# Minimal Authelia config. Replace every "change-me" and the example domains.
theme: dark

identity_validation:
  reset_password:
    jwt_secret: change-me-jwt-secret

server:
  address: tcp://0.0.0.0:9091

authentication_backend:
  file:
    path: /config/users_database.yml

access_control:
  default_policy: deny
  rules:
    - domain: "*.example.com"
      policy: two_factor

session:
  secret: change-me-session-secret
  cookies:
    - domain: example.com
      authelia_url: https://auth.example.com

storage:
  encryption_key: change-me-encryption-key-at-least-20-chars
  local:
    path: /config/db/db.sqlite3

notifier:
  filesystem:
    filename: /config/db/notification.txt