appsettings.conf

####################
## AppSettings
## Defaults are commented out. Uncomment to change.
## Scroll to bottom for example of appsettings.Development.conf
####################

## Set lifetime of identity auth cookie
# Authorization__CookieLifetimeMinutes = 600
# Authorization__CookieSlidingExpiration = false

####################
## Database
####################

## Supported providers: InMemory, PostgreSQL, SqlServer
# Database__Provider = InMemory
# Database__ConnectionString = IdentityServer

## File containing any seed data.  See docs/ImportingData.md
# Database__SeedFile =

####################
## Branding
####################

# Branding__ApplicationName = Foundry ID
# Branding__Title = OpenID Connect
# Branding__LogoUrl =

## If deployed in virtual directory, set path base
# Branding__PathBase =

## Disable the Swagger OpenApi host by setting to false
# Branding__IncludeSwagger = true

## Set the url of the identity-ui app.
## Production (usually, if hosted with this app): ~/ui
## Development (usually, if default ng serve): http://localhost:4200
# Branding__UiHost =

####################
## Caching
####################

## When running multiple replicas of this app, you should also
## run redis for shared caching.
# Cache__RedisUrl =

## This app's key prefix for the redis instance (e.g: idsrv)
# Cache__Key =

## If not using redis, provide a path to a shared folder for
## data protection keys (for cookie signing, etc).
# Cache__SharedFolder =

####################
## Logging
####################
# Logging__Console__DisableColors = false
# Logging__LogLevel__Default = Information

####################
## Identity.Accounts
####################

## Seed the admin account (blank guid is okay)
# Account__AdminEmail =
# Account__AdminPassword =
# Account__AdminGuid =

## Seed an Override Code (nice for initial 2FA login)
# Account__OverrideCode =

# Account__Password__ComplexityExpression = (?=^.{8,}$)(?=.*\\d)(?=.*[A-Z])(?=.*[a-z])(?=.*[`~!@#$%^&*\\(\\)\\-_=+\\[\\]\\{\\}\\\\|;:'\",<\\.>/?\\t]).*$
# Account__Password__ComplexityText = At least 8 characters containing uppercase and lowercase letters, numbers, and symbols
# Account__Password__History = 0
# Account__Password__Age = 0
# Account__Password__ResetTokenExpirationMinutes = 60

## Multiple domains are delimited with space or pipe |
# Account__Registration__AllowedDomains =
# Account__Registration__AllowManual = false
# Account__Registration__StoreName = true
# Account__Registration__StoreEmail = true
# Account__Registration__AutoUniqueUsernames = true

## Use to allow additional usernames (email address)
# Account__Registration__AllowMultipleUsernames = false

## Use to bypass domain restrictions on *additional* emails
## for already registered users
# Account__Registration__AllowAnyDomainUsernames = false

# Account__Authentication__AllowAutoLogin = true
# Account__Authentication__AllowCredentialLogin = true
# Account__Authentication__Require2FA = true
# Account__Authentication__LockThreshold = 0
# Account__Authentication__AllowRememberLogin = true
# Account__Authentication__RememberMeLoginDays = 30

## Display string of acceptable certs
# Account__Authentication__CertificateIssuers =

## Certificate to sign tokens.  If blank, a key is generated. (But won't be persisted if in a container.)
# Account__Authentication__SigningCertificate =
# Account__Authentication__SigningCertificatePassword =

## Header values for certificate data received from reverse proxy (i.e. nginx)
# Account__Authentication__ClientCertHeader = X-ARR-ClientCert
# Account__Authentication__ClientCertSubjectHeader = ssl-client-subject-dn
# Account__Authentication__ClientCertIssuerHeader = ssl-client-issuer-dn
# Account__Authentication__ClientCertVerifyHeader = ssl-client-verify
# Account__Authentication__ClientCertSerialHeader = ssl-client-serial

## location of customized html for insertion into the referenced page
# Account__Authentication__NoticeFile = wwwroot/html/notice.html
# Account__Authentication__TroubleFile = wwwroot/html/trouble.html

## Allow any authenticated user visibilty of user profiles
# Account__Profile__ForcePublic = false

## Url for constructing avatars. If no ImageServerUrl,
## defaults to this app's url with the ImagePath value.
# Account__Profile__ImageServerUrl =
# Account__Profile__ImagePath = /javatar

# Account__Profile__ProfileImagePath = p
# Account__Profile__OrganizationImagePath = o
# Account__Profile__OrganizationUnitImagePath = u
# Account__Profile__UseDefaultAvatar = false
# Account__Profile__DefaultLogo = default.png

## This is only used if certificates get passed to this app for validation.
## Generally, it's recommended to offload cert validation to the ssl terminator
## (i.e. nginx)
# Account__CertValidation__IssuerCertificatesPath = certs
# Account__CertValidation__CheckRevocationOnline = false
# Account__CertValidation__CheckChainRevocation = false
# Account__CertValidation__VerificationTimeoutSeconds = 0

####################
## AppMail
####################
## The application sends mail, primarily for retrieval of 2fa and verification codes.
## It talks to an AppMailRelay host.

## Url to the AppMailRelay endpoint
# AppMail__Url =

## Api Key valid at AppMailRelay endpoint
# AppMail__Key =

## mailto address for sender (if different than AppMailRelay default sender)
# AppMail__From =

####################
## JAvatar
####################
# JAvatar__RoutePrefix = /javatar

####################
## Headers
####################
# Headers__LogHeaders = false
# Headers__Cors__Origins__0 =
# Headers__Cors__Methods__0 =
# Headers__Cors__Headers__0 =
# Headers__Cors__AllowCredentials = false

## If running behind a reverse proxy, be sure to pass "forward" headers
## TargetHeaders = All tells the app to expect x-forwarded-host, x-forwarded-proto and x-forwarded-for.
## Or pass a comma delimited subset of those.  Only the first two of those are required.
## https://docs.microsoft.com/en-us/aspnet/core/host-and-deploy/proxy-load-balancer?view=aspnetcore-3.1
# Headers__Forwarding__TargetHeaders = None
# Headers__Forwarding__KnownNetworks = 10.0.0.0/8 172.16.0.0/12 192.168.0.0/24 ::ffff:a00:0/104 ::ffff:ac10:0/108 ::ffff:c0a8:0/120
# Headers__Forwarding__KnownProxies =
# Headers__Forwarding__ForwardLimit = 1
# Headers__Forwarding__ForwardedForHeaderName =
# Headers__Security__ContentSecurity = default-src 'self'; frame-ancestors 'self'
# Headers__Security__XContentType = nosniff
# Headers__Security__XFrame = SAMEORIGIN

###################
## Example for appsettings.Development.conf
###################

# Branding__UiHost = http://localhost:4200

# Database__Provider = PostgreSQL
# Database__ConnectionString = Server=localhost;Database=idtest_db

# Account__Profile__ImageServerUrl = http://localhost:5000/javatar

# Headers__Cors__Origins__0 = http://localhost:4200
# Headers__Cors__Methods__0 = *
# Headers__Cors__Headers__0 = *
# Headers__Cors__AllowCredentials = true
# Headers__Security__ContentSecurity = default-src 'self'; frame-ancestors 'self'

# Logging__LogLevel__Microsoft.Hosting.Lifetime = Information
# Logging__LogLevel__Microsoft = Warning