kratos.yml

version: v0.13.0

dsn: memory

serve:
  public:
    base_url: http://127.0.0.1:4433/
    cors:
      enabled: true
      allowed_origins:
        - http://localhost
        - http://127.0.0.1
        - http://localhost:4200
        - http://127.0.0.1:4200
      allowed_methods:
        - POST
        - GET
        - PUT
        - PATCH
        - DELETE
      allowed_headers:
        - Authorization
        - Cookie
        - Content-Type
      exposed_headers:
        - Content-Type
        - Set-Cookie
  admin:
    base_url: http://kratos:4434/

selfservice:
  default_browser_return_url: http://127.0.0.1:4200/
  allowed_return_urls:
    - http://127.0.0.1:4200

  methods:
    password:
      enabled: true
    totp:
      config:
        issuer: Kratos
      enabled: true
    lookup_secret:
      enabled: true
    link:
      enabled: true
    code:
      enabled: true
    oidc:
      enabled: true
      config:
        providers:
          - id: auth0 # this is an arbitrary identifier
            provider: generic
            client_id: fQSmHjFpMlf95LhsRt4nvCB4BrtHgqCD
            client_secret: bOFaTgE6tyDBUf2arNf2thueLgZJk7JflUzEiwGU0F9ZBMPi1HVHL_kJquHvxsEq
            mapper_url: file:///etc/config/kratos/oidc.auth0.jsonnet
            scope:
              - email
              - profile
              - openid
            issuer_url: https://strada-dev.eu.auth0.com/
            auth_url: https://strada-dev.eu.auth0.com/authorize
            token_url: https://strada-dev.eu.auth0.com/oauth/token
  flows:
    error:
      ui_url: http://127.0.0.1:4200/authentication/error

    settings:
      ui_url: http://127.0.0.1:4200/authentication/settings
      privileged_session_max_age: 15m
      required_aal: highest_available

    recovery:
      enabled: true
      ui_url: http://127.0.0.1:4200/authentication/recovery
      use: code

    verification:
      enabled: true
      ui_url: http://127.0.0.1:4200/authentication/verification
      use: code
      after:
        default_browser_return_url: http://127.0.0.1:4200/

    logout:
      after:
        default_browser_return_url: http://127.0.0.1:4200/authentication/login

    login:
      ui_url: http://127.0.0.1:4200/authentication/login
      lifespan: 10m

    registration:
      lifespan: 10m
      ui_url: http://127.0.0.1:4200/authentication/registration
      after:
        password:
          hooks:
            - hook: session
            - hook: show_verification_ui

log:
  level: debug
  format: text
  leak_sensitive_values: true

secrets:
  cookie:
    - PLEASE-CHANGE-ME-I-AM-VERY-INSECURE
  cipher:
    - 32-LONG-SECRET-NOT-SECURE-AT-ALL

ciphers:
  algorithm: xchacha20-poly1305

hashers:
  algorithm: bcrypt
  bcrypt:
    cost: 8

identity:
  default_schema_id: default
  schemas:
    - id: default
      url: file:///etc/config/kratos/identity.schema.json

courier:
  smtp:
    connection_uri: smtps://test:test@mailslurper:1025/?skip_ssl_verify=true