manager/config.sample.php

<?php

// Manage server configuration.
//
// Copy this file to config.php on the server and adjust the values.
// config.php is not tracked in Git (.gitignore).
//
// Every constant below has a default in includes/bootstrap.php, so a minimal
// config.php only needs MANAGE_PUBLIC_URL and MANAGE_ADMIN_PASSWORD_HASH.

// ---------------------------------------------------------------------------
// Product
// ---------------------------------------------------------------------------
// One manage deployment serves exactly one product. Deploy it again for another.
define("MANAGE_PRODUCT_NAME", "Example Orderform");

// Prefix for stored release packages: <prefix>-vX.Y.Z.zip
define("MANAGE_PACKAGE_PREFIX", "example-orderform");

// ---------------------------------------------------------------------------
// Public URL
// ---------------------------------------------------------------------------
// Absolute base URL of this installation without a trailing slash. The package
// download URL handed to clients is built from this value, never from the
// client-controlled Host header.
define("MANAGE_PUBLIC_URL", "https://manage.example.org");

// ---------------------------------------------------------------------------
// Admin login
// ---------------------------------------------------------------------------
// Generate a hash with:
//   php -r 'echo password_hash("your-password", PASSWORD_DEFAULT), PHP_EOL;'
define("MANAGE_ADMIN_PASSWORD_HASH", '$2y$12$replace-this-with-a-real-hash');

// Plaintext fallback for a quick first start. Prefer the hash above.
// define("MANAGE_ADMIN_PASSWORD", "change-me");

// ---------------------------------------------------------------------------
// Storage
// ---------------------------------------------------------------------------
define("MANAGE_STORAGE_DIR", __DIR__ . "/storage/");

// ---------------------------------------------------------------------------
// Backups
// ---------------------------------------------------------------------------
// Local backups kept per instance. The UI value in storage/settings.json takes
// precedence once it has been saved. Minimum 1.
define("MANAGE_BACKUP_RETENTION", 30);

// Maximum accepted upload size in bytes (0 disables the check). PHP's own
// upload_max_filesize / post_max_size still apply and are usually lower.
define("MANAGE_BACKUP_MAX_UPLOAD_BYTES", 0);

// ---------------------------------------------------------------------------
// S3 archive (optional)
// ---------------------------------------------------------------------------
// When enabled, every received backup is additionally archived to S3-compatible
// object storage. Local disk then acts as a hot cache holding the newest copies.
define("MANAGE_S3_ENABLED", false);
define("MANAGE_S3_ENDPOINT", "https://fsn1.your-objectstorage.com");
define("MANAGE_S3_REGION", "fsn1");
define("MANAGE_S3_BUCKET", "");
define("MANAGE_S3_PREFIX", "manage-backups");
define("MANAGE_S3_ACCESS_KEY", "");
define("MANAGE_S3_SECRET_KEY", "");
// false = virtual-hosted (https://<bucket>.<endpoint>/<key>), the default for
// Hetzner and most providers. true = path-style (https://<endpoint>/<bucket>/<key>).
define("MANAGE_S3_PATH_STYLE", false);
define("MANAGE_S3_TIMEOUT", 120);
define("MANAGE_S3_RETENTION", 365);

// ---------------------------------------------------------------------------
// Rate limits
// ---------------------------------------------------------------------------
define("MANAGE_LOGIN_RATE_LIMIT_MAX", 10);
define("MANAGE_LOGIN_RATE_LIMIT_WINDOW", 900);
define("MANAGE_API_RATE_LIMIT_MAX", 240);
define("MANAGE_API_RATE_LIMIT_WINDOW", 300);

// ---------------------------------------------------------------------------
// Log retention
// ---------------------------------------------------------------------------
define("MANAGE_LOG_MAX_BYTES", 1048576);
define("MANAGE_LOG_KEEP_FILES", 5);
define("MANAGE_LOG_MAX_AGE_SECONDS", 2592000);