theme: light
default_2fa_method: totp

server:
  address: 'tcp://0.0.0.0:{{ authelia_port }}'

log:
  level: {{ authelia_log_level }}

totp:
  issuer: {{ authelia_domain }}

authentication_backend:
  file:
    path: /config/users_database.yml

access_control:
  default_policy: deny
  rules:
    - domain: "*.{{ authelia_domain }}"
      policy: two_factor

session:
  name: authelia_session
  domain: {{ authelia_domain }}
  expiration: 1h
  inactivity: 5m

regulation:
  max_retries: 3
  find_time: 2m
  ban_time: 5m

storage:
  local:
    path: /config/db.sqlite3

notifier:
  filesystem:
    filename: /config/notification.txt

identity_validation:
  reset_password:
    jwt_secret: "{{ authelia_jwt_secret }}"

session:
  secret: "{{ authelia_session_secret }}"

storage:
  encryption_key: "{{ authelia_storage_encryption_key }}"