---
###############################################################
#                   Authelia configuration                    #
###############################################################

host: 0.0.0.0
port: 9091
# This secret can also be set using the env variables AUTHELIA_JWT_SECRET_FILE
jwt_secret: StifleUnifierRimmedHeadlampCornmealBobcat
default_redirection_url: https://fbleagh.duckdns.org
totp:
  issuer: authelia.com
log_level: debug
# duo_api:
#  hostname: api-123456789.example.com
#  integration_key: ABCDEF
#  # This secret can also be set using the env variables AUTHELIA_DUO_API_SECRET_KEY_FILE
#  secret_key: 1234567890abcdefghifjkl

authentication_backend:
  file:
    path: /config/users_database.yml

access_control:
  default_policy: deny
  rules:
    # Rules applied to everyone
    - domain: "fbleagh.duckdns.org"
      policy: one_factor 
    - domain: "m.fbleagh.duckdns.org"
      policy: bypass
      resources:
      - "^/rest.*"
    - domain: "rss.fbleagh.duckdns.org"
      policy: bypass
      resources:
      - "^/api."
    - domain: "*.fbleagh.duckdns.org"
      policy: one_factor


session:
  name: authelia_session
  # This secret can also be set using the env variables AUTHELIA_SESSION_SECRET_FILE
  secret: UpstreamClutterSlumPreplanCompactedBackspin
  expiration: 3600  # 1 hour
  inactivity: 300  # 5 minutes
  domain: fbleagh.duckdns.org  # Should match whatever your root protected domain is



regulation:
  max_retries: 3
  find_time: 120
  ban_time: 300

storage:
  local:
    path: /config/db.sqlite3

notifier:
  disable_startup_check: false
  filesystem:
    filename: /config/notification.txt

# notifier:
#   smtp:
#     username: test
#     # This secret can also be set using the env variables AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE
#     password: password
#     host: mail.gmail.com
#     port: 25
#     sender: admin@example.com
# ...