{%- set WEBACCESS = salt['pillar.get']('global:url_base', '') -%}
{%- set KRATOSKEY = salt['pillar.get']('kratos:kratoskey', '') -%}

selfservice:
  methods:
    password:
      enabled: true

  flows:
    settings:
      ui_url: https://{{ WEBACCESS }}/?r=/settings

    verification:
      ui_url: https://{{ WEBACCESS }}/

    login:
      ui_url: https://{{ WEBACCESS }}/login/

    error:
      ui_url: https://{{ WEBACCESS }}/login/

    registration:
      ui_url: https://{{ WEBACCESS }}/login/
    
  default_browser_return_url: https://{{ WEBACCESS }}/
  whitelisted_return_urls:
    - http://127.0.0.1

log:
  level: debug
  format: json

secrets:
  default:
    - {{ KRATOSKEY }}

serve:
  public: 
    base_url: https://{{ WEBACCESS }}/auth/
  admin: 
    base_url: https://{{ WEBACCESS }}/kratos/

hashers:
  argon2:
    parallelism: 2
    memory: 16384
    iterations: 3
    salt_length: 16
    key_length: 32

identity:
  default_schema_url: file:///kratos-conf/schema.json

courier:
  smtp:
    connection_uri: smtps://{{ WEBACCESS }}:25