rhythmic-stone-34843
02/02/2025, 7:48 PMversion: v1.3.1
# dsn: memory
# dsn: "sqlite///C/Users/maria/OneDrive/Desktop/ory_keratos/test.db?_fk=true"
dsn: "postgres://postgres:password@localhost:5432/local"
serve:
public:
base_url: http://127.0.0.1:4433/
cors:
enabled: true
allowed_origins:
- http://127.0.0.1:8000
allowed_methods:
- POST
- GET
- OPTIONS
allowed_headers:
- Authorization
- Content-Type
- X-CSRF-Token
allow_credentials: true
admin:
base_url: http://kratos:4434/
selfservice:
default_browser_return_url: http://127.0.0.1:8000/
allowed_return_urls:
- http://127.0.0.1:8000
# whitelisted_return_urls:
# - http://127.0.0.1:8000
methods:
password:
enabled: true
oidc:
enabled: true
config:
providers:
- id: github
provider: github
client_id: YOUR_GITHUB_CLIENT_ID
client_secret: YOUR_GITHUB_CLIENT_SECRET
mapper_url: file:///path/to/github_mapper.json
scope:
- user:email
flows:
error:
ui_url: http://127.0.0.1:8000/error
settings:
ui_url: http://127.0.0.1:8000/settings
privileged_session_max_age: 15m
recovery:
enabled: true
ui_url: http://127.0.0.1:8000/recovery
verification:
enabled: false
ui_url: http://127.0.0.1:8000/verification
after:
default_browser_return_url: http://127.0.0.1:8000/
logout:
after:
default_browser_return_url: http://127.0.0.1:8000/login
login:
ui_url: http://127.0.0.1:8000/login
lifespan: 10m
registration:
lifespan: 10m
ui_url: http://127.0.0.1:8000/registration
after:
password:
hooks:
- hook: session
session:
cookie:
domain: 127.0.0.1
path: /
# same_site: None
cookies:
domain: 127.0.0.1
path: /
# same_site: None
log:
level: debug
format: text
leak_sensitive_values: true
secrets:
cookie:
- PLEASE-CHANGE-ME-I-AM-VERY-INSECURE
cipher:
- 32-LONG-SECRET-NOT-SECURE-AT-ALL
ciphers:
algorithm: xchacha20-poly1305
hashers:
algorithm: bcrypt
bcrypt:
cost: 8
identity:
schemas:
- id: default
url: file://./identity.schema.json
courier:
smtp:
connection_uri: smtps://test:test@mailslurper:1025/?skip_ssl_verify=true