forked from baron/baron-sso
112 lines
2.8 KiB
YAML
112 lines
2.8 KiB
YAML
version: v26.2.0
|
|
|
|
dsn: ${DSN}
|
|
|
|
serve:
|
|
public:
|
|
base_url: ${KRATOS_BROWSER_URL}
|
|
cors:
|
|
enabled: true
|
|
allowed_origins:
|
|
- ${USERFRONT_URL}
|
|
- ${ADMINFRONT_URL}
|
|
- ${DEVFRONT_URL}
|
|
- ${ORGFRONT_URL}
|
|
- http://backend:3000
|
|
- http://baron_backend:3000
|
|
admin:
|
|
base_url: ${KRATOS_ADMIN_URL}
|
|
|
|
session:
|
|
cookie:
|
|
domain: hmac.kr
|
|
same_site: Lax
|
|
path: /
|
|
|
|
selfservice:
|
|
default_browser_return_url: ${KRATOS_UI_URL}
|
|
allowed_return_urls:
|
|
- ${KRATOS_UI_URL}
|
|
- ${KRATOS_UI_URL}/
|
|
- ${USERFRONT_URL}
|
|
- ${USERFRONT_URL}/
|
|
- ${USERFRONT_URL}/ko
|
|
- ${USERFRONT_URL}/ko/
|
|
- ${USERFRONT_URL}/en
|
|
- ${USERFRONT_URL}/en/
|
|
- ${USERFRONT_URL}/auth/callback
|
|
- ${USERFRONT_URL}/ko/auth/callback
|
|
- ${USERFRONT_URL}/en/auth/callback
|
|
- ${ADMINFRONT_URL}/auth/callback
|
|
- ${DEVFRONT_URL}/auth/callback
|
|
- ${ORGFRONT_URL}/auth/callback
|
|
|
|
methods:
|
|
password:
|
|
enabled: true
|
|
link:
|
|
enabled: true
|
|
code:
|
|
enabled: true
|
|
passwordless_enabled: true
|
|
|
|
flows:
|
|
error:
|
|
ui_url: ${KRATOS_UI_URL}/error
|
|
settings:
|
|
ui_url: ${KRATOS_UI_URL}/error?error=settings_disabled
|
|
privileged_session_max_age: 15m
|
|
recovery:
|
|
ui_url: ${KRATOS_UI_URL}/recovery
|
|
use: code
|
|
verification:
|
|
ui_url: ${KRATOS_UI_URL}/verification
|
|
use: code
|
|
logout:
|
|
after:
|
|
default_browser_return_url: ${KRATOS_UI_URL}/login
|
|
login:
|
|
ui_url: ${KRATOS_UI_URL}/login
|
|
lifespan: 10m
|
|
registration:
|
|
ui_url: ${KRATOS_UI_URL}/registration
|
|
lifespan: 10m
|
|
|
|
log:
|
|
level: debug
|
|
format: text
|
|
leak_sensitive_values: true
|
|
|
|
secrets:
|
|
cookie:
|
|
- PLEASE-CHANGE-ME-I-AM-VERY-INSECURE
|
|
cipher:
|
|
- 32-LONG-SECRET-NOT-SECURE-AT-ALL
|
|
|
|
ciphers:
|
|
algorithm: xchacha20-poly1305
|
|
|
|
hashers:
|
|
algorithm: bcrypt
|
|
bcrypt:
|
|
cost: 8
|
|
|
|
identity:
|
|
default_schema_id: default
|
|
schemas:
|
|
- id: default
|
|
url: file:///etc/config/kratos/identity.schema.json
|
|
|
|
courier:
|
|
template_override_path: /etc/config/kratos/courier-templates
|
|
delivery_strategy: http
|
|
http:
|
|
request_config:
|
|
url: http://baron_backend:3000/api/v1/auth/webhooks/kratos-courier
|
|
method: POST
|
|
body: file:///etc/config/kratos/courier-http.jsonnet
|
|
headers:
|
|
Content-Type: application/json
|
|
smtp:
|
|
connection_uri: smtps://test:test@mailslurper:1025/?skip_ssl_verify=true
|