blob: d09ef3dc440ff6f308c70177c0b40abfb20356fa (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
;; Pleasant SSO configuration file
[site]
;; site name displayed to users. can be anything
name = Pleasant SSO
;; primary domain where your login page will be
primary-domain = auth.example.com
;; additional domains that need to be visited to set cookies appropriately
;; (primary-domain is implicitly always included so don't put it again here)
;; note that for now, it's assumed that the domain one level higher than these
;; is the "registrable domain" where the cookies are set to
;; e.g. for 'auth.example.net', the cookie will get Domain=example.net
cookie-domains[] = auth.example.net
cookie-domains[] = auth.example.org
;; additional domains where it's allowed to redirect to (includes subdomains)
redirect-domains[] = thirdparty.example
;; location where the source code of the version of the software running on your
;; server can be found. so if you make any significant changes to the source
;; code you'd better put them up online somewhere and change this accordingly!!
;; this is required for AGPL compliance
source-location = https://git.зима.net/winter/pleasant-sso/
[integration]
;; what string to put on the front of header names destined for proxies
;; e.g. if this is 'X-Login', it will make headers like 'X-Login-User'
;; e.g. if you want to match authelia, set it to 'Remote'
header-prefix = X-Login
[auth]
;; what AuthProvider to use - i.e. who to ask for users' information
;; ConfigFile -> look in this file, see below
;; coming soon will be Ldap, etc.
provider = ConfigFile
;; how long (in seconds) until a session expires and you have to log in again
;; 1 year = 31557600, 1 month = 2629800, 1 week = 604800, 1 day = 86400
lifetime = 604800
;; this next section allows you to define users very simple here in the config
;; file, in case you don't want to use an external auth provider (set above)
;; but if you are using an external provider it's okay to remove all of this
[users]
;; password-hash -> allow password login for user
;; password hash should be generated by php function 'password_hash'
;; groups -> space-separated list of groups to put the user in
;; name -> display name
;; email -> email address
;; none are required but at least one must be present for the user to exist
winter[name] = winter Sparkles
winter[password-hash] = "$2y$12$V3dwpbHF5fTx46g9xMflvODNGmr0apltiaDONUSE2skRrslgcRxSS"
winter[groups] = admin
;; more options to be added in future!
|
