en	Check Direct File Access: This is only a vestigial, basic check and its result may be wrong.

en	Domain: A domain prefix before the secured directories part (e.g. https://www.example.com/). Not needed for internal (relative) links.

en	Directory Pattern: What directories shall be protected? Multiple directory patterns can be separated by a pipe (|).

en	File Type Pattern: What file types (read: extensions) shall be protected? Multiple file extension patterns can be separated by a pipe (|). You can use an asterisk (*) if you want to protect all files within configured directories.

en	Enable Group Check: Allows forwarding a secure download link to others, who can access that file if they have at least one front-end user group in common. Enabling this makes the checks LESS restrictive!

en	Group Check Directories: A list of directories for the less restrictive group check, separated by a pipe (|). Leave empty if you want to enable the group check for all directories.

en	Exclude Groups: A comma separated list of groups that are excluded from the group check feature (if enabled).

en	Strict Group Check: If enabled, files are only delivered if the user groups exactly match those of the secured link.

en	Link Prefix: Prefix for generated links (the "securedl" part in "https://example.com/securedl/sdl-[JWT]/image.png").

en	Token Prefix: Prefix for generated token (the "sdl-" part in "https://example.com/securedl/sdl-[JWT]/image.png").

en	Additional Link Timeout: The secure link is only valid for a limited time, which is calculated from the cache time that is used for the page that carries the link plus this value (in seconds). Default is 3600 sec (= 1 h).

en	Document Root: Do only change this configuration option, if your TYPO3 instance is running in a subfolder or you are using a SSL reverse proxy to map TYPO3 into a virtual subfolder. This configuration must start and end with a slash (e.g. "/proxy-typo3/").

en	Force Download: Force Download of specified file types.

en	Force Download Type: A list of file types that should not be opened inline in a browser, separated by a pipe. Only used if "forcedownload" is true. You can use an asterisk (*) if you want to force download for all file types.

en	Additional Mime Types: Comma separated list of additional MIME types (file extension / mime type pairs, in which file extension and MIME type is separated by a pipe symbol). Can be used to override existing MIME type settings of the extension as well.

en	Output Function: PHP function which is used to deliver the secured files.

en	Output Chunk Size: Size of chunks to be delivered in one go (only relevant if "readfile_chunked" is used) (default: 1048576 Bytes = 1 MB).

en	Protected Path: Path to protected storage for nginx x-accel-redirect delivery method.

en	Log Module: Log each file access. This option will enable a backend module.

en	Debug Level: Debug level (output each tag that matches the regex and will be replaced). Please note: This configuration is deprecated. Please consider to use PSR-3 Logger.