theme: light
default_2fa_method: totp

server:
  address: 'tcp://0.0.0.0:{{ authelia_port }}'

log:
  level: {{ authelia_log_level }}

totp:
  issuer: {{ authelia_domain }}

authentication_backend:
  file:
    path: /config/users_database.yml

access_control:
  default_policy: deny
  rules:
    - domain: "*.{{ authelia_domain }}"
      policy: two_factor

session:
  secret: "{{ authelia_session_secret }}"
  cookies:
    - name: authelia_session
      domain: {{ authelia_domain }}
      authelia_url: "https://auth.{{ authelia_domain }}"
      expiration: 1h
      inactivity: 5m

regulation:
  max_retries: 3
  find_time: 2m
  ban_time: 5m

storage:
  encryption_key: {{ authelia_storage_encryption_key }}
    local:
    path: /config/db.sqlite3

notifier:
  filesystem:
    filename: /config/notification.txt

identity_validation:
  reset_password:
    jwt_secret: {{ authelia_jwt_secret }}