---
# Authelia configuration
# This is a minimal configuration for getting started with Authelia

server:
  address: 'tcp://:9091'
  endpoints:
    authz:
      forward-auth:
        implementation: 'ForwardAuth'

authentication_backend:
  file:
    path: '/config/users_database.yml'

access_control:
  default_policy: 'one_factor'
  rules:
    - domain: 'pgadmin.test.3launchpad.com'
      policy: 'two_factor'
    - domain: 'beszel.test.3launchpad.com'
      policy: 'two_factor'
    - domain: 'traefik.test.3launchpad.com'
      policy: 'two_factor'
    - domain: '*.test.3launchpad.com'
      policy: 'one_factor'

session:
  name: 'authelia_session'
  cookies:
    - domain: '3launchpad.com'
      authelia_url: 'https://auth.test.3launchpad.com'
      default_redirection_url: 'https://portainer.test.3launchpad.com'

storage:
  postgres:
    address: 'tcp://authelia-db:5432'
    database: 'authelia'
    username: 'authelia'
    password: 'p/6EGIgTxPndniwUCY54G7q5jOPqXofF'

notifier:
  disable_startup_check: true
  # Configure SMTP for production email notifications
  # For testing, you can use filesystem notifier instead:
  # filesystem:
  #   filename: /config/notification.txt
  smtp:
    address: 'submissions://smtp.gmail.com:465'
    username: 'your-email@gmail.com'
    sender: 'Authelia <noreply@3launchpad.com>'
    # For Gmail, use an App Password (not your regular password)
    # Generate at: https://myaccount.google.com/apppasswords

identity_validation:
  reset_password: {}

regulation:
  max_retries: 3
  find_time: 120
  ban_time: 300