hgfhfd

config_example.yaml

@@ -13,6 +13,11 @@ main:
     - example.net
     - example.org
   invite_secret: YOUR_SECRET_HERE
+  # IP hashing secret. Prefer the IP_HASH_SECRET environment variable (.env) so it isn't stored next to the data.
+  # Falls back to invite_secret when neither is set.
+  ip_hash_secret: ""
+  # Previous IP hash secrets, only used to match bans hashed before a rotation (invite_secret is added automatically)
+  ip_hash_legacy_secrets: []
   hide_comments_from_public: false
   guest_anonymize: false
   anon_anonymize: false
@@ -93,6 +98,9 @@ websrv:
   background: true
   log_user_ips: false
   hash_user_ips: true
+  # Device fingerprint of anonymous users (hashed in the browser, used only to enforce bans).
+  # false = never computed or stored; already stored fingerprints are purged. Shown on /privacy.
+  anon_hw_fingerprint: true
   # Data retention in days (0 = keep forever). Shown to users on /privacy.
   retention_ip_days: 30              # stored IPs: user_ips rows deleted, IP columns elsewhere set to NULL
   retention_activity_log_days: 90    # anonymous activity log (actions, IP, fingerprints)