From 0fdf83986a1859fa1026bd30937dd39eb4e9731f Mon Sep 17 00:00:00 2001
From: Christoph Kappestein <christoph.kappestein@gmail.com>
Date: Tue, 10 Oct 2017 13:35:07 +0200
Subject: [PATCH] add config to deploy

---
 .fusio.yml            |  5 +++++
 resources/config.yaml | 29 +++++++++++++++++++++++++++++
 2 files changed, 34 insertions(+)
 create mode 100644 resources/config.yaml

diff --git a/.fusio.yml b/.fusio.yml
index aefa57cf..44fa4280 100644
--- a/.fusio.yml
+++ b/.fusio.yml
@@ -25,3 +25,8 @@ connection: !include resources/connections.yaml
 # Contains migrations for specific connections.
 # Documentation: http://fusio.readthedocs.io/en/latest/deploy.html#migration
 migration: !include resources/migrations.yaml
+
+# ------------------------------------------------------------------------------
+# Contains general system settings
+# Documentation: http://fusio.readthedocs.io/en/latest/deploy.html#config
+config: !include resources/config.yaml
diff --git a/resources/config.yaml b/resources/config.yaml
new file mode 100644
index 00000000..efb7788e
--- /dev/null
+++ b/resources/config.yaml
@@ -0,0 +1,29 @@
+# If true the status of a new app is PENDING so that an administrator has to 
+# manually activate the app
+app_approval: 0
+# The max amount of apps a consumer can register
+app_consumer: 16
+# If a user registers through the consumer API the following scopes are assigned
+scopes_default: "authorization,consumer"
+# Subject of the activation mail
+mail_register_subject: "Fusio registration"
+# Body of the activation mail
+mail_register_body: >
+  Hello {name},
+
+  you have successful registered at Fusio.
+  To activate you account please visit the following url:
+  http://127.0.0.1/projects/fusio/public/consumer/#activate?token={token}
+# Email address which is used in the "From" header
+mail_sender: ""
+# Facebook app secret
+provider_facebook_secret: ""
+# Google app secret
+provider_google_secret: ""
+# GitHub app secret
+provider_github_secret: ""
+# ReCaptcha secret
+recaptcha_secret: ""
+# If set each API response contains a Access-Control-Allow-Origin header with 
+# the provided value
+cors_allow_origin: "*"