Changed Environment Variables in Versions

Auth-Basic

AUTH_BASIC_LDAP_POOL_CHECKOUT_TIMEOUT

Maximum time to wait for a pooled LDAP connection to become available once the pool is exhausted. Defaults to 30s when unset or ⇐ 0. See the Environment Variable Types description for more details.

30s

AUTH_BASIC_LDAP_POOL_ENABLED

Instead of a single long-lived reconnecting connection, enable a bounded pool of LDAP connections. This means that concurrent requests will no longer be serialised on one connection.

false

AUTH_BASIC_LDAP_POOL_SIZE

Maximum number of concurrently open LDAP connections when 'OCIS_LDAP_POOL_ENABLED' is 'true'. Defaults to 5 when unset or ⇐ 0.

5

AUTH_BASIC_LDAP_RETRY_BASE_DELAY

Base delay for exponential backoff between LDAP retries (e.g. '100ms'). Set to 0 to disable backoff.

0s

AUTH_BASIC_LDAP_RETRY_MAX_COUNT

Maximum number of retries for failed LDAP operations. Applies to both read and write operations (with different retryable error sets). Default 1.

1

AUTH_BASIC_LDAP_RETRY_MAX_DELAY

Maximum delay cap for exponential backoff between LDAP retries (e.g. '5s'). 0 (default) uses the library default cap of 60s.

0s

Graph

GRAPH_LDAP_POOL_CHECKOUT_TIMEOUT

Maximum time to wait for a pooled LDAP connection to become available once the pool is exhausted. Defaults to 30s when unset or ⇐ 0. See the Environment Variable Types description for more details.

30s

GRAPH_LDAP_POOL_ENABLED

Instead of a single long-lived reconnecting connection, enable a bounded pool of LDAP connections. This means that concurrent requests will no longer be serialised on one connection.

false

GRAPH_LDAP_POOL_SIZE

Maximum number of concurrently open LDAP connections when 'OCIS_LDAP_POOL_ENABLED' is 'true'. Defaults to 5 when unset or ⇐ 0.

5

GRAPH_LDAP_RETRY_BASE_DELAY

Base delay for exponential backoff between LDAP retries (e.g. '100ms'). Set to 0 to disable backoff.

0s

GRAPH_LDAP_RETRY_MAX_COUNT

Maximum number of retries for failed LDAP operations. Reads retry on transient and network errors; writes retry only when the connection failed before the request was sent (e.g. a reused idle connection found closed), so the request provably never reached the server and cannot be double-applied. Default 1.

1

GRAPH_LDAP_RETRY_MAX_DELAY

Maximum delay cap for exponential backoff between LDAP retries (e.g. '5s'). 0 (default) uses the library default cap of 60s.

0s

GRAPH_LDAP_UPDATE_LAST_SIGNIN_DATE

Update the 'oCLastSignInTimestamp' LDAP attribute of a user when the user signs in. The attribute is only persisted when 'OCIS_LDAP_SERVER_WRITE_ENABLED' is also enabled. Set this to 'false' to avoid an LDAP write on every sign-in, e.g. when the last sign-in timestamp is not needed or the LDAP write load should be reduced.

true

GRAPH_RECEIVED_SHARES_STAT_TIMEOUT

The maximum duration to wait for the storage to respond while resolving a single received share’s resource when listing 'sharedWithMe'. Bounding each resource lookup individually prevents one slow or unreachable resource from consuming the request deadline shared by all the other shares. A share whose resource cannot be statted within this time is still listed as a degraded item instead of being dropped. Defaults to '10s'. See the Environment Variable Types description for more details.

10s

Groups

GROUPS_LDAP_POOL_CHECKOUT_TIMEOUT

Maximum time to wait for a pooled LDAP connection to become available once the pool is exhausted. Defaults to 30s when unset or ⇐ 0. See the Environment Variable Types description for more details.

30s

GROUPS_LDAP_POOL_ENABLED

Instead of a single long-lived reconnecting connection, enable a bounded pool of LDAP connections. This means that concurrent requests will no longer be serialised on one connection.

false

GROUPS_LDAP_POOL_SIZE

Maximum number of concurrently open LDAP connections when 'OCIS_LDAP_POOL_ENABLED' is 'true'. Defaults to 5 when unset or ⇐ 0.

5

GROUPS_LDAP_RETRY_BASE_DELAY

Base delay for exponential backoff between LDAP retries (e.g. '100ms'). Set to 0 to disable backoff.

0s

GROUPS_LDAP_RETRY_MAX_COUNT

Maximum number of retries for failed LDAP operations. Applies to both read and write operations (with different retryable error sets). Default 1.

1

GROUPS_LDAP_RETRY_MAX_DELAY

Maximum delay cap for exponential backoff between LDAP retries (e.g. '5s'). 0 (default) uses the library default cap of 60s.

0s

Proxy

PROXY_OIDC_ACCESS_TOKEN_VERIFY_AUD

A list of accepted audiences for OIDC access tokens, usually the OIDC client IDs used to access ownCloud (for example the web and desktop client IDs). When set, a JWT access token is only accepted if one of these values is present in its 'aud' claim or matches its 'azp' claim. This prevents tokens issued for other applications of a shared IDP from being accepted. When set via the environment variable, use a comma-separated list. Has no effect when 'PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD' is set to 'none'. Leave empty to disable the check (default).

[]

Users

USERS_LDAP_POOL_CHECKOUT_TIMEOUT

Maximum time to wait for a pooled LDAP connection to become available once the pool is exhausted. Defaults to 30s when unset or ⇐ 0. See the Environment Variable Types description for more details.

30s

USERS_LDAP_POOL_ENABLED

Instead of a single long-lived reconnecting connection, enable a bounded pool of LDAP connections. This means that concurrent requests will no longer be serialised on one connection.

false

USERS_LDAP_POOL_SIZE

Maximum number of concurrently open LDAP connections when 'OCIS_LDAP_POOL_ENABLED' is 'true'. Defaults to 5 when unset or ⇐ 0.

5

USERS_LDAP_RETRY_BASE_DELAY

Base delay for exponential backoff between LDAP retries (e.g. '100ms'). Set to 0 to disable backoff.

0s

USERS_LDAP_RETRY_MAX_COUNT

Maximum number of retries for failed LDAP operations. Applies to both read and write operations (with different retryable error sets). Default 1.

1

USERS_LDAP_RETRY_MAX_DELAY

Maximum delay cap for exponential backoff between LDAP retries (e.g. '5s'). 0 (default) uses the library default cap of 60s.

0s

Special Scope Envvars

OCIS_LDAP_INSTANCE_MAPPER_CACHE_TTL

Max TTL in seconds for the LDAP instance mapper cache. Requires OCIS_MULTI_INSTANCE_ENABLED.

60000000000

Graph

GRAPH_MAX_IMAGE_FILE_SIZE

The maximum file size of an image which can be set as a space image. Must be less than or equal to 'THUMBNAILS_MAX_INPUT_IMAGE_FILE_SIZE' of the thumbnails service, otherwise images between the two values are accepted but cannot be rendered. Usable common abbreviations: [KB, KiB, MB, MiB, GB, GiB, TB, TiB, PB, PiB, EB, EiB], example: 2GB. Set to 0 to not limit the file size.

50MB

Invitations

INVITATIONS_KEYCLOAK_EXECUTE_ACTIONS

A comma-separated list of Keycloak required actions sent to invited guests via the execute-actions email. Values are passed to Keycloak as-is. Defaults to 'UPDATE_PASSWORD,VERIFY_EMAIL'. See the Environment Variable Types description for more details.

[UPDATE_PASSWORD VERIFY_EMAIL]

Special Scope Envvars

OCIS_CACHE_DATABASE

The database name the configured store should use.

%%NEXT_PRODUCTION_VERSION%%

The use of OCIS_CACHE_DATABASE in the frontend service is deprecated because the OCS API is deprecated

OCIS_CACHE_DISABLE_PERSISTENCE

Disable persistence of the cache. Only applies when using the 'nats-js-kv' store type. Defaults to false.

%%NEXT_PRODUCTION_VERSION%%

The use of OCIS_CACHE_DISABLE_PERSISTENCE in the frontend service is deprecated because the OCS API is deprecated

OCIS_SHARING_PUBLIC_SHARE_MUST_HAVE_PASSWORD

Set this to true if you want to enforce passwords on all public shares.

%%NEXT_PRODUCTION_VERSION%%

The OCS API is deprecated

OCIS_SHARING_PUBLIC_WRITEABLE_SHARE_MUST_HAVE_PASSWORD

Set this to true if you want to enforce passwords for writable shares. Only effective if the setting for 'passwords on all public shares' is set to false.

%%NEXT_PRODUCTION_VERSION%%

The OCS API is deprecated