<?php

// Add mailhub_sso to the existing plugin list.
$config['plugins'][] = 'mailhub_sso';

// Roundcube uses MailHub's temporary mhw_ credential for both protocols.
$config['imap_host'] = 'ssl://in.ss5.xyz:993';
$config['smtp_host'] = 'ssl://in.ss5.xyz:465';
$config['smtp_user'] = '%u';
$config['smtp_pass'] = '%p';

// TLS terminates at the reverse proxy in this example. Do not enable
// force_https at the same time; Roundcube documents the two as exclusive.
$config['use_https'] = true;
$config['session_samesite'] = 'Lax';

// Plugin-specific settings. These can also live in
// plugins/mailhub_sso/config.inc.php copied from config.inc.php.dist.
$config['mailhub_sso_internal_base_url'] = 'http://app:3000';
$config['mailhub_sso_audience'] = 'https://mail.us.ss5.xyz';
$config['mailhub_sso_secret_file'] = '/run/secrets/webmail_sso_secret';
$config['mailhub_sso_imap_host'] = 'ssl://in.ss5.xyz:993';
