theme: dark
jwt_secret: 9DGPzQy8SZQ7rV57V3DJnw

#default_redirection_url: https://www.google.com/

server:
  host: 0.0.0.0
  port: 9091
  path: ""
  read_buffer_size: 4096
  write_buffer_size: 4096
  enable_pprof: false
  enable_expvars: false
  disable_healthcheck: false
  tls:
    key: ""
    certificate: ""

ntp:
  address: "0.debian.pool.ntp.org:123"
  version: 3
  max_desync: 10s
  disable_startup_check: true
  disable_failure: true

log:
  level: info

totp:
  disable: false
  issuer: akanealw.com
  algorithm: sha1
  digits: 6
  period: 30
  skew: 2
  secret_size: 32

authentication_backend:
  disable_reset_password: true
  refresh_interval: 5m
  file:
    path: /config/users_database.yml
    password:
      algorithm: argon2id
      iterations: 1
      salt_length: 16
      parallelism: 8
      memory: 64

access_control:
  default_policy: deny
  rules:
    # bypass rule
    - domain: "auth.akanealw.com"
      policy: bypass
    - domain: "bitwarden.akanealw.com"
      policy: bypass
    - domain: "meshcentral.akanealw.com"
      policy: bypass
    - domain: "owncloud.akanealw.com"
      policy: bypass
    - domain: "overseerr.akanealw.com"
      policy: bypass
    - domain: "plex.akanealw.com"
      policy: bypass
    - domain: "tautulli.akanealw.com"
      policy: bypass

    # two_factor rule
    - domain: "akanealw.com"
      policy: two_factor
    - domain: "codeserver.akanealw.com"
      policy: two_factor
    - domain: "freshrss.akanealw.com"
      policy: two_factor
    - domain: "gitea.akanealw.com"
      policy: two_factor
    - domain: "jackett.akanealw.com"
      policy: two_factor
    - domain: "jdownloader.akanealw.com"
      policy: two_factor
    - domain: "kavita.akanealw.com"
      policy: two_factor
    - domain: "metube.akanealw.com"
      policy: two_factor
    - domain: "monitorr.akanealw.com"
      policy: two_factor
    - domain: "mstream.akanealw.com"
      policy: two_factor
    - domain: "nzbhydra.akanealw.com"
      policy: two_factor
    - domain: "portainer.akanealw.com"
      policy: two_factor
    - domain: "prowlarr.akanealw.com"
      policy: two_factor
    - domain: "qbittorrent.akanealw.com"
      policy: two_factor
    - domain: "radarr.akanealw.com"
      policy: two_factor
    - domain: "sabnzbd.akanealw.com"
      policy: two_factor
    - domain: "sonarr.akanealw.com"
      policy: two_factor
    - domain: "tdarr.akanealw.com"
      policy: two_factor
    - domain: "www.akanealw.com"
      policy: two_factor

session:
  name: authelia_session
  domain: akanealw.com
  same_site: lax
  secret: 8r9y4d8mY7NfQtpCe2oU
  expiration: 1h
  inactivity: 5m
  remember_me_duration: 1w

regulation:
  max_retries: 3
  find_time: 10m
  ban_time: 12h

storage:
  local:
    path: /config/db.sqlite3
  encryption_key: iiB7C8Bn4A2gAhzs2fWaggUug76PZ4LU
  
notifier:
  disable_startup_check: true
  smtp:
    username: akanealw@gmail.com
    password: qlvmffuzpscltdgz
    host: smtp.gmail.com
    port: 587
    sender: akanealw@gmail.com
    identifier: dockerserver
    subject: "[Authelia] {title}"
    startup_check_address: akanealw@gmail.com
    disable_require_tls: false
    disable_html_emails: false
    tls:
      skip_verify: false
      minimum_version: TLS1.2