forked from ubccr/mokey
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathmokey.yaml.sample
155 lines (127 loc) · 6.95 KB
/
mokey.yaml.sample
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
---
#------------------------------------------------------------------------------
# Database connection
#------------------------------------------------------------------------------
dsn: "user:pass@/dbname?parseTime=true"
#------------------------------------------------------------------------------
# Database driver
#------------------------------------------------------------------------------
driver: "mysql"
#------------------------------------------------------------------------------
# Webserver port to lisen on
#------------------------------------------------------------------------------
port: 8080
#------------------------------------------------------------------------------
# Webserver interface to lisen on
#------------------------------------------------------------------------------
bind: "127.0.0.1"
#------------------------------------------------------------------------------
# SSL certificate
#------------------------------------------------------------------------------
# cert: "/path/to/cert"
#------------------------------------------------------------------------------
# SSL private key
#-------------------------------------------------------------------
# key: "/path/to/key"
#------------------------------------------------------------------------------
# Min password length
#------------------------------------------------------------------------------
# min_passwd_len: 8
#------------------------------------------------------------------------------
# Secret key used for HMAC token signing and secure cookies
#------------------------------------------------------------------------------
secret_key: mysecret
#------------------------------------------------------------------------------
# Templates directory
#------------------------------------------------------------------------------
templates: /usr/share/mokey/templates
#------------------------------------------------------------------------------
# Force Two-Factor authentication on login. If enabled users will be required
# to provide their security question or TOTP in addition to their password when
# logging in. Defaults to true
#------------------------------------------------------------------------------
force_2fa: true
#------------------------------------------------------------------------------
# Require security question for password resets. If disabled, users will not be
# required to enter their security question when resetting their password. They
# will only need the link sent to their email address. Disabling this option is
# not recommended. Defaults to true
#------------------------------------------------------------------------------
require_question_pwreset: true
#------------------------------------------------------------------------------
# FreeIPA server hostname (defaults to /etc/ipa/default.conf)
#------------------------------------------------------------------------------
# ipahost: "ipa.example.edu"
#------------------------------------------------------------------------------
# Keytab file for mokey (should have "Modify users and Reset passwords"
# privilege in FreeIPA)
#------------------------------------------------------------------------------
keytab: "/path/to/client.keytab"
#------------------------------------------------------------------------------
# Enable rate limiting based on remote ip (requires redis)
#------------------------------------------------------------------------------
rate_limit: false
#------------------------------------------------------------------------------
# Redis server (used for rate limiting)
#------------------------------------------------------------------------------
# redis: ":6379"
#------------------------------------------------------------------------------
# Max POST requests. This value sets a max limit on the number of POST requests
# made in a given time period. The time is defined by "rate_limit_expire".
#------------------------------------------------------------------------------
# max_requests: 15
#------------------------------------------------------------------------------
# The expire time in seconds for the max_requests counter. By default the
# number of post requests from a given IP address is limited to 15 requests per
# hour.
#------------------------------------------------------------------------------
# rate_limit_expire: 3600
#------------------------------------------------------------------------------
# SMTP server
#------------------------------------------------------------------------------
smtp_host: "localhost"
#------------------------------------------------------------------------------
# SMTP port
#------------------------------------------------------------------------------
smtp_port: 25
#------------------------------------------------------------------------------
# From address used when sending emails
#------------------------------------------------------------------------------
email_from: "helpdesk@example.edu"
#------------------------------------------------------------------------------
# Email signature used when sending emails
#------------------------------------------------------------------------------
email_sig: "Mr. System Administrator"
#------------------------------------------------------------------------------
# Base URL of mokey server. Used for links in emails
#------------------------------------------------------------------------------
email_link_base: "http://localhost:8080"
#------------------------------------------------------------------------------
# Subject prefix used when sending emails
#------------------------------------------------------------------------------
email_prefix: "mokey"
#------------------------------------------------------------------------------
# Max age (in seconds) of setup account email tokens.
#------------------------------------------------------------------------------
setup_max_age: 86400
#------------------------------------------------------------------------------
# Max age (in seconds) of reset password email tokens.
#------------------------------------------------------------------------------
reset_max_age: 3600
#------------------------------------------------------------------------------
# Max attempts for password resets and account setup.
#------------------------------------------------------------------------------
max_attempts: 10
#------------------------------------------------------------------------------
# Sign emails using PGP/Mime
#------------------------------------------------------------------------------
pgp_sign: false
#------------------------------------------------------------------------------
# PGP private key
#------------------------------------------------------------------------------
# pgp_key: "/path/to/key.gpg"
#------------------------------------------------------------------------------
# passphrase for PGP private key (if encrypted)
#------------------------------------------------------------------------------
# pgp_passphrase: "secret"
...