mirror of
https://github.com/kanidm/kanidm.git
synced 2025-05-24 01:43:55 +02:00
7236bee837
This drops the use of fernet from OAuth2 in favour of JWE. To achieve this cleanly, we swap OAuth2 to using our internel key object handler so that in future we can consider the use of pkcs11 devices. This also makes it easier in general to handle any future cryptographic changes.
31 lines
719 B
TOML
31 lines
719 B
TOML
version = "2"
|
|
bindaddress = "[::]:8443"
|
|
ldapbindaddress = "127.0.0.1:3636"
|
|
|
|
db_fs_type = "zfs"
|
|
db_path = "/tmp/kanidm/kanidm.db"
|
|
tls_chain = "/tmp/kanidm/chain.pem"
|
|
tls_key = "/tmp/kanidm/key.pem"
|
|
# tls_client_ca = "/tmp/kanidm/client_ca"
|
|
|
|
# The log level of the server. May be one of info, debug, trace
|
|
#
|
|
# NOTE: this is overridden by KANIDM_LOG_LEVEL environment variable
|
|
# Defaults to "info"
|
|
#
|
|
# log_level = "info"
|
|
# log_level = "debug"
|
|
log_level = "trace"
|
|
|
|
# otel_grpc_url = "http://localhost:4317"
|
|
|
|
domain = "localhost"
|
|
origin = "https://localhost:8443"
|
|
trust_x_forward_for = true
|
|
|
|
[online_backup]
|
|
# defaults to db_path
|
|
# path = "/tmp/kanidm/backups/"
|
|
schedule = "@hourly"
|
|
# enabled = true # default enabled
|