mirror of
https://github.com/davidallendj/opaal.git
synced 2025-12-20 11:37:01 -07:00
115 lines
3 KiB
YAML
115 lines
3 KiB
YAML
version: v0.13.0
|
|
|
|
dsn: memory
|
|
|
|
serve:
|
|
public:
|
|
base_url: http://127.0.0.1:4433/
|
|
cors:
|
|
enabled: true
|
|
admin:
|
|
base_url: http://kratos:4434/
|
|
|
|
selfservice:
|
|
default_browser_return_url: http://127.0.0.1:4455/
|
|
allowed_return_urls:
|
|
- http://127.0.0.1:4455
|
|
- http://localhost:19006/Callback
|
|
- exp://localhost:8081/--/Callback
|
|
|
|
methods:
|
|
oidc:
|
|
enabled: true
|
|
config:
|
|
base_redirect_uri: http://127.0.0.1:4433
|
|
providers:
|
|
- id: forgejo
|
|
provider: generic
|
|
client_id: 7527e7b4-c96a-4df0-8fc5-00fde18bb65d
|
|
client_secret: gto_cc5uvpb5lsdczkwnbarvwmbpv5kcjwg7nhbc75zt65yrfh2ldenq
|
|
issuer_url: http://git.towk.local
|
|
mapper_url: "base64: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"
|
|
scope:
|
|
- read_user
|
|
- openid
|
|
- profile
|
|
- email
|
|
password:
|
|
enabled: true
|
|
totp:
|
|
config:
|
|
issuer: Kratos
|
|
enabled: true
|
|
lookup_secret:
|
|
enabled: true
|
|
link:
|
|
enabled: true
|
|
code:
|
|
enabled: true
|
|
|
|
flows:
|
|
error:
|
|
ui_url: http://127.0.0.1:4455/error
|
|
|
|
settings:
|
|
ui_url: http://127.0.0.1:4455/settings
|
|
privileged_session_max_age: 15m
|
|
required_aal: highest_available
|
|
|
|
recovery:
|
|
enabled: true
|
|
ui_url: http://127.0.0.1:4455/recovery
|
|
use: code
|
|
|
|
verification:
|
|
enabled: true
|
|
ui_url: http://127.0.0.1:4455/verification
|
|
use: code
|
|
after:
|
|
default_browser_return_url: http://127.0.0.1:4455/
|
|
|
|
logout:
|
|
after:
|
|
default_browser_return_url: http://127.0.0.1:4455/login
|
|
|
|
login:
|
|
ui_url: http://127.0.0.1:4455/login
|
|
lifespan: 10m
|
|
|
|
registration:
|
|
lifespan: 10m
|
|
ui_url: http://127.0.0.1:4455/registration
|
|
after:
|
|
password:
|
|
hooks:
|
|
- hook: session
|
|
- hook: show_verification_ui
|
|
|
|
log:
|
|
level: debug
|
|
format: text
|
|
leak_sensitive_values: true
|
|
|
|
secrets:
|
|
cookie:
|
|
- PLEASE-CHANGE-ME-I-AM-VERY-INSECURE
|
|
cipher:
|
|
- 32-LONG-SECRET-NOT-SECURE-AT-ALL
|
|
|
|
ciphers:
|
|
algorithm: xchacha20-poly1305
|
|
|
|
hashers:
|
|
algorithm: bcrypt
|
|
bcrypt:
|
|
cost: 8
|
|
|
|
identity:
|
|
default_schema_id: default
|
|
schemas:
|
|
- id: default
|
|
url: file:///etc/config/kratos/identity.schema.json
|
|
|
|
courier:
|
|
smtp:
|
|
connection_uri: smtps://test:test@mailslurper:1025/?skip_ssl_verify=true
|