##
##  dex.yaml -- Dex Service Configuration
##

issuer:          http://127.0.0.1:5556/dex

storage:
#SQLITE#    type:        sqlite3
#SQLITE#    config:
#SQLITE#        file:    @l_prefix@/var/dex/db/dex.db
#PGSQL#    type:         postgres
#PGSQL#    config:
#PGSQL#        host:     127.0.0.1
#PGSQL#        database: dex
#PGSQL#        user:     dex
#PGSQL#        password: dex
#PGSQL#        ssl:
#PGSQL#            mode: disable

web:
    http:        127.0.0.1:5556
    https:       127.0.0.1:5554
    tlsCert:     @l_prefix@/etc/x509/example-server.crt.pem
    tlsKey:      @l_prefix@/etc/x509/example-server.key.pem
    tlsClientCA: @l_prefix@/etc/x509/example-ca.crt.pem

grpc:
    addr:        127.0.0.1:5557
    tlsCert:     @l_prefix@/etc/x509/example-server.crt.pem
    tlsKey:      @l_prefix@/etc/x509/example-server.key.pem
    tlsClientCA: @l_prefix@/etc/x509/example-ca.crt.pem

frontend:
    dir:         @l_prefix@/share/dex

expiry:
    signingKeys: "6h"
    idTokens:    "24h"

logger:
    level:       "debug"
    format:      "text"

staticClients:
    - id:        example-app1
      name:      "Example App #1"
      secret:    ZXhhbXBsZQo=
      redirectURIs:
          - "http://127.0.0.1:5555/callback"

connectors:
    - type:      mockCallback
      id:        mock
      name:      Example
    - type:      oidc
      id:        google
      name:      Google
      config:
          issuer:       https://accounts.google.com
          clientID:     "GoogleClientIdFIXME"
          clientSecret: "GoogleClientSecretFIXME"
          redirectURI:  http://127.0.0.1:5556/dex/callback
    - type:      github
      id:        github
      name:      GitHub
      config:
          clientID:     "GithubClientIdFIXME"
          clientSecret: "GithubClientSecretFIXME"
          redirectURI:  http://127.0.0.1:5556/dex/callback

enablePasswordDB: true

staticPasswords:
    - email:     "admin@example.com"
      hash:      "$2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W" # "password"
      username:  "admin"
      userID:    "08a8684b-db88-4b73-90a9-3cd1661f5466"

