mirror of https://github.com/dexidp/dex.git
Browse Source
The dev config example is used for documentation purposes, but it's also full of development specific configuration. This change adds a new config example that should serve as a default, empty config as well as documentation. The dev example should only contain the relevant configuration. Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>pull/1957/head
2 changed files with 134 additions and 0 deletions
@ -0,0 +1,131 @@ |
|||||||
|
# The base path of Dex and the external name of the OpenID Connect service. |
||||||
|
# This is the canonical URL that all clients MUST use to refer to Dex. If a |
||||||
|
# path is provided, Dex's HTTP service will listen at a non-root URL. |
||||||
|
issuer: http://127.0.0.1:5556/dex |
||||||
|
|
||||||
|
# The storage configuration determines where Dex stores its state. |
||||||
|
# Supported options include: |
||||||
|
# - SQL flavors |
||||||
|
# - key-value stores (eg. etcd) |
||||||
|
# - Kubernetes Custom Resources |
||||||
|
# |
||||||
|
# See the documentation (https://dexidp.io/docs/storage/) for further information. |
||||||
|
storage: |
||||||
|
type: memory |
||||||
|
|
||||||
|
# type: sqlite3 |
||||||
|
# config: |
||||||
|
# file: /var/dex/dex.db |
||||||
|
|
||||||
|
# type: mysql |
||||||
|
# config: |
||||||
|
# host: 127.0.0.1 |
||||||
|
# port: 3306 |
||||||
|
# database: dex |
||||||
|
# user: mysql |
||||||
|
# password: mysql |
||||||
|
# ssl: |
||||||
|
# mode: "false" |
||||||
|
|
||||||
|
# type: postgres |
||||||
|
# config: |
||||||
|
# host: 127.0.0.1 |
||||||
|
# port: 5432 |
||||||
|
# database: dex |
||||||
|
# user: postgres |
||||||
|
# password: postgres |
||||||
|
# ssl: |
||||||
|
# mode: disable |
||||||
|
|
||||||
|
# type: etcd |
||||||
|
# config: |
||||||
|
# endpoints: |
||||||
|
# - http://127.0.0.1:2379 |
||||||
|
# namespace: dex/ |
||||||
|
|
||||||
|
# type: kubernetes |
||||||
|
# config: |
||||||
|
# kubeConfigFile: $HOME/.kube/config |
||||||
|
|
||||||
|
# HTTP service configuration |
||||||
|
web: |
||||||
|
http: 127.0.0.1:5556 |
||||||
|
|
||||||
|
# Uncomment to enable HTTPS endpoint. |
||||||
|
# https: 127.0.0.1:5554 |
||||||
|
# tlsCert: /etc/dex/tls.crt |
||||||
|
# tlsKey: /etc/dex/tls.key |
||||||
|
|
||||||
|
# Dex UI configuration |
||||||
|
# frontend: |
||||||
|
# issuer: dex |
||||||
|
# logoURL: theme/logo.png |
||||||
|
# dir: web/ |
||||||
|
# theme: light |
||||||
|
|
||||||
|
# Telemetry configuration |
||||||
|
# telemetry: |
||||||
|
# http: 127.0.0.1:5558 |
||||||
|
|
||||||
|
# logger: |
||||||
|
# level: "debug" |
||||||
|
# format: "text" # can also be "json" |
||||||
|
|
||||||
|
# gRPC API configuration |
||||||
|
# Uncomment this block to enable the gRPC API. |
||||||
|
# See the documentation (https://dexidp.io/docs/api/) for further information. |
||||||
|
# grpc: |
||||||
|
# addr: 127.0.0.1:5557 |
||||||
|
# tlsCert: examples/grpc-client/server.crt |
||||||
|
# tlsKey: examples/grpc-client/server.key |
||||||
|
# tlsClientCA: examples/grpc-client/ca.crt |
||||||
|
|
||||||
|
# Expiration configuration for tokens, signing keys, etc. |
||||||
|
# expiry: |
||||||
|
# deviceRequests: "5m" |
||||||
|
# signingKeys: "6h" |
||||||
|
# idTokens: "24h" |
||||||
|
|
||||||
|
# OAuth2 configuration |
||||||
|
# oauth2: |
||||||
|
# # use ["code", "token", "id_token"] to enable implicit flow for web-only clients |
||||||
|
# responseTypes: [ "code" ] # also allowed are "token" and "id_token" |
||||||
|
# |
||||||
|
# # By default, Dex will ask for approval to share data with application |
||||||
|
# # (approval for sharing data from connected IdP to Dex is separate process on IdP) |
||||||
|
# skipApprovalScreen: false |
||||||
|
# |
||||||
|
# # If only one authentication method is enabled, the default behavior is to |
||||||
|
# # go directly to it. For connected IdPs, this redirects the browser away |
||||||
|
# # from application to upstream provider such as the Google login page |
||||||
|
# alwaysShowLoginScreen: false |
||||||
|
# |
||||||
|
# # Uncomment to use a specific connector for password grants |
||||||
|
# passwordConnector: local |
||||||
|
|
||||||
|
# Static clients registered in Dex by default. |
||||||
|
# |
||||||
|
# Alternatively, clients may be added through the gRPC API. |
||||||
|
# staticClients: |
||||||
|
# - id: example-app |
||||||
|
# redirectURIs: |
||||||
|
# - 'http://127.0.0.1:5555/callback' |
||||||
|
# name: 'Example App' |
||||||
|
# secret: ZXhhbXBsZS1hcHAtc2VjcmV0 |
||||||
|
|
||||||
|
# Connectors are used to authenticate users agains upstream identity providers. |
||||||
|
# |
||||||
|
# See the documentation (https://dexidp.io/docs/connectors/) for further information. |
||||||
|
# connectors: [] |
||||||
|
|
||||||
|
# Enable the password database. |
||||||
|
# |
||||||
|
# It's a "virtual" connector (identity provider) that stores |
||||||
|
# login credentials in Dex's store. |
||||||
|
enablePasswordDB: true |
||||||
|
|
||||||
|
# If this option isn't chosen users may be added through the gRPC API. |
||||||
|
# A static list of passwords for the password connector. |
||||||
|
# |
||||||
|
# Alternatively, passwords my be added/updated through the gRPC API. |
||||||
|
# staticPasswords: [] |
||||||
Loading…
Reference in new issue