server:
  address: tcp://0.0.0.0:9091/

log:
  level: info
  format: text

theme: auto

identity_validation:
  reset_password: {}

authentication_backend:
  password_reset:
    disable: true
  file:
    path: /config/users_database.yml
    watch: true
    password:
      algorithm: argon2
      argon2:
        variant: argon2id
        iterations: 3
        memory: 65536
        parallelism: 4
        key_length: 32
        salt_length: 16

access_control:
  default_policy: deny
  rules:
    - domain: auth.__BASE_DOMAIN__
      policy: bypass
    - domain:
        - wiki.__BASE_DOMAIN__
        - dav.__BASE_DOMAIN__
      policy: one_factor
      subject:
        - group:tdwiki

session:
  name: authelia_session
  same_site: lax
  inactivity: 1h
  expiration: 12h
  remember_me: 30d
  cookies:
    - domain: __BASE_DOMAIN__
      authelia_url: https://auth.__BASE_DOMAIN__
      default_redirection_url: https://wiki.__BASE_DOMAIN__
  redis:
    host: redis
    port: 6379

regulation:
  max_retries: 5
  find_time: 2m
  ban_time: 10m

storage:
  local:
    path: /var/lib/authelia/db.sqlite3

notifier:
  filesystem:
    filename: /var/lib/authelia/notification.txt