;; Pleasant SSO configuration file

[site]

;; site name displayed to users. can be anything
name = Pleasant SSO

;; primary domain where your login page will be
primary-domain = auth.example.com

;; additional domains that need to be visited to set cookies appropriately
;; (primary-domain is implicitly always included so don't put it again here)
;; note that for now, it's assumed that the domain one level higher than these
;; is the "registrable domain" where the cookies are set to
;; e.g. for 'auth.example.net', the cookie will get Domain=example.net
cookie-domains[] = auth.example.net
cookie-domains[] = auth.example.org

;; additional domains where it's allowed to redirect to (includes subdomains)
redirect-domains[] = thirdparty.example

;; location where the source code of the version of the software running on your
;; server can be found. so if you make any significant changes to the source
;; code you'd better put them up online somewhere and change this accordingly!!
;; this is required for AGPL compliance
source-location = https://git.зима.net/winter/pleasant-sso/


[integration]

;; what string to put on the front of header names destined for proxies
;; e.g. if this is 'X-Login', it will make headers like 'X-Login-User'
;; e.g. if you want to match authelia, set it to 'Remote'
header-prefix = X-Login


[auth]

;; what AuthProvider to use - i.e. who to ask for users' information
;; ConfigFile -> look in this file, see below
;; coming soon will be Ldap, etc.
provider = ConfigFile

;; how long (in seconds) until a session expires and you have to log in again
;; 1 year = 31557600, 1 month = 2629800, 1 week = 604800, 1 day = 86400
lifetime = 604800


;; this next section allows you to define users very simple here in the config
;; file, in case you don't want to use an external auth provider (set above)
;; but if you are using an external provider it's okay to remove all of this
[users]

;; password-hash -> allow password login for user
;; password hash should be generated by php function 'password_hash'
;; groups -> space-separated list of groups to put the user in
;; name -> display name
;; email -> email address
;; none are required but at least one must be present for the user to exist
winter[name] = winter Sparkles
winter[password-hash] = "$2y$12$V3dwpbHF5fTx46g9xMflvODNGmr0apltiaDONUSE2skRrslgcRxSS"
winter[groups] = admin

;; more options to be added in future!