---
###############################################################
#                   Authelia configuration                    #
###############################################################

host: 0.0.0.0
port: 9091
# This secret can also be set using the env variables AUTHELIA_JWT_SECRET_FILE
jwt_secret: XvvpN7uFoSmQAPdgAynDTHG8yQX4tjtS
default_redirection_url: https://www.jafner.net
totp:
  issuer: authelia.com
  period: 30
  skew: 1

authentication_backend:
  file:
    path: /config/users_database.yml
    password:
      algorithm: argon2id
      iterations: 1
      salt_length: 16
      parallelism: 8
      memory: 1024

access_control:
  default_policy: deny
  rules:
    # Rules applied to everyone
    - domain: 
      - "*.jafner.net"
      - "jafner.net"
      policy: two_factor

session:
  name: authelia_session
  # This secret can also be set using the env variables AUTHELIA_SESSION_SECRET_FILE
  secret: ***REMOVED***
  expiration: 3600  # 1 hour
  inactivity: 300  # 5 minutes
  domain: jafner.net  # Should match whatever your root protected domain is
  redis:
    host: redis
    port: 6379
    # This secret can also be set using the env variables AUTHELIA_SESSION_REDIS_PASSWORD_FILE
    # password: authelia

regulation:
  max_retries: 3
  find_time: 120
  ban_time: 300

storage:
  local:
    path: /config/db.sqlite3

notifier:
  filesystem:
    filename: /config/notification.txt