bump to 5.7.0 (#24)

Reviewed-on: #24
Reviewed-by: muppeth <muppeth@no-reply@disroot.org>
Co-authored-by: meaz <meaz@disroot.org>
Co-committed-by: meaz <meaz@disroot.org>

defaults/main.yml

@@ -10,7 +10,7 @@ cryptpad_pkg:
 cryptpad_node_version: '16'
 
 cryptpad_path: '/var/www/cryptpad'
-cryptpad_version: "5.6.0"
+cryptpad_version: "5.7.0"
 
 # Config.js
 cryptpad_httpUnsafeOrigin: "https://cryptpad.example.org"
@@ -46,6 +46,8 @@ cryptpad_logToStdout: "false"
 cryptpad_logLevel: "info"
 cryptpad_logFeedback: "false"
 cryptpad_verbose: "false"
+cryptpad_otpSessionExpiration: "7*24"
+cryptpad_enforceMFA: "false"
 
 cryptpad_LimitNOFILE: "1000000"
 

templates/config/config.js.j2

@@ -113,6 +113,28 @@ module.exports = {
  */
     maxWorkers: {{ cryptpad_maxWorkers }},
 
+    /* =====================
+     *       Sessions
+     * ===================== */
+
+    /*  Accounts can be protected with an OTP (One Time Password) system
+     *  to add a second authentication layer. Such accounts use a session
+     *  with a given lifetime after which they are logged out and need
+     *  to be re-authenticated. You can configure the lifetime of these
+     *  sessions here.
+     *
+     *  defaults to 7 days
+     */
+    otpSessionExpiration: {{ cryptpad_otpSessionExpiration }}, // hours
+
+    /*  Registered users can be forced to protect their account
+     *  with a Multi-factor Authentication (MFA) tool like a TOTP
+     *  authenticator application.
+     *
+     *  defaults to false
+     */
+    enforceMFA: {{ cryptpad_enforceMFA }},
+
     /* =====================
      *         Admin
      * ===================== */