Installer option true by default

[glats]

is't possible to leave the $config['enable_installer'] option in /var/www/html/config/config.inc.php true by default?

[technicalguru]

This is not recommended as attackers can use this option to hack your mail system. The option must be set to false in productive environments.

[glats]

perhaps it can be a false default but can be configured through an environment variable like: RC_INSTALL_OPTION

[technicalguru]

As with all such sensitive options: Usually people leave the settings after container setup because they are lazy. We shall make it not easy for people to leave the setup insecure.

Linking #2 as this is related to this question.