# update website/docs/installation/configuration.md
# This is the default configuration file
postgresql:
  host: localhost
  name: authentik
  user: authentik
  port: 5432
  password: 'env://POSTGRES_PASSWORD'

web:
  listen: 0.0.0.0:9000
  listen_tls: 0.0.0.0:9443
  listen_metrics: 0.0.0.0:9300
  outpost_port_offset: 0

redis:
  host: localhost
  port: 6379
  password: ''
  tls: false
  tls_reqs: "none"
  cache_db: 0
  message_queue_db: 1
  ws_db: 2
  outpost_session_db: 3
  cache_timeout: 300
  cache_timeout_flows: 300
  cache_timeout_policies: 300
  cache_timeout_reputation: 300

debug: false

log_level: info

# Error reporting, sends stacktrace to sentry.beryju.org
error_reporting:
  enabled: false
  environment: customer
  send_pii: false
  sample_rate: 0.3

# Global email settings
email:
  host: localhost
  port: 25
  username: ""
  password: ""
  use_tls: false
  use_ssl: false
  timeout: 10
  from: authentik@localhost

outposts:
  # Placeholders:
  # %(type)s: Outpost type; proxy, ldap, etc
  # %(version)s: Current version; 2021.4.1
  # %(build_hash)s: Build hash if you're running a beta version
  container_image_base: ghcr.io/goauthentik/%(type)s:%(version)s
  discover: true

ldap:
  tls:
    ciphers: null

cookie_domain: null
disable_update_check: false
disable_startup_analytics: false
avatars: env://AUTHENTIK_AUTHENTIK__AVATARS?gravatar
geoip: "/geoip/GeoLite2-City.mmdb"

footer_links: []

default_user_change_name: true
default_user_change_email: true
default_user_change_username: true

gdpr_compliance: true
cert_discovery_dir: /certs
default_token_length: 128
impersonation: true

blueprints_dir: /blueprints