2018-11-14 18:14:14 +00:00
|
|
|
# This is the default configuration file
|
2019-09-30 16:04:04 +00:00
|
|
|
postgresql:
|
2018-11-14 18:14:14 +00:00
|
|
|
host: localhost
|
2019-09-30 16:04:04 +00:00
|
|
|
name: passbook
|
2019-10-01 11:22:38 +00:00
|
|
|
user: passbook
|
|
|
|
|
password: 'env://POSTGRES_PASSWORD'
|
2019-09-30 16:04:04 +00:00
|
|
|
|
|
|
|
|
redis:
|
|
|
|
|
host: localhost
|
|
|
|
|
password: ''
|
|
|
|
|
cache_db: 0
|
|
|
|
|
message_queue_db: 1
|
2019-07-04 13:23:05 +00:00
|
|
|
|
2019-02-13 15:41:51 +00:00
|
|
|
debug: false
|
2019-09-30 16:04:04 +00:00
|
|
|
|
2018-11-14 18:14:14 +00:00
|
|
|
# Error reporting, sends stacktrace to sentry.services.beryju.org
|
|
|
|
|
error_report_enabled: true
|
|
|
|
|
|
2019-04-10 16:48:55 +00:00
|
|
|
domains:
|
2019-10-01 08:48:55 +00:00
|
|
|
- passbook.local
|
2019-03-20 21:42:47 +00:00
|
|
|
primary_domain: 'localhost'
|
|
|
|
|
|
2018-11-14 18:14:14 +00:00
|
|
|
passbook:
|
|
|
|
|
sign_up:
|
|
|
|
|
# Enables signup, created users are stored in internal Database and created in LDAP if ldap.create_users is true
|
|
|
|
|
enabled: true
|
|
|
|
|
password_reset:
|
|
|
|
|
# Enable password reset, passwords are reset in internal Database and in LDAP if ldap.reset_password is true
|
|
|
|
|
enabled: true
|
|
|
|
|
# Verification the user has to provide in order to be able to reset passwords. Can be any combination of `email`, `2fa`, `security_questions`
|
|
|
|
|
verification:
|
|
|
|
|
- email
|
|
|
|
|
# Text used in title, on login page and multiple other places
|
|
|
|
|
branding: passbook
|
|
|
|
|
login:
|
|
|
|
|
# Override URL used for logo
|
|
|
|
|
logo_url: null
|
|
|
|
|
# Override URL used for Background on Login page
|
|
|
|
|
bg_url: null
|
|
|
|
|
# Optionally add a subtext, placed below logo on the login page
|
2018-11-16 09:08:15 +00:00
|
|
|
subtext: null
|
2018-11-14 18:14:14 +00:00
|
|
|
footer:
|
|
|
|
|
links:
|
|
|
|
|
# Optionally add links to the footer on the login page
|
|
|
|
|
# - name: test
|
|
|
|
|
# href: https://test
|
|
|
|
|
# Specify which fields can be used to authenticate. Can be any combination of `username` and `email`
|
|
|
|
|
uid_fields:
|
|
|
|
|
- username
|
2019-02-25 19:46:23 +00:00
|
|
|
- email
|
2018-11-14 18:14:14 +00:00
|
|
|
session:
|
|
|
|
|
remember_age: 2592000 # 60 * 60 * 24 * 30, one month
|
|
|
|
|
# Provider-specific settings
|
|
|
|
|
ldap:
|
|
|
|
|
# Which field from `uid_fields` maps to which LDAP Attribute
|
|
|
|
|
login_field_map:
|
|
|
|
|
username: sAMAccountName
|
|
|
|
|
email: mail # or userPrincipalName
|
2018-11-26 17:12:04 +00:00
|
|
|
user_attribute_map:
|
|
|
|
|
active_directory:
|
2019-02-27 14:09:05 +00:00
|
|
|
username: "%(sAMAccountName)s"
|
|
|
|
|
email: "%(mail)s"
|
|
|
|
|
name: "%(displayName)"
|
2018-11-14 18:14:14 +00:00
|
|
|
oauth_client:
|
|
|
|
|
# List of python packages with sources types to load.
|
2018-11-16 09:08:15 +00:00
|
|
|
types:
|
2018-11-14 18:14:14 +00:00
|
|
|
- passbook.oauth_client.source_types.discord
|
|
|
|
|
- passbook.oauth_client.source_types.facebook
|
|
|
|
|
- passbook.oauth_client.source_types.github
|
|
|
|
|
- passbook.oauth_client.source_types.google
|
|
|
|
|
- passbook.oauth_client.source_types.reddit
|
|
|
|
|
- passbook.oauth_client.source_types.supervisr
|
|
|
|
|
- passbook.oauth_client.source_types.twitter
|
2019-03-14 20:18:55 +00:00
|
|
|
- passbook.oauth_client.source_types.azure_ad
|
2018-11-16 09:08:15 +00:00
|
|
|
saml_idp:
|
|
|
|
|
# List of python packages with provider types to load.
|
|
|
|
|
types:
|
|
|
|
|
- passbook.saml_idp.processors.generic
|
|
|
|
|
- passbook.saml_idp.processors.salesforce
|
2019-07-04 13:23:05 +00:00
|
|
|
app_gw:
|
|
|
|
|
listen: 0.0.0.0
|
|
|
|
|
port: 8000
|
