---
###############################################################
#                   Authelia configuration                    #
###############################################################

host: 0.0.0.0
port: 9091
log:
  level: debug
# This secret can also be set using the env variables AUTHELIA_JWT_SECRET_FILE
jwt_secret: XvvpN7uFoSmQAPdgAynDTHG8yQX4tjtS
default_redirection_url: https://public.jafner.net
totp:
  issuer: authelia.com

authentication_backend:
  file:
    path: /config/users_database.yml

access_control:
  default_policy: deny
  rules:
    # Rules applied to everyone
    - domain: 5e.jafner.net
      policy: bypass
    - domain: traefik.jafner.net
      policy: one_factor

session:
  name: authelia_session
  # This secret can also be set using the env variables AUTHELIA_SESSION_SECRET_FILE
  secret: ***REMOVED***
  expiration: 3600  # 1 hour
  inactivity: 300  # 5 minutes
  domain: jafner.net  # Should match whatever your root protected domain is

redis:
  host: redis
  port: 6379
  # This secret can also be set using the env variables AUTHELIA_SESSION_REDIS_PASSWORD_FILE
  # password: authelia

regulation:
  max_retries: 3
  find_time: 120
  ban_time: 300

storage:
  local:
    path: /config/db.sqlite3

notifier:
  filesystem:
    filename: /config/notification.txt