mirror of
https://github.com/wahyd4/passkey-auth.git
synced 2026-08-08 20:15:44 +10:00
83 lines
2.9 KiB
YAML
83 lines
2.9 KiB
YAML
# Development Configuration
|
|
# Copy this file to config.yaml and modify for your environment
|
|
|
|
server:
|
|
port: "8080"
|
|
host: "0.0.0.0"
|
|
|
|
webauthn:
|
|
# Display name shown during passkey registration
|
|
rp_display_name: "Passkey Auth - Development"
|
|
|
|
# Must match your domain exactly (without protocol)
|
|
# For local development, use "localhost"
|
|
# For production, use your actual domain like "auth.example.com"
|
|
rp_id: "localhost"
|
|
|
|
# List of allowed origins (with protocol)
|
|
# Must include all URLs where users will access the auth interface
|
|
rp_origins:
|
|
- "http://localhost:8080"
|
|
# Add your production URLs:
|
|
# - "https://auth.example.com"
|
|
# - "https://example.com"
|
|
|
|
database:
|
|
# SQLite database file path
|
|
# In Kubernetes, this should be in a persistent volume
|
|
path: "passkey-auth.db"
|
|
|
|
cors:
|
|
# Allowed origins for CORS
|
|
# In production, be specific about allowed origins for security
|
|
allowed_origins:
|
|
- "*" # Only use "*" for development
|
|
# Production example:
|
|
# - "https://auth.example.com"
|
|
# - "https://admin.example.com"
|
|
|
|
auth:
|
|
# Session encryption secret - MUST be changed in production!
|
|
# Generate with: openssl rand -base64 32
|
|
session_secret: "change-me-in-production"
|
|
|
|
# Whether new users need admin approval before they can authenticate
|
|
# Set to false to allow automatic approval for trusted environments
|
|
require_approval: true
|
|
|
|
# Cookie domain for session cookies
|
|
# Leave empty for single domain (cookies only work on current domain)
|
|
# Set to ".yourdomain.com" to share cookies across all subdomains
|
|
# Examples:
|
|
# - "" (empty) - cookies only work on the exact domain
|
|
# - ".example.com" - cookies work on example.com and all subdomains
|
|
cookie_domain: ""
|
|
|
|
# Email allowlist - list of email addresses allowed to register
|
|
# Leave empty to allow any email address (not recommended for production)
|
|
allowed_emails:
|
|
# Example emails (uncomment and modify as needed):
|
|
# - "admin@yourcompany.com"
|
|
# - "user1@yourcompany.com"
|
|
# - "user2@yourcompany.com"
|
|
|
|
# Admin email - user with this email will be auto-approved and can access admin panel
|
|
# Can also be set via ADMIN_EMAIL environment variable
|
|
admin_email: "" # Set this to your admin email address
|
|
|
|
# Default email to pre-fill in the login form
|
|
# When set, this email will be automatically filled in the email input field
|
|
# Leave empty to show an empty email field
|
|
default_email: "" # Set this to pre-fill the login form with a default email
|
|
|
|
# Environment-specific overrides can be set via environment variables:
|
|
# - PORT: Server port
|
|
# - HOST: Server host
|
|
# - WEBAUTHN_RP_ID: WebAuthn Relying Party ID
|
|
# - DATABASE_PATH: Database file path
|
|
# - SESSION_SECRET: Session encryption secret
|
|
# - ALLOWED_EMAILS: Comma-separated list of allowed emails
|
|
# - ADMIN_EMAIL: Admin email address
|
|
# - COOKIE_DOMAIN: Cookie domain for session cookies
|
|
# - DEFAULT_EMAIL: Default email to pre-fill in login form
|