package data
const (
OptionKeyIsInstalled = "is_installed"
OptionValueIsInstalled = "true"
OptionValueIsNotInstalled = "false"
// KeyIsInstalled is the key for the is_installed option
OptionKeyInstanceID = "instance_id"
OptionKeyLogLevel = "log_level"
OptionKeyDBLogLevel = "db_log_level"
OptionKeyUsingSystemd = "systemd_install"
OptionValueUsingSystemdYes = "true"
OptionValueUsingSystemdNo = "false"
OptionKeyDevelopmentSeeded = "development_seeded"
OptionValueSeeded = "true"
OptionKeyMaxFileUploadSizeMB = "max_file_upload_size_mb"
OptionValueKeyMaxFileUploadSizeMBDefault = "100"
OptionKeyRepeatOffenderMonths = "repeat_offender_months"
OptionKeyAdminSSOLogin = "sso_login"
// SSOProviderEntra is the Microsoft Entra ID provider, also the default when
// the stored provider type is empty so existing configurations keep working
SSOProviderEntra = "entra"
// SSOProviderOIDC is a generic OpenID Connect provider such as Keycloak
SSOProviderOIDC = "oidc"
// SSODefaultScopes are the OIDC scopes requested when none are configured
SSODefaultScopes = "openid profile email"
OptionKeyProxyCookieName = "proxy_cookie_name"
// OptionKeyRemoteBrowserWSPath is the seeded random path segment used for the
// victim-facing remote browser WebSocket endpoint. Randomised at first startup
// so the endpoint is not fingerprinted by path alone.
OptionKeyRemoteBrowserWSPath = "remote_browser_ws_path"
// OptionKeyReportPath is the seeded random path segment used for the recipient
// facing report endpoint. A report button or add-in scrapes the per recipient
// token from the delivered mail and calls this endpoint to mark the recipient as
// having reported the phishing. Randomised at first startup so it can not be
// predicted or fingerprinted per instance.
OptionKeyReportPath = "report_path"
OptionKeyDisplayMode = "display_mode"
OptionValueDisplayModeWhitebox = "whitebox"
OptionValueDisplayModeBlackbox = "blackbox"
OptionKeyAutoPruneOrphanedRecipients = "auto_prune_orphaned_recipients"
OptionKeyReportPDFEnabled = "report_pdf_enabled"
// OptionKeyScimDomain is the single global domain on which SCIM provisioning
// endpoints are served by the phishing server. Empty disables SCIM serving.
OptionKeyScimDomain = "scim_domain"
// OptionKeyScimSoftDeleteRetentionDays is how many days a SCIM-disabled
// (soft-deleted) recipient is kept before being pruned (anonymized + deleted).
OptionKeyScimSoftDeleteRetentionDays = "scim_soft_delete_retention_days"
// OptionValueScimSoftDeleteRetentionDaysDefault is the default retention window.
OptionValueScimSoftDeleteRetentionDaysDefault = 30
OptionKeyObfuscationTemplate = "obfuscation_template"
// OptionValueObfuscationTemplateDefault is the default HTML template for obfuscation
// the template receives {{.Script}} variable containing the obfuscated javascript
OptionValueObfuscationTemplateDefault = `
`
)