###############################################################################
#                           Authelia Configuration                            #
###############################################################################

theme: dark

identity_validation:
  reset_password:
    jwt_secret: LCnTJ5AxoB4tGvClpfhOSiLCnTJ5AxoB4tGvClpfhOSi # TODO CHANGE ME!

default_2fa_method: "totp"

## Server Configuration
server:
  address: tcp://0.0.0.0:9091/
  endpoints:
    enable_pprof: false
    enable_expvars: false

## Log Configuration
log:
  level: debug

## TOTP Configuration
totp:
  issuer: auth.lab.bildme.ru # TODO CHANGE ME!

## WebAuthn Configuration
webauthn:
  disable: false
  timeout: 60s
  display_name: Authelia
  attestation_conveyance_preference: indirect
  user_verification: preferred

## NTP Configuration
ntp:
  address: "time.cloudflare.com:123"
  version: 4
  max_desync: 3s
  disable_startup_check: false
  disable_failure: false

## Authentication Backend Provider Configuration
authentication_backend:
  ## File (Authentication Provider)
  file:
    path: /config/users_database.yml
    watch: true
    search:
      email: false
      case_insensitive: false
    password:
      algorithm: argon2
      argon2:
        variant: 'argon2id'
        iterations: 3
        memory: 65536
        parallelism: 4
        key_length: 32
        salt_length: 16

## Session Provider Configuration
session:
  secret: Y8W4HvSen0R4Y8W4HvSen0R4Y8W4HvSen0R4 # TODO CHANGE ME!
  expiration: 8h
  inactivity: 4h
  cookies:
    - name: 'Authelia Demo cookies'
      domain: lab.bildme.ru # TODO CHANGE ME!
      authelia_url: https://auth.lab.bildme.ru/ # TODO CHANGE ME!
      expiration: '1 hour'
      inactivity: '5 minutes'

  ## Redis Provider
  redis:
    host: redis
    port: 6379
    database_index: 0
    maximum_active_connections: 20
    minimum_idle_connections: 0

## Regulation Configuration
regulation:
  max_retries: 3
  find_time: 2m
  ban_time: 30m

## Storage Provider Configuration
storage:
  encryption_key: 9JM1ZMf980gQ3enewZEoTq9JM1ZMf980gQ3enewZEoTq # TODO CHANGE ME!
  local:
    path: /config/db.sqlite3

## Notification Provider
notifier:
  disable_startup_check: true
  ## File System (Notification Provider)
  # filesystem:
  #   filename: /config/notification.txt
  smtp: # TODO CHANGE ME!
    subject: "[Authelia] {title}"
    username: 'authelia@mg.bildme.ru'
    sender: 'auth@mg.bildme.ru'
    address: 'smtp://smtp.eu.mailgun.org:587'