mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-24 18:03:10 +01:00
63 lines
1.5 KiB
YAML
63 lines
1.5 KiB
YAML
kratos:
|
|
enabled: False
|
|
config:
|
|
session:
|
|
lifespan: 24h
|
|
whoami:
|
|
required_aal: highest_available
|
|
selfservice:
|
|
methods:
|
|
webauthn:
|
|
enabled: true
|
|
config:
|
|
passwordless: true
|
|
rp:
|
|
id: URL_BASE
|
|
origin: https://URL_BASE
|
|
display_name: Security Onion (URL_BASE)
|
|
password:
|
|
enabled: true
|
|
config:
|
|
haveibeenpwned_enabled: false
|
|
totp:
|
|
enabled: true
|
|
config:
|
|
issuer: Security Onion
|
|
flows:
|
|
settings:
|
|
privileged_session_max_age: 5m
|
|
ui_url: https://URL_BASE/?r=/settings
|
|
required_aal: highest_available
|
|
verification:
|
|
ui_url: https://URL_BASE/
|
|
login:
|
|
ui_url: https://URL_BASE/login/
|
|
error:
|
|
ui_url: https://URL_BASE/login/
|
|
registration:
|
|
ui_url: https://URL_BASE/login/
|
|
default_browser_return_url: https://URL_BASE/
|
|
allowed_return_urls:
|
|
- http://127.0.0.1
|
|
log:
|
|
level: debug
|
|
format: json
|
|
secrets:
|
|
default: []
|
|
serve:
|
|
public:
|
|
base_url: https://URL_BASE/auth/
|
|
admin:
|
|
base_url: https://URL_BASE/kratos/
|
|
hashers:
|
|
bcrypt:
|
|
cost: 12
|
|
identity:
|
|
default_schema_id: default
|
|
schemas:
|
|
- id: default
|
|
url: file:///kratos-conf/schema.json
|
|
courier:
|
|
smtp:
|
|
connection_uri: smtps://URL_BASE:25
|