Fixes an issue where SMTP settings would not save if entered in the web UI.
Adds a configuration option to disable configuration via the web UI (or API). It is configured by default to allow configuration editing in the web UI (which matches current behavior). But by setting the showConfiguration in the app section to false (and restarting the server) will completely disable any editing of configuration in the web UI. This includes:
Editing any configuration values
Adding, updating, or removing domains
Reading SMTP configuration
Reading the admin email for alerts
This should cover all instances of info that you wouldn't want leaking; of course, all the domains on the dashboard are visible with the data included there. This is more to lock the configuration and not allow any visitor to change settings or read sensitive settings.
Full Changelog: v1.1.0...v1.2.0