Trey T
225fb1306b
docker-compose.dev.yml gains a Kratos identity service (public :4433 / admin :4434) and a Mailpit SMTP catcher for local onboarding email codes, plus a postgres-init mount. deploy/local/kratos/ holds the local Kratos config + identity schema (placeholder dev cookie secret only). Supports the local backend the XCUITest suite seeds against. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
102 lines
2.2 KiB
YAML
102 lines
2.2 KiB
YAML
version: v1.3.0
|
|
|
|
serve:
|
|
public:
|
|
base_url: http://localhost:4433/
|
|
cors:
|
|
enabled: true
|
|
allowed_origins:
|
|
- http://localhost
|
|
- http://localhost:3000
|
|
- http://localhost:8000
|
|
- http://127.0.0.1
|
|
allowed_methods: [GET, POST, PUT, PATCH, DELETE, OPTIONS]
|
|
allowed_headers: [Authorization, Content-Type, X-Session-Token, Cookie]
|
|
exposed_headers: [Content-Type, Set-Cookie]
|
|
allow_credentials: true
|
|
admin:
|
|
base_url: http://kratos:4434/
|
|
|
|
selfservice:
|
|
default_browser_return_url: http://localhost:8000/
|
|
allowed_return_urls:
|
|
- http://localhost:8000
|
|
- honeydue://callback
|
|
|
|
methods:
|
|
password:
|
|
enabled: true
|
|
config:
|
|
min_password_length: 8
|
|
identifier_similarity_check_enabled: false
|
|
code:
|
|
enabled: true
|
|
oidc:
|
|
enabled: false
|
|
|
|
flows:
|
|
error:
|
|
ui_url: http://localhost:8000/auth/error
|
|
login:
|
|
ui_url: http://localhost:8000/auth/login
|
|
lifespan: 10m
|
|
registration:
|
|
ui_url: http://localhost:8000/auth/registration
|
|
lifespan: 10m
|
|
after:
|
|
password:
|
|
hooks:
|
|
- hook: session
|
|
verification:
|
|
enabled: true
|
|
ui_url: http://localhost:8000/auth/verification
|
|
use: code
|
|
after:
|
|
default_browser_return_url: http://localhost:8000/
|
|
recovery:
|
|
enabled: true
|
|
ui_url: http://localhost:8000/auth/recovery
|
|
use: code
|
|
settings:
|
|
ui_url: http://localhost:8000/auth/settings
|
|
privileged_session_max_age: 15m
|
|
logout:
|
|
after:
|
|
default_browser_return_url: http://localhost:8000/
|
|
|
|
log:
|
|
level: debug
|
|
format: text
|
|
leak_sensitive_values: true
|
|
|
|
secrets:
|
|
cookie:
|
|
- local-dev-cookie-secret-please-change-this-32chars
|
|
cipher:
|
|
- 0123456789abcdef0123456789abcdef
|
|
|
|
ciphers:
|
|
algorithm: xchacha20-poly1305
|
|
|
|
hashers:
|
|
algorithm: bcrypt
|
|
bcrypt:
|
|
cost: 8
|
|
|
|
identity:
|
|
default_schema_id: honeydue
|
|
schemas:
|
|
- id: honeydue
|
|
url: file:///etc/config/kratos/identity.schema.json
|
|
|
|
courier:
|
|
smtp:
|
|
connection_uri: smtp://mailpit:1025/?disable_starttls=true
|
|
from_address: noreply@localhost
|
|
from_name: honeyDue Local
|
|
|
|
session:
|
|
lifespan: 720h
|
|
cookie:
|
|
same_site: Lax
|