# The LEVELS MARK of every hm_settings property this build seeds or ensures - the
# deepest level the setting may be set at (one value, three levels, 23 September
# 2026; hmailserver/docs/SettingLevels.md has the rule and the whole inventory):
#   server        set for the whole server only;
#   domain        a domain may hold its own value, which wins over the server's;
#   account       an account may hold its own as well, which wins over both.
#
# build/generate-settings-defaults.py carries the mark into SettingsDefaults.h as
# each row's Levels and refuses to write the header when a property has none;
# build/check-settings-rows.py refuses a property of SettingsDefaults.h that is
# not listed here; build/check-setting-levels.py holds every property marked
# domain or account to a row of Application/EffectiveSetting's table - which is
# where the name REST, COM and hmctl use for it is given - and every row of that
# table whose server level is a property back to its mark here.
#
# The rule the marks follow: a setting about one mailbox - what the account is
# offered, what it may keep, how long, how much - reaches the account; a listener,
# a directory, the database, TLS, the delivery queue, a cache, the anti-spam and
# anti-virus engines and every setting that decides for the whole server before
# any account is known is server. The document says, name by name, why the ones
# about a mailbox that stay server do.
#
# One "name levels" per line, the name as the property is spelled.

accountcachettl server
AccountRecoveryEnabled server
adddeliveredtoheader server
AlertDigestEnabled server
AlertDigestHour server
AlertMaxPerHour server
AlertRecipient server
AlertsEnabled server
AlertSenderAddress server
AlertWebhookMaxAttempts server
aliascachettl server
allowmailfromnull server
antispamaddheaderreason server
antispamaddheaderspam server
antispamenabled server
antispammaxsize server
antispamprependsubject server
antispamprependsubjecttext server
ASArcFilteringEnabled server
ASArcTrustedSealers server
ascheckhostinhelo server
ascheckhostinheloscore server
ascheckptr server
ascheckptrscore server
ASDKIMVerificationEnabled server
ASDKIMVerificationFailureScore server
ASDMARCEnabled server
ASDMARCFailureScore server
AuditRetentionDays server
AuditTrailEnabled server
authallowplaintext server
AutoBanMinutes server
AutoBanOnLogonFailureEnabled server
AutoBanWidenByReverseName server
avaction server
avclamwindb server
avclamwinenable server
avclamwinexec server
avmaxmsgsize server
avnotifyreceiver server
avnotifysender server
awstatsenabled server
backupdestination server
backupencryptionpassphrase server
backupoptions server
BanMultiRcptNullSender server
BanMultiRcptNullSenderHours server
BounceCountRetentionDays server
BounceHardBounceThreshold server
BounceMailboxFullIsHard server
BounceProcessingEnabled server
BounceReadDeliveryReports server
BounceReportWindowDays server
BounceSuppressionAction server
BounceSuppressionExpiryDays server
BrandLogosEnabled server
BreachCheckEnabled server
BreachCheckMinimumCount server
BreachCheckUnreachableAction server
BreachCheckUrl server
BypassGreylistingOnMailFromMX server
BypassGreylistingOnSPFSuccess server
ClamAVEnabled server
ClamAVHost server
ClamAVPort server
ComplaintMailbox server
ComplaintProcessingEnabled server
ComplaintRetentionDays server
ComplaintSuppressionThreshold server
CompromiseBaselineDays server
CompromiseDetectionMode server
CompromiseHeldDays server
CompromiseMinimumHistory server
CompromiseNewRecipientShare server
CompromiseRecipientFloor server
CompromiseScoreToLock server
CompromiseVolumeFactor server
CompromiseVolumeFloor server
ConfidentialBaseUrl server
CountryBlockingExemptRanges server
CountryPolicyHTTP server
CountryPolicyIMAP server
CountryPolicyPOP3 server
CountryPolicySMTP server
CreateDefaultSpecialUseFolders server
customvirusscannerexecutable server
customviursscannerreturnvalue server
defaultdomain server
DirectoryEnabled server
DirectoryUserEditable account
disconnectinvalidclients server
distributionlistcachettl server
DlpAccountNumberPattern server
domaincachettl server
DomainReportRetentionDays server
enableattachmentblocking server
enableimapacl server
enableimapidle server
enableimapquota server
EnableImapSASLInitialResponse server
EnableImapSASLPlain server
enableimapsort server
GeoIpDatabaseFile server
GeoIpDatabaseMaxAgeDays server
GreyListingAbuseLockMinutes server
GreyListingAbuseThreshold server
greylistingfinaldelete server
greylistinginitialdelay server
greylistinginitialdelete server
GreyListingSlideOnEarlyRetry server
groupcachettl server
HelpWikiBaseUrl server
hostname server
IMAPHierarchyDelimiter server
ImapMasterUser server
imappublicfoldername server
ImportOAuthGoogleAuthorizeUrl server
ImportOAuthGoogleClientId server
ImportOAuthGoogleClientSecret server
ImportOAuthGoogleTokenUrl server
ImportOAuthMsAuthorizeUrl server
ImportOAuthMsClientId server
ImportOAuthMsClientSecret server
ImportOAuthMsTokenUrl server
ImportOAuthRedirectBaseUrl server
IPv6Preferred server
ListBaseUrl server
ListBounceWindowDays server
ListHardBouncesToUnsubscribe server
ListSoftBouncesToUnsubscribe server
logdevice server
logformat server
logging server
LogonAttemptsWithinMinutes server
MailboxKeyIdleMinutes server
maxdelivertythreads server
maximapconnections server
maximumincorrectcommands server
MaxInvalidLogonAttempts server
maxmessagesize account
MaxNumberOfAsynchronousTasks server
MaxNumberOfMXHosts server
MaxOutboundConnsPerDestination server
MaxOutboundConnsPerTenant server
maxpop3connections server
maxsmtpconnections server
maxsmtprecipientsinbatch server
MessageIndexing server
MessageStoreBackend server
MessageStoreCompression server
MessageStoreDedupMinKB server
MessageStoreObjectAccessKey server
MessageStoreObjectAddressing server
MessageStoreObjectBucket server
MessageStoreObjectCacheMB server
MessageStoreObjectCaFile server
MessageStoreObjectEndpoint server
MessageStoreObjectPrefix server
MessageStoreObjectRegion server
MessageStoreObjectSasToken server
MessageStoreObjectSecret server
MessageStoreObjectService server
MigrationConnectionsPerHost server
mirroremailaddress server
OidcAdministrators server
OidcAutoProvision server
OidcClientId server
OidcClientSecret server
OidcIssuer server
OidcRedirectBaseUrl server
OidcScopes server
OpenPGPKeyMaximumBytes server
OpenPGPKeyserverUrl server
OpenPGPKeysPerAccount server
OpenPGPLookupKeyserver server
OpenPGPLookupTimeout server
OpenPGPLookupWkd server
OpenPGPPortalEnabled account
OpenPGPRequireAddressInUserId server
OpenPGPWebKeyDirectoryEnabled server
OutboundBackoffMaxMinutes server
OutboundBackoffMinutes server
PasskeyAllowedOrigins server
PasskeyRelyingParty server
PasskeysEnabled server
ProtectedMessageDays server
protocolimap server
protocolpop3 server
protocolsmtp server
PstImportDirectory server
QuarantineDigestBaseUrl server
QuarantineDigestLinkHours server
QuotaGracePercent account
QuotaSendStopPercent account
ReaderFetchAccountsMax account
ReaderFetchPrivateHosts server
ReaderMaskedAddressesMax account
ReaderOfflineDaysMax account
ReaderSenderAddressesMax account
RecallDays account
RecoverDeletedDays account
RecoveryResetLinkMinutes server
RecoveryVerifyLinkHours server
RefuseHeloNotFqdn server
RefuseMailFromDomainNotFqdn server
RejectMultiRcptNullSender server
relaymode server
ReputationWatchAddresses server
ReputationWatchEnabled server
ReputationWatchLists server
rulelooplimit server
SamlAdministrators server
SamlAutoProvision server
SamlButtonLabel server
SamlEmailAttribute server
SamlIdpCertificate server
SamlIdpEntityId server
SamlIdpSsoUrl server
SamlRequireSignedAssertion server
SamlSpEntityId server
SampleDomainId server
SandboxCacheHours server
SandboxEnabled server
SandboxInternalMail server
SandboxMaxFiles server
SandboxMaxSizeKB server
SandboxPollSeconds server
SandboxScoreThreshold server
SandboxSubmitUrl server
SandboxTimeoutAction server
SandboxTimeoutMinutes server
SandboxToken server
SandboxTypes server
SandboxVerdictUrl server
scriptlanguage server
sendstatistics server
SessionBindToAddress account
SessionIdleSeconds account
SessionLifetimeSeconds account
SessionOnePerDevice account
SmimeAuthorityBaseUrl server
smtpallowincorrectlineendings server
smtpdeliverybindtoip server
SmtpDeliveryConnectionSecurity server
smtpminutesbetweenretries server
smtpnoofretries server
smtpnooftries server
smtprelayer server
smtprelayerconnectionsecurity server
smtprelayerpassword server
smtprelayerport server
smtprelayerusername server
SnmpAllowedAddresses server
SnmpBindAddress server
SnmpContact server
SnmpEnabled server
SnmpLocation server
SnmpPort server
SnmpV2cCommunity server
SnmpV2cEnabled server
SnmpV3AuthPassword server
SnmpV3PrivPassword server
SnmpV3User server
spamassassinenabled server
spamassassinhost server
spamassassinmergescore server
spamassassinport server
spamassassinscore server
spamdeletethreshold server
spammarkthreshold server
SpamTrapBanMinutes server
SpamTrapBlockDays server
SpamTrapHitRetentionDays server
SpamTrapTeachSpamAssassin server
SPFTempErrorDefer server
SslCipherList server
SslVersions server
SurblTooManyDomainsScore server
SyslogEnabled server
SyslogFacility server
SyslogHost server
SyslogLogTypes server
SyslogMinimumSeverity server
SyslogPort server
SyslogTransport server
tcpipthreads server
TlsOptions server
usecache server
usecustomvirusscanner server
usegreylisting server
usemxchecks server
usemxchecksscore server
usescriptserver server
usesmtprelayerauthentication server
usespf server
UseSPFPermErrorScore server
usespfscore server
UseSPFSoftFailScore server
UseSPFTempErrorScore server
VerifyRemoteSslCertificate server
WebhookMaxAttempts server
WebhookMaxPerMinute server
WebhookRetentionDays server
WebhooksEnabled server
WebPushEnabled server
WebPushLoopbackHttpForTests server
WebPushMaxAttempts server
WebPushMaxPerAccount server
WebPushSubject server
WebPushTimeToLiveSeconds server
WebPushVapidPrivateKey server
WebPushVapidPublicKey server
welcomeimap server
welcomepop3 server
welcomesmtp server
workerthreadpriority server
ZeroAccessAllowed account
