###############################################################
#                   Authelia configuration                    #
###############################################################
host: 127.0.0.1
port: 9091

log:
  level: info

theme: dark

certificates_directory: /config/certs/

jwt_secret: {JWT_SECRET}

default_redirection_url: https://app.{DOMAIN}/

totp:
  issuer: nextworkspace

access_control:
  default_policy: deny
  rules:
    - domain: "auth.{DOMAIN}"
      policy: bypass
    - domain: "app.{DOMAIN}"
      policy: one_factor

authentication_backend:
  file:
    path: /config/users_database.yml

session:
  name: nextworkspace_session
  secret: {SESSION_SECRET}
  domain: {DOMAIN}
  same_site: lax
  expiration: 1h
  inactivity: 5m
  remember_me_duration: 1M

regulation:
  max_retries: 5
  find_time: 2m
  ban_time: 5m

storage:
  local:
    path: /data/db.sqlite

notifier:
  filesystem:
    filename: /config/notification.yml