prayer 1.3.5-dfsg1-2+b1 / etc / prayer / prayer.cf

# $Cambridge: hermes/src/prayer/files/etc/prayer.cf.SRC,v 1.31 2012/07/01 09:20:23 dpc22 Exp $
#
# Prayer - a Webmail Interface
#
# Copyright (c) University of Cambridge 2000 - 2002
# See the file NOTICE for conditions of use and distribution.
#
# Master configuration file
#
# Typical configuration:
#   Read-only                  files stored under $prefix
#   Read-write (i.e: variable) files stored under $var_prefix
#
# Any line can be folded using "\" character at end of line: following
# Linear White space is pruned.

prefix      = "/usr/share/prayer"
var_prefix  = "/var/run/prayer"

# User ID to run as if we start off as root
prayer_user           = "prayer"
# Group ID to run as if we start off as root
prayer_group          = "nogroup"

# Run prayer as background process.
#   TRUE => will return as soon as valid configuration is found.
prayer_background     = TRUE

# Create mode for new files
file_perms            = 0640

# Create mode for new directories
directory_perms       = 0750

# Check existing directories under ${var_prefix}?
#check_directory_perms = TRUE

######################################################################

# Location of backend servers

# Syntax for imapd server entries (applies to both lookups and default):
#   host          - Default IMAP port on given target system
#   host:port     - Defined port on given target system
#   host/ssl      - Default IMAPS port on given target system
#                   (only if SSL support compiled into c-client library)
#   host:port/ssl - Defined port for imap over SSL on given target system
#
# "host1, host2, host3" => interfaces for a multihomed system: Prayer picks
# one interface at random to seed c-client or accountd interface code.

# CDB lookup map overrides default imapd_server location
imapd_user_map      = ""

# Default imapd server.
imapd_server        = localhost/notls

# Name of Prayer user preferences file on IMAP server
prefs_folder_name   = ".prayer"

# "Accountd" is the auxillary account management daemon. At the moment its
# only suitable for the central mail systems in Cambridge.

# Syntax for accountd server entries (applies to both lookups and default):
#   host          - Default ACCOUNTD port on given target system (145)
#   host:port     - Defined port on given target system
#   host/ssl      - Default ACCOUNT port on given target system using SSL.
#                   (only if ACCOUNTD running with SSL support!)
#   host:port/ssl - Defined port for accountd over SSL on given target system
#
# "host1, host2, host3" => interfaces for a multihomed system: Prayer picks
# one interface at random to seed c-client or accountd interface code.

# CDB lookup map overrides default accountd_server location
accountd_user_map   = ""

# Name of normal accountd server, used for most activities.
#accountd_server     = localhost

# Name of NIS master system for password and GECOS name changes
#accountd_nis_server = localhost

# Accountd connections time out after a short time.
accountd_timeout    = 2m

# Talk to Cyrus timsieved using MANAGESIEVE protocol. Overrides accountd stuff
#
# sieved_server     = localhost:2000
# sieved_user_map  = "/opt/dist/users/cyrus.cdb"

# Default timsieved timeout is 10 minutes
sieved_timeout      = 9m

# Cyrus limit defined by sieve_maxscriptsize option
sieve_maxsize       = 32k

# Possible to define a separate accountd server for the NIS master machine
# (for password and fullname updates)
#accountd_nis_server = localhost
#
# Warn user if password and GECOS changes are not immediate
# accountd_passwd_delay   = 30m
# accountd_fullname_delay = 24h

######################################################################
# Mail domain configuration

# Following is used in as SMTP bounce address. Typically one of the entries
# defined on the local_domain list. Defaults to "$default_domain".
#
#return_path_domain    = "<valid mail domain>"

# Define a list of local_domains. These are domains which can be used as
# valid default_domains. Two possible formats:
#
# local_domain  <domain>
# local_domain  <domain> <map>
#
# First format just defines a local_domain which will appear on the list
# visible to user preferences. Second format also defines a list a CDB map
# file which defines valid entries in that domain: used for personal name
# expansion and checking for valid addresses. Defaults to a single
# entry which corresponds to "$default_domain".
#
#local_domain         <domain 1>   $prefix/local_domains/domain1.cdb
#local_domain         <domain 2>   $prefix/local_domains/domain2.cdb

# Filter configuration.
#
# A filter pattern which is equivalent to, or at least approximates the
# list of local domains. Defaults to "$default_domain"
#filter_domain_pattern = "<mail domain or simple wildcard pattern>"

######################################################################

# hostname_service is a DNS servicename for the entire service. Typically
# only needed if you are running more than one Webmail gateway system.
# (Example: webmail.hermes.cam.ac.uk is an alias for webmail[123].hermes...)
#hostname_service = "<common DNS domain for service"

# Hostname is the canonical name for this particular system, used in
# session and icon URLs which are generated by Prayer. This is derived
# automatically using gethostname(2) if no value provided. However, there
# are situations, especially involving SSL certificates where the default
# hostname may not be appropriate. The special value "__UNDEFINED__" here
# means the startup script or command line must provide a hostname using a
# --config-option override or via the environment variable PRAYER_HOSTNAME.
# This is just a safeguard for systems which use DNS round robining to
# distribute load across a number of machines.

#hostname         = "__UNDEFINED__"

# Define a single HTTP port to bind to:
#
# You can define an arbitary list of ports of both kinds by using a series
# of separate "use_http_port" and "use_https_port" directives, with one
# port on each line. Format: "interface:port" or "ipaddr:port" to bind to a
# single interface, "port" to bind to all interfaces.
#
use_http_port       80

# SSL is disabled in the default configuration file as you really need an
# appropriate certificate.
#
# use_https_port      443

# Prayer will put a warning on the login page for HTTP connections if both
# HTTP and HTTPS sessions are available. This will provide a link to the
# SSL version of the service, defaulting to port 443 or failing that the
# first defined HTTPS port. ssl_default_port overrides the built in logic.
#
# Should be rarely required now that Prayer automatically derives an
# appropriate port if none is provided here
#
# ssl_default_port = 443

# Dump core on fatal() error.
fatal_dump_core = FALSE

# Enable verbose logging
log_debug  =  TRUE

# Client must connect from consistent IP addresses. May be useful as
# a security measure in LAN environments. Painful for dialup users
# whose connections may drop out.
fix_client_ipaddr = FALSE

# GZIP compression enabled by default if:
#  1) gzip compression enabled at compile time.
#  2) use_gzip set in user prefs
#  3) User agent known to support Content-Encoding: gzip
#  4) User agent asks for Content-Encoding: gzip or x-gzip.
#  5) IP address of client appears in "gzip_allow_nets" OR
#     IP address of client does not appear in "gzip_allow_nets"
#
# Following IP address lists allow us to tune this a bit more tightly.
# allow list is scanned first, then deny list.
#
# Following is correct for Cambridge networks ONLY
#
#gzip_allow_nets = 131.111.99.0/24
#gzip_deny_nets  = 127.0.0.1 : \
#                  131.111.0.0/16 : 129.169.0.0/16 : \
#                  128.232.0.0/16 : 193.60.80.0/20

# Log hostnames rather than IP addresses to session_log when logging in
# from one of the following networks. A list of fast local networks which
# we know will provide fast reverse lookup from IP address to name.

# Following is correct for Cambridge networks ONLY
#
# log_name_nets = 127.0.0.1 : \
#  131.111.0.0/16 : 129.169.0.0/16 : \
#  128.232.0.0/16 : 193.60.80.0/20

# Limit on any single process to stop runaway process killing system.
limit_vm = 150m

# Limits on the number of messages allowed by a single login session
# (may need to tune this with experience).
recips_max_msg     = 250
recips_max_session = 1000
sending_allow_dir = "${var_prefix}/sending/allow"
sending_block_dir = "${var_prefix}/sending/block"

######################################################################

# Maximum sizes for components in HTTP request. Prayer should be able to
# cope with arbitary size input, however the incoming request has to be
# stored somewhere. Eventually you will run out of swap if someone tries
# hard enough...

# Maximum for initial line in HTTP request
http_max_method_size = 32k
# Maximum for headers associated to this request
http_max_hdr_size    = 64k

# Maximum for HTTP payload. This is the one that is likely to be reached in
# normal use.
http_max_body_size   = 15m

# Minimum and maximum number of preforked "prayer" HTTP servers.
http_min_servers     = 32
http_max_servers     = 256

# Maximum number of connections that each frontend server will process
http_max_connections = 20

# Present HTTP cookies to browser as "username:port=value" rather than
# "username=value" Allows simultaneous login sessions from a single client
# browser.  However can leave a trail of cookies behind. Probably don't
# want this in the long term, its here for experimentation purposes only at
# the moment.
http_cookie_use_port = FALSE

# Various timeouts for HTTP sessions.
# Timeout for (dirty) spare server waiting for fresh HTTP connection
http_timeout_idle    = 10s

# Timeout for HTTP connection which last served an icon URL
http_timeout_icons   = 60s

# Timeout for HTTP connection which last served an session URL
http_timeout_session = 5m

# Icons URLs are valid for 7 days. (In contrast sessions URLs expire
# immediately: Browsers really shouldn't be trying to cache this stuff,
# especially when it is coming in over HTTPS).
icon_expire_timeout  = 7d

# Locatation of SSL certificate file (only used if SSL ports defined).
# Required if we are going to provide SSL services.
ssl_cert_file       = "/etc/ssl/certs/ssl-cert-snakeoil.pem"

# Locatation of SSL private key file (only used if SSL ports defined).
# Required if we are going to provide SSL services.
ssl_privatekey_file = "/etc/ssl/private/ssl-cert-snakeoil.key"

# Master server will regenerate shared RSA key at this interval:
ssl_rsakey_lifespan = 15m

# RSA key remains fresh in child process for this long after first actual use.
ssl_rsakey_freshen  = 15m

# SSL session cache timeout. Uncomment to enable SSL session caching.
# You should also arrange for prayer-ssl-prune to be run periodically.
#ssl_session_timeout = 24h

# EGD socket, if system has no /dev/urandom
#egd_socket = "/var/prngd/urandom"

# List of SSL ciphers to use
# Following requires OpenSSL library with TLS 1.2 support
ssl_cipher_list = "ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!EXP"

# Following should work with older SSL libraries
# ssl_cipher_list = "ALL:!ADH:RC4+RSA:+HIGH:!MEDIUM:!LOW:!SSLv2:!EXP"

# Server picks preferred cipher rather than client: equivalent to Apache
# SSLHonorCipherOrder option.
ssl_server_preference = T

######################################################################
# Session specific configuration

# Session switches to idle mode after this much time: connections to IMAP
# and accountd servers are shut down.
session_idle_time       = 10m

# Session disconnects entirely after this much idle time.
session_timeout         = 30m

# Session disconnects entirely after this much idle time on compose screen
session_timeout_compose = 2h

# Checkpoint "inbox", "other" and draft streams every 20 minutes
stream_checkpoint       = T
stream_ping_interval    = 20m

# Shut down Postponed, Preferences and Transfer streams entirely
# after 15 minutes idle time, but only if idle mode doesn't beat us to it.
stream_misc_timeout = 15m 

# Stat log files every few minutes to see if target file has been
# renamed or removed. 0s => stat() log file every time something is logged.
log_ping_interval  = 10m

# Reopen database files every few minutes to cope with log cycling.
db_ping_interval   = 30m

# Display specific configuration
# Banners for login screen
login_template      = "login"
login_banner        = "Webmail Service Login"
login_service_name  = "Prayer"

# Address are pruned to this many characters on the mailbox list screen
list_addr_maxlen    = 30

# Subjects are pruned to  this many characters on the mailbox list screen
list_subject_maxlen = 30

# Maximum number of folders in shortcut dialogue
change_max_folders  = 20

# Ispell languages that we want to support, with some descriptive text
# for the preferences screen.
use_ispell_language  british   "British English"
use_ispell_language  american  "American English"

# Max size of single attachment: 10 MBytes
draft_att_single_max = 10M

# Max size of all attachments: 10 MBytes
draft_att_total_max  = 10M

# fix_from_address suppresses From address option from Preferences and
# Roles screens.
fix_from_address = FALSE

# Defaults for Cyrus (actually Hermes derivative) spam_purge command.
spam_purge_name = "spam_purge"
spam_purge_prefix = "# Spam Purge Timeout:"
spam_purge_timeout = 60

######################################################################

# Location of sendmail binary or drop in replacement such as Exim.
sendmail_path       = /usr/lib/sendmail

# Location of Aspell Binary (takes precedence over ispell_path)
# aspell_path         = /usr/bin/aspell

# Location of Ispell Binary (backwards compatibility only)
ispell_path         = /usr/bin/ispell

# Message of the day file
#motd_path           = "/etc/prayer/motd.html"

# HTML to make available to login template as $login_insert1
# (only used in "cam" template set).
#login_insert1_path   = "/etc/prayer/login1.html"

# HTML to make available to login template as $login_insert2
# (currently not used in any template set).
#login_insert2_path   = "/etc/prayer/login2.html"

# Login security: Prayer's front page defaults to a login form.
# If the user does not connect via SSL then this can be changed
# to a page without a form (in order to encourage secure logins)
# or changed to a redirect to the secure login page. The insecure
# login page remains accessible if these settings are enabled, so
# it can be disabled for full security.

# Encourage secure logins by omitting the login form from the front page.
ssl_encouraged      = FALSE

# Redirect from the insecure front page to the secure one.
ssl_redirect        = FALSE

# Disable the insecure login page
ssl_required        = FALSE

# Location of icon files
icon_dir            = "$prefix/icons"

# Location of icon files
static_dir          = "$prefix/static"

# Location of binary files
bin_dir             = "/usr/sbin"

# Various directories used by the running system
# Logs stored in $log_dir
log_dir             = "/var/log/prayer"

# $lock_dir used for interlocking between prayer processes
# (only on Debian GNU/kFreeBSD)
lock_dir            = "$var_prefix"

# $socket_dir is location for unix domain sockets which connect frontend
# to backend in proxy mode of operation.
socket_dir          = "$var_prefix/sockets"

# Split socket directory into 64 subdirs keyed on first letter of sessionID
# Code provides compatibility in both directions: can switch back and forward
socket_split_dir    = FALSE

# Name of Unix domain socket (in $socket_dir) used for initial handshake
# between prayer and prayer-session processes when a user logs in
init_socket_name    = init

# $ssl_session_dir is location for SSL session cache 
ssl_session_dir     = "$var_prefix/ssl_scache"

# Location for temporary files e.g; attachments and folders in transist
# during upload and download operation. Core files also end up here
tmp_dir             = "$var_prefix/tmp"

# Location for PID files for prayer and prayer-session master processes.
pid_dir             = "$var_prefix"

# Interface to Hermes finger database
#lookup_rpasswd   = "/data/finger/rpasswd.cdb"
#lookup_rusername = "/data/finger/rusername.cdb"
#lookup_username  = "/data/finger/username.cdb"
#lookup_fullname  = "/data/finger/fullname.cdb"

# Interface to LDAP server
#
#ldap_server      = "ldap.lookup.cam.ac.uk"
#ldap_base_dn     = "ou=people,o=University of Cambridge,dc=cam,dc=ac,dc=uk"
#ldap_timeout     = 15s

######################################################################
# Template stuff

template_path = "/etc/prayer/templates"
template_set  = "old"
template_use_compiled = TRUE

template old  "Traditional"
template cam  "Cambridge House Style"

######################################################################
# Theme stuff

theme blue description           "Web Safe Blue"
theme blue fgcolor               "#000000"       # Black
theme blue fgcolor_link          "#0000ff"       # Dark    Blue
theme blue bgcolor               "#ccffff"       # Light   Blue 
theme blue bgcolor_banner        "#66ffff"       # Darkish Blue
theme blue bgcolor_row1          "#ccffff"       # Light   Blue
theme blue bgcolor_row2          "#99ffff"       # Middle  Blue
theme blue bgcolor_status        "#ffffcc"       # Yellow
theme blue bgcolor_status_none   "#ccffcc"       # Green
theme blue fgcolor_quote1        "#800000"       # Brick Red
theme blue fgcolor_quote2        "#008000"       # Green
theme blue fgcolor_quote3        "#000080"       # Blue
theme blue fgcolor_quote4        "#ff0000"       # Orange

theme green description          "Web Safe Green"
theme green fgcolor              "#000000"       # Black
theme green fgcolor_link         "#0000ff"       # Dark    Blue
theme green bgcolor              "#ccffcc"       # Light   Green
theme green bgcolor_banner       "#99ff99"       # Middle  Green
theme green bgcolor_row1         "#ccffcc"       # Light   Green
theme green bgcolor_row2         "#99ff99"       # Middle  Green
theme green bgcolor_status       "#ffffcc"       # Yellow
theme green bgcolor_status_none  "#ccffff"       # Light   Blue
theme green fgcolor_quote1       "#800000"       # Brick Red
theme green fgcolor_quote2       "#008000"       # Green
theme green fgcolor_quote3       "#000080"       # Blue
theme green fgcolor_quote4       "#ff0000"       # Orange

theme yellow description         "Web Safe Yellow"
theme yellow fgcolor             "#000000"       # Black
theme yellow fgcolor_link        "#0000ff"       # Dark   Blue
theme yellow bgcolor             "#ffffcc"       # Light  Yellow
theme yellow bgcolor_banner      "#ffff66"       # Middle Yellow
theme yellow bgcolor_row1        "#ffffcc"       # Light  Yellow
theme yellow bgcolor_row2        "#ffff66"       # Middle Yellow
theme yellow bgcolor_status      "#ccffff"       # Light  Blue
theme yellow bgcolor_status_none "#ccffcc"       # Green
theme yellow fgcolor_quote1      "#800000"       # Brick Red
theme yellow fgcolor_quote2      "#008000"       # Green
theme yellow fgcolor_quote3      "#000080"       # Blue
theme yellow fgcolor_quote4      "#ff0000"       # Orange

theme gray description          "Shades of Gray" # NB: Not Web safe!
theme gray fgcolor              "#000000"        # Black
theme gray fgcolor_link         "#0000ff"        # Dark   Blue
theme gray bgcolor              "#eeeeee"        # Light  gray
theme gray bgcolor_banner       "#cccccc"        # Dark   gray
theme gray bgcolor_row1         "#eeeeee"        # Light  gray
theme gray bgcolor_row2         "#dddddd"        # Middle gray
theme gray bgcolor_status       "#ffffcc"        # Yellow
theme gray bgcolor_status_none  "#ccffcc"        # Green
theme gray fgcolor_quote1        "#800000"       # Brick Red
theme gray fgcolor_quote2        "#008000"       # Green
theme gray fgcolor_quote3        "#000080"       # Blue
theme gray fgcolor_quote4        "#ff0000"       # Orange

theme high description          "High Constrast" # Yuck!
theme high fgcolor              "#000000"        # Black
theme high fgcolor_link         "#0000ff"        # Dark  Blue
theme high bgcolor              "#ffffff"        # Very, very white
theme high bgcolor_banner       "#cccccc"        # Dark gray
theme high bgcolor_row1         "#ffffff"        # Very, very white
theme high bgcolor_row2         "#cccccc"        # Dark gray
theme high bgcolor_status       "#ffffcc"        # Yellow
theme high bgcolor_status_none  "#ccffcc"        # Green
theme high fgcolor_quote1        "#800000"       # Brick Red
theme high fgcolor_quote2        "#008000"       # Green
theme high fgcolor_quote3        "#000080"       # Blue
theme high fgcolor_quote4        "#ff0000"       # Orange

theme help description          "Default Help Text theme"
theme help fgcolor              "#000000"        # Black
theme help fgcolor_link         "#0000ff"        # Dark Blue
theme help bgcolor              "#ffffcc"        # Yellow
theme help bgcolor_banner       "#66ffff"        # Darkish Blue
theme help bgcolor_row1         "#ccffff"        # Light   Blue
theme help bgcolor_row2         "#99ffff"        # Middle  Blue
theme help bgcolor_status       "#ccffff"        # Light   Blue
theme help bgcolor_status_none  "#ccffcc"        # Green
theme help fgcolor_quote1        "#800000"       # Brick Red
theme help fgcolor_quote2        "#008000"       # Green
theme help fgcolor_quote3        "#000080"       # Blue
theme help fgcolor_quote4        "#ff0000"       # Orange

theme_default_main  = blue
theme_default_help  = help

######################################################################

# Default user preferences

# Confirmation dialogue when user logs out
confirm_logout      = TRUE

# Confirmation dialogue when user hits expunge
confirm_expunge     = FALSE

# Confirmation dialogue when user deletes mail folder or directory
confirm_rm          = TRUE

# Expunge deleted messages from INBOX automatically on logout?
expunge_on_exit     = FALSE

# Number of messages per screen on message list screen
msgs_per_page       = 10

# Max Number of messages per screen on message list screen
msgs_per_page_max   = 50

# Min Number of messages per screen on message list screen
msgs_per_page_min   = 4

# Number of addressbook entries per page on abook_list screen
abook_per_page      = 10

# Max Number of addressbook entries per page on abook_list screen
abook_per_page_max  = 50

# Min Number of addressbook entries per page on abook_list screen
abook_per_page_min  = 4

# Supress dotfiles from directory listing
suppress_dotfiles   = TRUE

# Mail directory in user's account
maildir             = ""

# Use IMAP NAMESPACE command to find personal_hierarchy and hiersep
use_namespace       = TRUE

# If not supplied by NAMESPACE
personal_hierarchy  = ""

# If not supplied by NAMESPACE
hiersep             = "/"

# Dual use mailboxes
dualuse             = FALSE

# Names of postponed_folder and sent_mail_folder, relative to maildir
postponed_folder    = "Drafts"
sent_mail_folder    = "Sent"

# Default domain for outgoing mail. Defaults to "$hostname".
# default_domain      = "<valid mail domain>"

# Language for ispell.
ispell_language     = "american"

# Size of small and large compose windows
small_cols          = 80
small_rows          = 14
large_cols          = 80
large_rows          = 24

# Default Sort mode for mailbox list. One of:
#   ARRIVAL, DATE, FROM, TO, CC, SIZE, SUBJECT, REFERENCES, ORDEREDSUBJECT
#
# ARRIVAL is most efficient, and recommended  
#
sort_mode           = ARRIVAL

# Favour reverse sort rather than normal sort order?
sort_reverse        = FALSE

# Default Sort mode for addressbook list. One of:
#   ORDERED, ALIAS, NAME, COMMENT, ADDRESS
abook_sort_mode     = ORDERED

# Favour reverse sort rather than normal sort order?
abook_sort_reverse        = FALSE

# Wrap lines at this many characters
line_wrap_len       = 76

# Enabled advanced line wrap options?
line_wrap_advanced  = FALSE

# Line wrap automaticaly on reply.
line_wrap_on_reply  = TRUE

# Line wrap automaticaly on spell check.
line_wrap_on_spell  = TRUE

# Line wrap automaticaly on send.
line_wrap_on_send   = TRUE

# sent_mail item on compose screen by default
use_sent_mail       = TRUE

# Use persistent mark for aggregate operations
use_mark_persist    = FALSE

# Zoom automatically after sucessful search
use_search_zoom     = TRUE

# Unmake messages after sucessful aggregate operation
use_agg_unmark      = TRUE

# Use icons: may be overriden by value of User-Agent
use_icons           = TRUE

# Duplicate banner icons on certain screens.
use_tail_banner     = TRUE

# Use HTTP cookie for Session-ID, if the browser supports cookies
# If disabled, or user rejects cookie, then session-ID is stored in URL.
use_cookie          = TRUE

# Use page substiution rather than HTTP redirects. Faster, but the URLs
# that are generated are less predictable.  Page substitution and browser
# history mechanism don't coexist well at the moment (Prayer would need to
# cache final page value for each substiution event).
use_substitution    = FALSE

# Allow HTTP/1.1, if the browser supports it
use_http_1_1        = TRUE

# Allow HTTP/1.1 pipelining, if the browser supports it
use_pipelining      = TRUE

# Allow persistent HTTP/1.1 and HTTP/1.0 persistent connections,
# if the browser supports them
use_persist         = TRUE

# Allow short URLs, if the browser supports them
use_short           = TRUE

# Allow gzip compression, if the browser supports it
use_gzip            = TRUE

# Show text/html bodyparts inline. Content is scrubbed to remove
# dangerous tags: see documentation for more details.
#
# text/html will be displayed in preference to text/plain if this is set.
html_inline         = TRUE

# Show remote images automatically. If this is not set, "Show unsafe images"
# will appear on pages showing HTML mail.
html_remote_images  = FALSE

# Same as above for text/* bodyparts which start "<HTML>" (case-independant!)
# Does anyone other than spammers actually use this?
html_inline_auto    = TRUE

# Send message mime-type through to browser. If FALSE then mime-type
# is replaced with "application/octet-stream" which should force
# download to local disk, bypassing any automatic processing of bodyparts
# by the User-Agent. Unclear at the moment whether we need to do this,
# or whether this should be done selectively based on the User-Agent
preserve_mimetype   = TRUE