YAML config: improve config structure and keys

unix/vncserver_defaults.yaml

@@ -14,21 +14,17 @@ network:
   ssl:
     pem_certificate: [/etc/...]
     pem_key: [/etc/...]
-    force_ssl: false
+    require_ssl: true
 
 user_session:
+  concurrent_connections_mode: always-allow|prompt|disconnect-new|disconnect-current
+  approval_dialog_timeout: 10
+
   force_session_type: shared|exclusive
   new_session_disconnects_existing_exlusive_session: true
   ask_user_to_vet_new_sessions: false
   vetting_dialog_duration: 10
-
+  idle_timeout: never
-save_resources:
-  user_session:
-    idle_user_session_timeout: never
-  server_process:
-    no_user_session_timeout: never
-    active_user_session_timeout: never
-    inactive_user_session_timeout: never
 
 keyboard:
   remap_keys:
@@ -43,7 +39,7 @@ keyboard:
 
 # Mouse, trackpad, etc.
 pointer:
-  allow_clicks_and_cursor_movement: true
+  enabled: true
 
 runtime_configuration:
   allow_client_to_override_server_settings: true
@@ -56,15 +52,10 @@ logging:
   # 0 - silent(?), 100 - most verbose
   log_level: 0..100
 
-performance:
+security:
-  compare_framebuffer: off|always|auto
+  brute_force_protection:
-  zrle_zlib_level: 0..9
+    blacklist_threshold: 5
-  hextile_improved_compression: true
+    blacklist_timeout: 10
-
-password_cracking_protection:
-  # Blacklist after N login attempts.
-  blacklist_threshold: 5
-  blacklist_timeout: 10
 
 data_loss_prevention:
   visible_region:
@@ -72,23 +63,23 @@ data_loss_prevention:
     left: 10
     right: 40
     bottom: 40
-    allow_click_within_blacked_out_region: false
+    non_visible_region:
-    allow_click_release_within_blacked_out_region: false
+      allow_click_down: false
+      allow_click_release: false
   clipboard:
+    delay_between_operations: none
     # Cut buffers and CLIPBOARD selection.
-    allow_copy_to_client_clipboard: true
+    server_to_client:
-    limit_copied_bytes_to_client_clipboard: 10000|no_limit
+      enabled: true
-    allow_copy_primary_selection_to_client_clipboard: true
+      size: 10000|unlimited
-    allow_paste_to_server: true
+      primary_clipboard_enabled: false
-    limit_bytes_pasted_to_server_clipboard: 10000|no_limit
+    client_to_server:
-    # This many milliseconds must pass between clipboard actions. In
+      enabled: true
-    # milliseconds.
+      size: 10000|unlimited
-    delay_betwwen_operations: 1000
   keyboard:
-    allow_input: true
+    enabled: true
-    # Set to a positive number. To disable, set to "no_limit" or 0.
+    rate_limit: 1|unlimited
-    limit_keypress_rate_per_second: 1|no_limit
+  logging:
-  log_clipboard_and_keyboard_actions:
     level: off|info|verbose
 
 # legacy:
@@ -109,7 +100,7 @@ data_loss_prevention:
 #   x509_key:
 #   gnu_tls_priority: NORMAL
 
-image:
+encoding:
   max_frame_rate: 60
   native_resolution_mode:
     min_quality: 7
@@ -117,24 +108,32 @@ image:
     treat_this_quality_level_as_lossless: 10
     prefer_bandwidth_over_quality: false
     rectangle_compress_threads: auto|number
-  downscaled_resolution_mode:
+
+  video_mode:
     jpeg_quality: auto
     webp_quality: auto
     max_resolution:
       width: 1920
       height: 1080
-    switch_to_downscaled_resolution_mode_threshold: 5
+    enter_video_mode:
-    switch_to_native_resolution_mode_threshold: 3
+      time_threshold: 5
-    high_rate_of_change_area_threshold_to_trigger_downscaled_mode: 45
+      area_threshold: 45
-    print_high_rate_of_change_area_percentage: false
+    exit_video_mode:
+      time_threshold: 3
+    logging: disabled
     scaling_algorithm: nearest|bilinear|progressive_bilinear
 
-auth:
+    compare_framebuffer: off|always|auto
-  disable_basic_auth: false
+    zrle_zlib_level: 0..9
+    hextile_improved_compression: true
 
-# Expert-level settings. No need to change for regular users.
+server:
-omakase:
+  advanced:
-  x_font_path: default
+    x_font_path: default
-  httpd_directory: /usr/share/kasmvnc/www
+    httpd_directory: /usr/share/kasmvnc/www
-  kasm_password_file: ~/.kasmpasswd
+    kasm_password_file: ~/.kasmpasswd
-  x_authtority_file: default
+    x_authtority_file: default
+  auto_shutdown:
+    no_user_session_timeout: never
+    active_user_session_timeout: never
+    inactive_user_session_timeout: never