_blank" rel="noreferrer">the documentation</a> for details.<br />
650 ssl_key:
651 type: mixed
652 description: 'Mixed: Local certificate and an optional passphrase, see http://docs.guzzlephp.org/en/latest/request-options.html#ssl-key'
653 timeout:
654 type: int
655 description: 'Default timeout for whole request. Exception will be thrown if sending the request takes more than this number of seconds. Should be greater than connection timeout (see above) or "0" to not set a limit. Defaults to "0".'
656 verify:
657 type: mixed
658 description: 'Mixed: Describes the SSL certificate verification behavior of a request. http://docs.guzzlephp.org/en/latest/request-options.html#verify'
659 version:
660 type: text
661 description: 'Default HTTP protocol version. Use either "1.0" or "1.1".'