# SXCHNGE-owned Mongo database and JWT key. Never point these at Sendico.
http_server:
  listen_address: 0.0.0.0:8082
  read_header_timeout: 5
  shutdown_timeout: 10
database:
  driver: mongodb
  settings:
    uri: mongodb://mongo:27017/sxchnge?authSource=admin&replicaSet=rs0
    vault:
      address: http://vault:8200
      role: bff
      role_id_file: /etc/agent/role-id
      secret_id_file: /etc/agent/secret-id
    database: sxchnge
api:
  middleware:
    domain_env: SXCHNGE_DOMAIN
    api_endpoint_env: SXCHNGE_API_ENDPOINT
    api_protocol_env: SXCHNGE_API_PROTOCOL
    signature:
      algorithm: HS256
      secret_key_env: SXCHNGE_JWT_SECRET
    CORS:
      allowed_origins: ["https://localhost:5126"]
      allowed_methods: ["GET", "POST", "PATCH", "DELETE", "OPTIONS"]
      allowed_headers: ["Content-Type", "Authorization", "X-Auth-Transport", "X-CSRF-Protection"]
      allow_credentials: true
      max_age: 300
    token:
      expiration_hours:
        account: 1
        refresh: 720
      length: 32
    password:
      token_length: 32
      check:
        min_length: 12
  notifications:
    address: notifications:8083
    activation_url: https://localhost:5126/verify-email