Configuration

Three separate things, often confused: what the operator sets for the whole instance, what the process is told through its environment, and what each account chooses for itself.

config.toml

Written to ~/.config/ontoplano/config.toml on first run, and edited by the operator or through /admin. Its shape is the OntoplanoConfig interface, so this table is that interface.

[server]

[database]

[week]

[registration]

[account]

allowEmailChange

Whether a person may move their account to another address.

Off unless the instance says otherwise: an email address is what an account is here — it signs in and it receives the reset link — so letting it be changed is the operator's call, not the account holder's.

[reports]

clientErrors

Whether the app may ask people to send in client-side errors.

Off by default: a stack trace is somebody's data leaving their browser, so the instance opts in, and then each person is asked once and can say no. Nothing is ever sent before both have said yes.

[ui]

[media]

maxKilobytes

The biggest single picture this instance accepts, in kilobytes.

Enforced on the server against the bytes actually received, not against what the browser said it was sending. Pictures are rows in the same SQLite file as everything else, so this is also the number that decides how fast that file grows.

[newsletter]

enabled

Whether this instance keeps a list of people to tell when it changes.

Off unless the instance says otherwise, like every other feature that collects an address from somebody who is not an account holder: a self-hosted install has nothing to announce, and a subscribe form on it is a box that fills up with whatever crawlers put in it.

On, it opens one public endpoint — /api/subscribe — which takes an address, sends one confirmation, and does nothing at all until that link is followed.

origin

The site allowed to post the form, if the form is not on this host.

ontoplano.com is a different origin from app.ontoplano.com, so the footer form is a cross-origin POST and the browser will not send it without being told. Empty means same-origin only, which is what a self-hosted instance wants even with the list turned on.

[instance]

tagline

The one line under the name on the signed-out front page.

Here rather than in the component because it is the operator's sentence, not the app's: somebody running this for a household or a team should be able to say what their instance is without editing Svelte. Empty falls back to the line below.

Environment

Every ONTOPLANO_* variable the code actually reads, and where it is read. A variable that stops being consulted leaves this table by itself, which is the point — an env var nobody reads any more is the kind of thing that stays in a deployment script for years.

Per-account settings

Rows in user_settings, one per account per key. These are choices a person makes about their own copy of the app, not the operator.