version: v0.7.1-alpha.1

dsn: memory

serve:
  public:
    base_url: https://public.auth.***.io/
    tls:
      cert:
        path: /etc/config/kratos/ssl/public/fullchain.pem
      key:
        path: /etc/config/kratos/ssl/public/privkey.pem
    domain_aliases:
      - match_domain: ***
        base_path: /
        scheme: http
    cors:
      enabled: true
      allowed_origins:
        - http://47.155.196.43
        - http://localhost
        - http://localhost:49909
      allowed_methods:
        - POST
        - GET
        - PUT
        - PATCH
        - DELETE
      allowed_headers:
        - Authorization
        - Cookie
        - Content-Type
        - Set-Cookie
      exposed_headers:
        - Content-Type
        - Set-Cookie
  admin:
    tls:
      cert:
        path: /etc/config/kratos/ssl/public/fullchain.pem
      key:
        path: /etc/config/kratos/ssl/public/privkey.pem
    base_url: https://admin.auth.xesty.io/

selfservice:
  default_browser_return_url: https://self-service.auth.***.io/
  whitelisted_return_urls:
    - https://self-service.auth.***.io

  methods:
    password:
      enabled: true

  flows:
    error:
      ui_url: https://self-service.auth.***.io/error

    settings:
      ui_url: https://self-service.auth.***.io/settings
      privileged_session_max_age: 15m

    recovery:
      enabled: true
      ui_url: https://self-service.auth.***.io/recovery

    verification:
      enabled: true
      ui_url: https://self-service.auth.***.io/verify
      after:
        default_browser_return_url: https://self-service.auth.***.io/

    logout:
      after:
        default_browser_return_url: https://self-service.auth.***.io/login

    login:
      ui_url: https://self-service.auth.***.io/login
      lifespan: 10m

    registration:
      lifespan: 10m
      ui_url: https://self-service.auth.***.io/registration
      after:
        password:
          hooks:
            -
              hook: session

log:
  level: debug
  format: text
  leak_sensitive_values: true

secrets:
  cookie:
    - PLEASE-CHANGE-ME-I-AM-VERY-INSECURE
  cipher:
    - 32-LONG-SECRET-NOT-SECURE-AT-ALL

cookies:
  domain: ***.io
  path: /
  same_site: None

session:
  cookie:
    domain: ***.io
    path: /
    same_site: None

ciphers:
  algorithm: xchacha20-poly1305

hashers:
  argon2:
    parallelism: 1
    memory: 128MB
    iterations: 2
    salt_length: 16
    key_length: 16

identity:
  default_schema_url: file:///etc/config/kratos/identity.schema.json

courier:
  smtp:
    from_address: no-reply@mail.***.co
    connection_uri: smtps://postmaster@mail.***.co:***@smtp.mailgun.org:465/?skip_ssl_verify=true
  sms:
    from: '+***'
    request_config:
      url: https://api.twilio.com/2010-04-01/Accounts/***/Messages.json
      method: POST
      header:
        'Content-Type': 'application/x-www-form-urlencoded'
      auth:
        type: basic_auth
        config:
          user: ***
          password: ***
    enabled: true