blob: c8d841b3670b2e79b715581fed161f12c7642fd5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
[ldap]
# LDAP URI (RFC 2255), of the form "SCHEME://[HOST[:PORT]]".
# Default: ldapi://
uri = ldaps://ldap.fripost.org
# ALGO=FINGERPRINT pinning for ldaps:// URIs, where ALGO is the digest
# algorithm name (such as "sha256") and FINGERPRINT is the Base64
# encoded Subject Public Key Information (SPKI) fingerprint, which can
# be obtained (for SHA-256) by dumping the leaf X.509 certificate to
#
# openssl x509 -noout -pubkey
# | openssl pkey -pubin -outform DER
# | openssl dgst -sha256 -binary | base64
#
ssl-fingerprint = sha256=5G5kcfM2TwIYPin0PsnqIQaMnBo8DcB+9Ie8LtVlmOs=
# Distinguished Name suffix for the account entries
suffix = ou=virtual,dc=fripost-test,dc=org
# Map a session ID (%s) to its authentication identity
session-authcID = %s/sessions
# Map a session ID (%s) to its authentication Distinguished Name. On
# the slapd side, the "authz-regex" must map "session-authcid" to
# "session-authcDN".
session-authcDN = cn=%s,ou=sessions,dc=fripost-test,dc=org
[www]
# Default domain for the login form.
default-domain = fripost.org
# Base64-encoding of the key used to sign (HMAC-SHA256) CSRF tokens.
# Must be unique and kept secret. A suitable key can be generated with
#
# head -c32 /dev/urandom | base64
#
# If left empty (the default), then a random key is generated when the
# program starts, and lost when it exits.
#hmac-key = <<FIXME>>
# Directory where to find HTML templates. (Default: "./templates/html".)
#templates-directory = /path/to/html/templates
# HTTP session cookie attributes
cookie-domain =
cookie-path = /
cookie-httponly = true
cookie-secure = false
# Cache directory (created with mode 0700 minus umask) for
# CHI::Driver::FastMmap
cache-directory = /tmp/fripost-panel.d
# Amount of time after which the session expires, unless it is used
# meanwhile. (Default: 3600.)
cache-expires = 900
|