Configuration file

All the the Masa settings can be found in /config/setting.ini.cfm. A template for this file is available in/core/templates/settings.template.cfm

The “settings.ini.cfm” File

This file contains the configuration setting for Masa CMS.

Example 

[production]
adminemail=info@masacms.com
dbtype=mysql
yourOwnKey=Your Value

You can use a semicolon (;) to comment a line. This line is then ignored.

Reference

You can find a reference for this configuration file below.

Settings Section

appreloadkey

Type
string
Default
appreload
Description
The URL variable used to reload Masa CMS

mode

Type
string
Default
production
Description
The mode in which Masa CMS is running determines which configuration is loaded

Mode Section

admindomain

Updated in 7.6.0

Type
list
Default
empty string
Description
Configures seperate URL(s) for the Masa CMS Admin

admindir

Type
string
Default
/admin
Description
Configure a different directory for the Masa CSM Admin other than '/admin'. Masa CMS must be reloaded from the webroot for this change to have effect.

adminemail

Type
string
Default
empty string
Description
The default email address for the Masa CMS Admin administrator.

adminssl

Type
boolean
Default
false
Description
Configuration option whether a SSL certificate is present for the Masa CMS Admin

allowedadmindomain

Type
list
Default
empty string
Description
List of domains of which users set to system users when authenticating using SSO

allowautoupdates

Type
boolean
Default
true
Description
Configuration option to display auto-update links in the Masa CMS Admin

alloweddomain

Type
list
Default
empty string
Description
List of domains of which users are allowed to authenticate using SSO, if not allowed the user is created but set to inactive

allowedadmingroupemaillist

Type
list
Default
empty string
Description
List of email addresses of users that are added to admin group when authenticating using SSO

allowedindexfiles

Type
string
Default
index.cfm, index.json, index.html
Description
Filenames that are allowed to be used in the index of Masa CMS

allowlocalfiles

Type
boolean
Default
false
Description
Allow whether local files may be used when importing into Masa CMS

allowsimplehtmlforms

Type
boolean
Default
true
Description
When this value is set to false only forms are allowed that are build using the FormBuilder.

alloweds2emaillist

Type
list
Default
empty string
Description
List of email addresses of users that are set to super user when authenticating using SSO

allowunicodeinfilenames

Type
boolean
Default
false
Description
Allow filenames with unicode characters

assetdir

Type
string
Default
empty string
Description
Configurable directory where the assets of your site are located

assetpath

Type
string
Default
empty string
Description
Configurable URL where the assets of you sites are located.

autodiscoverplugins

Type
boolean
Default
false
Description
Let Masa CMS automatically scan for plugins and install them.

autoresetpasswords

Type
boolean
Default
false
Description
When set to true then the password is reset of the user using the 'Lost Password' functionality. An e-mail with the new password is sent. Otherwise just an e-mail with a link to log in is sent to the user.

autoupdatemode

Type
string
Default
default
Description
Options are default and preview. This last option allows Beta releases to be used for the update.

autoupdatesleep

Type
numeric
Default
empty
Description
Tells Masa CMS to pause for a number of seconds after updating the core. This is usefull for files to be synched across multiple servers.

autoupdateurl

Type
string
Default
https://github.com/MasaCMS/MasaCMS/archive/main.zip
Description
URL of the zip archive that is downloaded when executing an "update core" in the Masa CMS Admin. When upgrading from Mura CMS, set this to https://github.com/MasaCMS/MasaCMS/archive/main.zip.

azureadclientid

New in 7.4.3

Type
string
Default
empty string
Description
Oauth client ID for Azure AD SSO configuration

azureadclientsecret

New in 7.4.3

Type
string
Default
empty string
Description
Oauth client secret for Azure AD SSO configuration

azureadtenant

New in 7.5

Type
string
Default
empty string
Description
Oauth multi-tenant setting for Azure AD SSO configuration. Use one of the following values: common, organizations, consumers

azureadtenantid

New in 7.4.3

Type
string
Default
empty string
Description
Oauth tenant ID for Azure AD SSO configuration

bcryptpasswords

Type
boolean
Default
true
Description
Configurable option to encrypt the passwords using BCrypt, if set to false passwords are hashed instead.

bcryptlogrounds

Type
numeric
Default
10
Description
When BCrypt is being used, then this configures how many logrounds are used for adding salt to the encryption proces.

bcryptreseedfrequency

Type
numeric
Default
60
Description
When BCrypt is being used, then this configures how often to re-seed in seconds.

broadcastclustercommands

Type
boolean
Default
true
Description
When Masa CMS is using a cluster, broadcast cluster commmands.

broadcastappreloads

Type
boolean
Default
true
Description
When Masa CMS is using a cluster, broadcast app reloading.

broadcastcachepurges

Type
boolean
Default
true
Description
When Masa CMS is using a cluster, broadcast cache purges.

bundledeployerroremail

Type
string
Default
empty
Description
If the deployment of a site bundle fails, a mail can be sent to an e-mail address with debugging information.

bundleminspacerequired

Type
numeric
Default
1
Description
Before attempting to create a site bundle, check if the 'bundleminspacerequired' is available. If not, generate an error. Value is in Gb.

cffpconfigfilename

Type
string
Default
cffp.ini.cfm
Description
Configure an alternate config file for CFFormProtect.

contentgatewaytable

Type
string
Default
tcontent
Description
Configure an alternate database table for content, other than 'tcontent'.

clearoldbroadcastcommands

Type
boolean
Default
false
Description
When Masa CMS is using a cluster, clear the old broadcast commands.

clientmanagement

Type
boolean
Default
false
Description
Application.cfc variable

clientstorage

Type
string
Default
empty string
Description
Application.cfc variable

confirmsaveasdraft

Type
boolean
Default
true
Description
When you navigate away without saveng an alert is shown if you want to save the changes as 'draft'.

context

Type
string
Default
empty string
Description
Masa CMS wil automatically configure this field when installed. If you move Masa CMS to a different location you must update this setting.

cookiedomain

Type
string
Default
empty string
Description
Configures the domain of the cookie

cookiepath

Type
string
Default
empty string
Description
Configures the domain of the cookie

createrequireddirectories

Type
boolean
Default
true
Description
Setting whether to create the required directories needed for Masa CMS or not. Usefull in a clustered enviroment in which directories are already synched and not need to be created by Masa CMS.

customtagpaths

Type
string
Default
empty string
Description
Configure the path in which the Customtags are located. Comma-delimited list.

customurlvardelimiters

Type
string
Default
empty
Description
Configure custom delimeter for URL variables.

dashboard

Type
boolean
Default
true
Description
Setting whether the Dashboard can be enabled per site in Site Settings. --> Edit Settings --> Modules

dashboardcomments

Type
boolean
Default
true
Description
Show comments on the Dashboard in the Masa CMS Admin.

datacollection

Type
boolean
Default
true
Description
Enable Data Collection Manager.

datasource

Type
string
Default
empty string
Description
Configurable datasource where Masa CMS should acces the database.

dbcasesensitive

Type
boolean
Default
false
Description
Configure if your database is CaSe SeNsItIvE (like Oracle or Postgres)

dbpassword

Type
string
Default
empty string
Description
Do not use this setting if you have datasource configured.

dbtype

Type
string
Default
empty string
Description
Configure which database type Masas CMS is running on. Supported options are 'MS SQL', 'MySQL', 'Postgres' and 'Oracle'

dbtablespace

Type
string
Default
USERS
Description
Configurable option only for Oracle databases

dbusername

Type
string
Default
empty string
Description
Do not use this setting if you have datasource configured.

debuggingenabled

Type
boolean
Default
true
Description
Configurable option whether so show CFML errors in the browser or use the files under errortemplate config option when set to false

defaultfilemode

Type
integer
Default
777
Description
If Masa CMS is installed on a *nix type sytem the default file permissions are configured with this option

defaultlocale

Type
string
Default
empty string
Description
Configure a default locale.

defaultthemeurl

Type
string
Default
https://github.com/MasaCMS/MasaBootstrap5/archive/main.zip
Description
When Masa CMS is stared for the first time, no Masa Theme is present and a Default Theme is downloaded. Currently this is the Masa Bootstrap 5 Theme.

deniedbundleassetextensions

New in 7.6.1

Type
string
Default
cfm,cfml,cfc,cfs,cfr,jsp,jspx,php,php3,php4,php5,phtml,phps,asp,aspx,ashx,asmx,sh,bash,bat,cmd,exe,pl,py,rb,jar,war,class
Description
Comma separated list of executable file extensions that are rejected when a content bundle unpacks files into a site's asset or file directory. This prevents executable files (such as CFML templates) from being written to a web-served location where they could be run. Intentional site/theme templates in a full bundle are still allowed (they extract to the theme directory, not the asset directory). Add extensions here to further restrict what may be imported.

deniedbundleconfigfiles

New in 7.6.1

Type
string
Default
.htaccess,.htpasswd,.htgroups,.htdigest,web.config,.user.ini,httpd.conf,php.ini
Description
Comma separated list of server-configuration file names that are rejected in any content bundle, including full site bundles. These files can change server behaviour and are never a legitimate part of a theme or asset, so they are refused regardless of the archive type. Matched against each entry's file name.

deniedfeedjointables

New in 7.6.1

Type
string
Default
tusers,tusersmemb,tusergroups,tsettings,tusersession,toauthtokens,tremembertokens,tpermissions,tsessiontracking,tredirects,toauthclients,tuserremotesessions,tuserdevice
Description
Comma separated list of database tables that public feed queries may never join to, aggregate over, group by, or sort on. This applies to the content feed, the generic entity feed, and the user feed, and protects sensitive tables (users, settings, permissions, session/redirect/OAuth tokens, etc.) from being referenced through feed parameters. Add your own sensitive custom tables to this list if needed.

disableadmin

Type
boolean
Default
false
Description
Disables the Masa CMS Admin on this server. Requests to the admin directory are handled as a regular front-end request for that path, which normally results in a 404 page. The front-end editing tools, which rely on the admin, are not available either. Useful for public-facing servers in a cluster where content is managed on a separate authoring server. Masa CMS must be reloaded for this change to take effect.

editablecomments

Type
boolean
Default
empty
Description
Setting whether a comment can be edited after it has been created.

emailbroadcaster

Type
boolean
Default
empty
Description
Setting whether the EmailBroadcaster can be enabled per site in Site Settings. --> Edit Settings --> Modules

enabledynamiccontent

Type
boolean
Default
false
Description
Enable usage of script, object, applet, embed, layer, ilayer, frameset, param, meta, base, xss, marquee in content.

enablemuratag

Type
boolean
Default
false
Description
Configure whether the content in the [m] tag is parsed. This is a global setting; you can overwrite this setting per site in the contentRenderer.cfc.

enableoauth

Type
list
Default
empty string
Description
List of enabled oauth providers.
Options: google, facebook, github, azuread

encryptionkey

Type
string
Default
hash of getCurrentTemplatePath()
Description
A placholder for developers to store an application-wide encryption key

encryptpasswords

Type
boolean
Default
true
Description
Configure whether to encrypt the passwords for the users in the database.

errortemplate

Type
string
Default
/muraWRM/config/error.html
Description
When debuggingenabled=false then the template in this path is used to display an error in the browser

facebookclientid

Type
string
Default
empty string
Description
Oauth client ID for Facebook SSO configuration

facebookclientsecret

Type
string
Default
empty string
Description
Oauth client secret for Facebook SSO configuration

filebrowsereditlist

Type
string
Default
txt,html,htm,css,less,scss
Description
Configure which file extensions can be edited in the File Browser of the Masa CMS Admin.

filebrowserimagelist

Type
string
Default
gif,jpg,jpeg,png
Description
Configure which file extensions are treated like images in the File Browser of the Masa CMS Admin

filedir

Type
string
Default
empty string
Description
Configurable option to set where to store Masa CMS files.

filestore

Type
string
Default
filedir
Description
Configuration where to store the files for Masa CMS. Default is 'filedir', the other option is 's3'.

filestoreaccessinfo

Type
string
Default
empty
Description
Configuration string used when filestore='s3'. This is a string with all the access info for S3.

filestoreendpoint

Type
string
Default
http://s3.amazonaws.com
Description
Configuration string used when filestore='s3'. This is a string with the endpoint for the S3 buecket to store the files.

fmcaseinsensitive

New in 7.4.4

Type
boolean
Default
false
Description
Make the sorting of files in the FileManager case-insensitive.

fmshowapplicationroot

Type
boolean
Default
true
Description
Configurable option whether the application root is shown in the File Manager

fmshowsitefiles

Type
boolean
Default
true
Description
Configurable option whether the site files are shown in the File Manager

fmallowedextensions

Type
string
Default
a long list of extensions
Description
Comma seperated list of file extensions that are valid to upload using the FileManager in the Masa CMS Admin.

fmpublicallowedextensions

Type
string
Default
also a long list of extensions
Description
Comma seperated list of file extensions that are valid to upload in the public front-end of Masa CMS, like in a Form.

forceadminssl

Type
boolean
Default
true
Description
Force Masa CMS Admin to use https://

githubclientid

Type
string
Default
empty string
Description
Oauth client ID for Github SSO configuration

githubclientsecret

Type
string
Default
empty string
Description
Oauth client secret for Github SSO configuration

googleclientid

Type
string
Default
empty string
Description
Oauth client ID for Google SSO configuration

googleclientsecret

Type
string
Default
empty string
Description
Oauth client secret for Google SSO configuration

hashurls

Type
boolean
Default
false
Description
Configurable option whether an URL in Masa CMS had hashed directory names in it.

haslockablenodes

Type
boolean
Default
false
Description
Configurable option to lock a content node when it is being edited; e.g. only one content manager at the time can edit one specific content item.

hstsmaxage

Type
integer
Default
1200
Description
HTTP Strict Transport Security setting

htmleditortype

Type
string
Default
empty
Description
Default is empty. Other two options are 'none' and 'fckeditor'.

imageinterpolation

Type
string
Default
highQuality
Description
Specify which algoritms is used to resize the images in Masa CMS. Valid options are: highestQuality, highQuality, mediumQuality, highestPerformance, highPerformance, mediumPerformance, nearest, bilinear, bicubic, bessel, blackman, hamming, hanning, hermite, lanczos, mitchell, quadratic.

imagequality

Type
string
Default
.95
Description
Setting for the quality of the images uploaded in Masa CMS. Value between 0 and 1.

indexfile

Type
string
Default
empty
Description
Setting for which index file to use with Masa CMS.

indexfileinurls

Type
boolean
Default
true
Description
Display index.cfm in the URL.

javaenabled

Type
boolean
Default
true
Description
Configure if Java is enabled in the current Masa Instance. Needed for loading Java Libraries

javasettingsloadcoldfusionclasspath

Type
boolean
Default
true
Description
Application.cfc variable

javasettingsloadpaths

Type
string
Default
/requirements/lib
Description
Application.cfc variable

javasettingswatchextensions

Type
string
Default
jar,class
Description
Application.cfc variable

javasettingswatchinterval

Type
integer
Default
60
Description
Application.cfc variable

locale

Type
string
Default
server
Description
Used for rendering dates and times. Two valid optons: server and client

lockablenodes

Type
boolean
Default
false
Description
Setting whether the Allow Content Locking can be enabled per site in Site Settings.

loginstrikes

Type
integer
Default
4
Description
Number of login attempts a user has before being locked out

mailserverip

Type
string
Default
empty string
Description
SMTP server IP

mailserverpassword

Type
string
Default
empty string
Description
SMTP Server password

mailserverpopport

Type
integer
Default
110
Description
SMTP Server POP port

mailserversmtpport

Type
integer
Default
25
Description
SMTP Server port

mailserverssl

Type
boolean
Default
false
Description
Whether to use SSL or not when connecting to the SMTP server

mailservertls

Type
boolean
Default
false
Description
Whether to use TLS or not when connecting to the SMTP server

mailserverusername

Type
string
Default
empty string
Description
Username for the SMTP Server

mailserverusernameemail

Type
string
Default
empty string
Description
Email address for the username for the SMTP Server
Type
boolean
Default
true
Description
When moving links in Masa CMS then references to this link are automatically updated.

managesessioncookies

Type
boolean
Default
true
Description
Allows that sessions are managed through an Id set in the cookie of the brower.

maxarchivedversions

Type
integer
Default
50
Description
Configurable option of how many versions of a content item to store.

maxportalitems

Type
integer
Default
1000
Description
The maximum number of items to use for pagination in Folder display

maxsourceimagewidth

Type
integer
Default
4000
Description
The maxium width of uploaded images that Masa CMS tries to store. Anything beyond this size will be resized.

mfa

Type
boolean
Default
false
Description
Enables multi-factor authentication. After entering a valid username and password, users must also enter an authorization code before they are logged in. By default, Masa CMS generates this code and sends it to the user by email (see mfasendauthcode). A module such as MasaAuthenticator can verify codes from an authenticator app instead. When enabled, the "remember me" automatic login is not used.

mfaperdevice

Type
boolean
Default
false
Description
When multi-factor authentication is enabled (mfa=true), users can mark a device as trusted after entering an authorization code. Later logins from that device only require a username and password. Devices are recognized by a browser cookie.

mfasendauthcode

Type
boolean
Default
true
Description
When multi-factor authentication is enabled (mfa=true), send the generated authorization code to the user by email. Set to false when a module, such as MasaAuthenticator, verifies codes from an authenticator app instead.

mysqlengine

Type
string
Default
InnoDB
Description
Set which MySQL Engine to use when dbtype='MySQL'
Type
boolean
Default
true
Description
Send a notification with a link for review. Either with a link to the version history page or to the version edit form.

ormautomanagesession

Type
boolean
Default
true
Description
CFML ORM setting

ormcfclocation

Type
string
Default
empty string
Description
CFML ORM setting

ormdatasource

Type
string
Default
empty string
Description
CFML ORM setting

ormdbcreate

Type
string
Default
update
Description
CFML ORM setting

ormenabled

Type
boolean
Default
true
Description
CFML ORM setting

ormeventhandling

Type
boolean
Default
true
Description
CFML ORM setting

ormflushatrequestend

Type
boolean
Default
false
Description
CFML ORM setting

ormsavemapping

Type
boolean
Default
false
Description
CFML ORM setting

ormskipcfcwitherror

Type
boolean
Default
false
Description
CFML ORM setting

ormusedbformapping

Type
boolean
Default
false
Description
CFML ORM setting

ping

Type
boolean
Default
false
Description
Controles whether Masa CMS attempts to create Scheduled Tasks voor scheduled content, scheduled notifications, etc. Not all CFML servers allow Scheduled Tasks to be created programmatically.

plugindir

Type
string
Default
empty string
Description
Configurable option to tell Masa CMS where the plugin directory is.

port

Type
integer
Default
${cgi.SERVER\_PORT
Description
HTTP Port that Masa CMS runs on

postbundles

Type
boolean
Default
false
Description
Display a warning about 'posting' site bundles via direct upload, rather then placeing them on the webserver and then importing them.

productionassetdir

Type
string
Default
empty string
Description
-

productionassetpath

Type
string
Default
empty string
Description
-

productiondatasource

Type
string
Default
empty string
Description
-

productionfiledir

Type
string
Default
empty string
Description
-

productionwebroot

Type
string
Default
empty string
Description
-

proxypassword

Type
string
Default
empty string
Description
Settings for setting up a proxy

proxyport

Type
integer
Default
${cgi.SERVER\_PORT
Description
Settings for setting up a proxy

proxyserver

Type
string
Default
empty string
Description
Settings for setting up a proxy

proxyauthtype

Type
string
Default
empty string
Description
Settings for setting up a proxy. Can be empty or 'NTLM'

proxyuser

Type
string
Default
empty string
Description
Settings for setting up a proxy

purgedrafts

Type
boolean
Default
true
Description
Configurable option whether to remove all drafts if a new active version is published

razuna

Type
boolean
Default
false
Description
Enable the usage of Razuna in Masa CMS. Disabled by default.

readonlydatasource

Type
string
Default
empty string
Description
Set a readonly datasource

readonlydbpassword

Type
string
Default
empty string
Description
Set a password for the readonly database

readonlydbusername

Type
string
Default
empty string
Description
Set a username for the readonly database

recaptchasitekey

Type
string
Default
empty string
Description
Site Key for Google reCAPTCHA. Used when Site Settings are empty.

recaptchasecret

Type
string
Default
empty string
Description
Secret for Google reCAPTCHA. Used when Site Settings are empty.

recaptchalanguage

Type
string
Default
en
Description
Language setting for Google reCAPTCHA. Used when Site Settings are empty.

remoteipheader

Type
string
Default
empty
Description
Set the remote IP header

rendermuraalerts

Type
boolean
Default
true
Description
Configurable option whether to display alerts in the Masa CMS Admin

requesttimeout

Type
integer
Default
1000
Description
Application.cfc variable

sameformfieldsasarray

Type
boolean
Default
false
Description
Application.cfc variable

scriptprotect

Type
boolean
Default
true
Description
Application.cfc variable

scriptprotectexceptions

Type
string
Default
body,source,params
Description
Comma seperated list of field to ignore for scriptprotection

securecookies

Type
boolean
Default
false
Description
Application.cfc variable

sessioncookiesexpires

Type
string
Default
never
Description
Application.cfc variable

sendfrommailserverusername

Type
boolean
Default
true
Description
Configurable option whether to send email via the username in the mailserverusername setting

sendloginbcc

Type
boolean
Default
false
Description
Send a BCC mail when a user requests a login link.

serverport

Type
string
Default
emtpy
Description
Set the serverport for Masa CMS.

sharableremotesessions

Type
boolean
Default
false
Description
Enable or disable shareable remote sessions

sessionhistory

Type
integer
Default
0
Description
Number of days to store sessionhistory

sessiontimeout

Type
integer
Default
180
Description
Application.cfc variable

showadminloginhelp

Type
boolean
Default
true
Description
Display the "Forget your password" link on the administrator login page.

showextensionsindefault

Type
boolean
Default
false
Description
Display the assigned Extended Attributes of the Basic tab below the body, instead of being hidden behind the "Manage Extended Attributes" button.

sitedir

Type
string
Default
sites
Description
Directory in which the sites are created. The default is 'sites'

siteidinurls

Type
boolean
Default
false
Description
Include the site ID in the URL.

sortpermission

Type
string
Default
editor
Description
Configurable option whether a user has the permission to sort content. Two valid options: editor,author

strictextendeddata

Type
boolean
Default
true
Description
Check the datatype and value for when submitting extended data. (e.g. like in an extended attribute)

strictfactory

Type
boolean
Default
true
Description
Masa CMS uses the DI/1 Framework. This controls the strict setting for this framework.

stricthtml

Type
boolean
Default
false
Description
Configurable option whether to allow HTML syntax in class extension attributes. Works together with the setting stricthtmlexclude

stricthtmlexclude

Type
string
Default
empty string
Description
List of excluded extended attributes that allow HTML Syntax. Does not apply when type is set to HTMLEditor of the extended attribute.

strongpasswordregex

Type
regex
Default
(?=^.{7,15}$)(?=.*\d)(?![.\n])(?=.*[a-zA-Z]).*$
Description
The regular expression used to validate the password for its strength.

strongpasswords

Type
boolean
Default
false
Description
Enforce strong password requirements.

stub

Type
string
Default
emtpy
Description
Set the stub in Masa CMS

tempdir

Type
string
Default
empty string
Description
Configurable option for location where uploaded files are temporarely stored

title

Type
string
Default
Masa CMS
Description
The application title, typically used in the HTML head section.

tracksessioninnewthread

Type
boolean
Default
true
Description
Use a new thread when using session tracking. Can be disabled for performance reasons / locking issues.

urltitledelim

Type
string
Default
-
Description
Delimeter used in creating the title for each page.

usedefaultsmtpserver

Type
boolean
Default
true
Description
Configurable option whether to use the SMTP Settings in de CFML / Lucee Administrator or the SMTP Settings in Masa CMS

usefilemode

Type
boolean
Default
false
Description
Configurable option whether to let Masa CMS set file permissions. Only applies to *nix based systems

uselegacysessions

Type
boolean
Default
false
Description
Configurable option whether to use legacy sessions or not.

windowdocumentdomain

Type
string
Default
empty string
Description
Configurable option to set the document.domain for the Masa CMS Admin. Useful for cross-domain issues.

wordfilter

New in 7.4.4

Type
string
Default
empty string
Description
Customize the scriptProtectionFilter.

version

Type
string
Default
The number of the version in use.
Description
Version number

webroot

Type
string
Default
empty
Description
Configures the webroot

webrootmap

Type
string
Default
muraWRM
Description
Used for old Coldfusion MX 7 mapping. Do not use.