---
###############################################################
#                   Authelia configuration                    #
###############################################################

# This secret can also be set using the env variables AUTHELIA_JWT_SECRET_FILE

#jwt_secret: a_very_important_secret
default_redirection_url: https://auth.local.gurulandia.eu

server:
  host: 0.0.0.0
  port: 9091

log:
  level: warn

theme: dark

totp:
  issuer: authelia.com
  period: 30
  skew: 1

# duo_api:
#  hostname: api-123456789.example.com
#  integration_key: ABCDEF
#  # This secret can also be set using the env variables AUTHELIA_DUO_API_SECRET_KEY_FILE
#  secret_key: 1234567890abcdefghifjkl

authentication_backend:
#  file:
#    path: /config/users_database.yml
#    password:
#      algorithm: argon2id
#      iterations: 1
#      salt_length: 16
#      parallelism: 8
#      memory: 64
  disable_reset_password: false
  refresh_interval: 5m
  ldap:
    implementation: activedirectory
    url: ldap://192.168.5.40
    timeout: 5s
#    start_tls: true
#    tls:
#      server_name: gl-v-dc-01.local.gurulandia.eu
#      skip_verify: true
#      minimum_version: TLS1.2
    base_dn: DC=local,DC=gurulandia,DC=eu
#    username_attribute: uid
#    additional_users_dn: ouusers
#    users_filter: (&({username_attribute}={input})(objectClass=person))
#    additional_groups_dn: ou=groups
#    groups_filter: (&(member={dn})(objectClass=groupOfNames))
#    group_name_attribute: cn
    mail_attribute: mail
    display_name_attribute: displayName
    user: CN=Gurulandia Administrator,OU=Admins,OU=Accounts,OU=Gurulandia,DC=local,DC=gurulandia,DC=eu
    password: Gurul4nd144dm
      
access_control:
  default_policy: deny
  rules:
    # Rules applied to everyone
    - domain: auth.local.gurulandia.eu
      policy: bypass
    - domain: "*.gurulandia.eu" 
      policy: one_factor
    #- domain: home.local.gurulandia.duckdns.org  
     # policy: one_factor
    #- domain: traefik.local.gurulandia.duckdns.org
    #  policy: one_factor
    #- domain: gl-p-pve-01.local.gurulandia.duckdns.org
    #  policy: one_factor #two_factor
    #- domain: gl-p-nas-02.local.gurulandia.duckdns.org
    #  policy: one_factor #two_factor
    #- domain: gl-v-pbs-01.local.gurulandia.duckdns.org
    #  policy: one_factor #two_factor
    #- domain: gl-p-fw-01.local.gurulandia.duckdns.org
    #  policy: one_factor #two_factor
    #- domain: rancher.local.gurulandia.duckdns.org
    #  policy: one_factor #two_factor
    #- domain: portainer.local.gurulandia.duckdns.org
    #  policy: one_factor #two_factor


session:
  name: authelia_session
  # This secret can also be set using the env variables AUTHELIA_SESSION_SECRET_FILE
  #secret: unsecure_session_secret
  expiration: 3600  # 1 hour
  inactivity: 3600  # 1 hour 5 minutes
  domain: gurulandia.eu  # Should match whatever your root protected domain is

  # redis:
  #   host: redis
  #   port: 6379
  #   # This secret can also be set using the env variables AUTHELIA_SESSION_REDIS_PASSWORD_FILE
  #   # password: authelia

regulation:
  max_retries: 3
  find_time: 120
  ban_time: 300

storage:
  # This secret can also be set using the env variables AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE
  encryption_key: a_very_important_secret
  local:
    path: /config/db.sqlite3

#   mysql:
#    host: 192.168.99.60
#    port: 3306
#    database: Authelia
#    username: authelia
#    This secret can also be set using the env variables AUTHELIA_STORAGE_MYSQL_PASSWORD_FILE
#    password: authelia
    
notifier:
  # smtp:
  #   username: test
  #   # This secret can also be set using the env variables AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE
  #   password: password
  #   host: mail.example.com
  #   port: 25
  #   sender: admin@example.com
  filesystem:
    filename: /notification.txt
...
