rodan-authify/sample.config.toml at main · intraware/rodan-authify · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
[server]
host = "0.0.0.0"
port = 8080
production = false
cors-url = ["*"]

[server.security]
jwt-secret = "supersecretjwtkey"

[database]
host = "localhost"
port = 5432
username = "dbuser"
password = "dbpassword"
database-name = "myapp"
ssl-mode = "disable"
max-tries = 5

[app]
token-expiry = "15m"
team-size = 3
email-regex = "^[\w._%+-]+@[\w.-]+\.[a-zA-Z]{2,}$"
allow-leave-team = false
allow-outside-email = true
emails-csv = "./users-list.csv"
frontend-cache-duration = "10m"

[app.email]
enabled = false
agent-email = "no-reply@example.com"
allowed-email-regex = "^[a-zA-Z0-9._%+-]+@example\\.com$"
email-template = "./example_password_reset.html"
email-subject = "Some subject for the email"

[app.email.provider]
type = "smtp"
host = "smtp.example.com"
port = 587
username = "your_username"
password = "your-password"

# [app.email.provider]
# type = "microsoft-graph"
# tenant-id = "your_tenant_id"
# client_id = "your_client_id"
# client_secret = "your_client_secret"

[app.oauth]
enabled = false
redirect_url = "http://127.0.0.1:8080/oauth/callback"
allow-unlink = false

# You can list multiple providers
[app.oauth.providers.google]
client_id     = "your-google-client-id"
client_secret = "your-google-client-secret"
scopes        = ["openid", "email", "profile"]
auth_url      = "https://accounts.google.com/o/oauth2/auth"
token_url     = "https://oauth2.googleapis.com/token"
userinfo_url  = "https://www.googleapis.com/oauth2/v3/userinfo"
field-map = {  # this is for mapping client responses from oauth to models data
  provider_id = "sub",
  username    = "name",
  email       = "email",
  avatar_url  = "picture"
}

# [app.oauth.providers.github]
# client_id     = "your-github-client-id"
# client_secret = "your-github-client-secret"
# scopes        = ["read:user", "user:email"]
# auth_url      = "https://github.com/login/oauth/authorize"
# token_url     = "https://github.com/login/oauth/access_token"
# userinfo_url  = "https://api.github.com/user"

[app.totp]
enabled     = true
issuer      = "intraware"
digits      = 6
period      = 30
algorithm   = "SHA1"

[app.ban]
enable-user-ban = true
enable-team-ban = false
initial-ban-duration = "1h"
ban-growth-factor = 2.0
max-ban-duration = "24h"

[app.cache]
in-app = true
service-url = "redis://cache-service:6379"
service-type = "redis"
internal-cache-size = 1000
internal-cache-duration = "10m"
skip-internal-cache = true

[app.admin]
# endpoint is /api/admin
endpoint="/admin"
api-key = "somethingfortesting123"