---
# Authelia configuration template.
# setup.sh renders this to ${OBMP_DATA_ROOT}/authelia/configuration.yml,
# substituting the ${...} values from .env. Only rendered if the target
# file does not already exist — an existing deployment is never overwritten.
theme: dark

server:
  address: 'tcp://0.0.0.0:9091/authelia'
  endpoints:
    authz:
      forward-auth:
        implementation: ForwardAuth

log:
  level: info

totp:
  issuer: openbmp

authentication_backend:
  file:
    path: /config/users_database.yml
    password:
      algorithm: bcrypt
      iterations: 12

session:
  name: authelia_session
  secret: ${AUTHELIA_SESSION_SECRET}
  expiration: 12h
  inactivity: 6h
  cookies:
    - domain: ${OBMP_COOKIE_DOMAIN}
      authelia_url: https://${OBMP_DOMAIN}/authelia

identity_validation:
  reset_password:
    jwt_secret: ${AUTHELIA_JWT_SECRET}

storage:
  local:
    path: /config/db.sqlite3
  encryption_key: ${AUTHELIA_STORAGE_ENCRYPTION_KEY}

access_control:
  default_policy: one_factor

notifier:
  filesystem:
    filename: /config/notification.txt