Throat Config Items 2019/04/10

SUB_PREFIX // "/s" with no tailing slash
WEBPACK_MANIFEST_PATH // unpacked in __init__.py, used in webpack.config.js line 49 -- unsure of purpose
ENABLE_SECURITY_QUESTIONS // enable security questions for user accounts?
CAS_AUTHORIZED_HOSTS // Hosts that can use CAS SSO
DB_NAME // Name of throat database on SQL server
DB_HOST // Host of SQL server
DB_USER // User with access to database on SQL server
DB_PASSWD // Password for database user
DATABASE_URL // mysql protocol url... current config.py compiles this from DB_* items. This is silly, but the code still uses DB_* and this allows for a remote DB
COPY // copyright string, minus the symbol
LEMA // Site name string
WEBSOCKET_SERVER // Server hosting websocket, usually localhost and port, used for chat and events like subscribe and voting
RECAPTCHA_PUBLIC_KEY // public key for recaptcha
CACHE_REDIS_HOST // Server hosting redis
CACHE_REDIS_PORT // Port for redis server
CACHE_REDIS_DB // Redis database index
SOCKETIO_REDIS_URL // Redis url, port, and database index used for SocketIO, url
ENABLE_TOTP // Enabled TOTP for admins, boolean
SENDGRID_API_KEY // API key for SendGrid email service
SENDGRID_DEFAULT_FROM // Default "from:" address for SendGrid emails
CHANGELOG_SUB // SubPost.sid of sub used for changelog
ALLOW_UPLOADS // Allow image uploading, boolean
STORAGE_HOST // Server where uploads are sent, url
STORAGE // Location where uploads are placed, path
THUMBNAIL_HOST // Server where thumnails are sent, url
THUMBNAILS // Location where thumbnails are placed, path
XMR_ADDRESS // Address for XMR donations
ON_POST_REPORT // Allow post reporting?  Seems to be related to whether it works, not whether it shows. boolean
ON_COMMENT_REPORT // Allow comment reporting?  Seems to be related to whether it works, not whether it shows. boolean

WTF_CSRF_ENABLED // Flag to enable CSRF Protection?  Doesn't actually do anything, nor would it be adviseable to switch off... this shouldn't exist. boolean
WTF_CSRF_SECRET_KEY // Key used to encrypt cookies.  Current config uses SECRET_KEY, 2for1 special.

DEBUG // Flask builtin: Debug logging, boolean
TESTING // Flask builtin: debug logging, turn off level restrictions, boolean
SECRET_KEY // Flask builtin: key for signing session cookie, make it long and random
MAX_CONTENT_LENGTH // Flask builtin: set max upload size

CACHE_TYPE // unused in code, exists in config.py
RECAPTCHA_PRIVATE_KEY // unused in code, exists in config.py

Additional Flask Builtin Configuration Values: http://flask.pocoo.org/docs/1.0/config/#builtin-configuration-values