[variables]
main_domain = "${domain}"
dex_domain = "${domain}"
secret_key = "${base64:32}"
utils_secret = "${base64:32}"
client_secret = "${base64:32}"
postgres_password = "${password}"

[[config.domains]]
serviceName = "outline"
port = 3_000
host = "${main_domain}"

[[config.domains]]
serviceName = "dex"
port = 5_556
host = "${dex_domain}"

[config.env]
URL = "http://${main_domain}"
DEX_URL = "http://${dex_domain}"
DOMAIN_NAME = "${main_domain}"
POSTGRES_PASSWORD = "${postgres_password}"
SECRET_KEY = "${secret_key}"
UTILS_SECRET = "${utils_secret}"
CLIENT_SECRET = "${client_secret}"

[[config.mounts]]
filePath = "/etc/dex/config.yaml"
content = """
issuer: http://${dex_domain}

web:
  http: 0.0.0.0:5556

storage:
  type: memory

enablePasswordDB: true

frontend:
   issuer: Outline

logger:
  level: debug

staticPasswords:
  - email: "admin@example.com"
    # bcrypt hash of the string "password": $(echo password | htpasswd -BinC 10 admin | cut -d: -f2)
    hash: "$2y$10$jsRWHw54uxTUIfhjgUrB9u8HSzPk7TUuQri9sXZrKzRXcScvwYor."
    username: "admin"
    userID: "1"


oauth2:
  skipApprovalScreen: true
  alwaysShowLoginScreen: false
  passwordConnector: local

staticClients:
  - id: "outline"
    redirectURIs:
      - http://${main_domain}/auth/oidc.callback
    name: "Outline"
    secret: "${client_secret}" 
"""