# SXCHNGE-owned Mongo database and JWT key. Never point these at Sendico.
http_server:
  listen_address: 127.0.0.1:8082
  read_header_timeout: 5
  shutdown_timeout: 10
database:
  driver: mongodb
  settings:
    uri_env: SXCHNGE_MONGO_URI
    database: sxchnge
api:
  middleware:
    domain_env: SXCHNGE_DOMAIN
    api_endpoint_env: SXCHNGE_API_ENDPOINT
    api_protocol_env: SXCHNGE_API_PROTOCOL
    signature:
      algorithm: HS256
      secret_key_env: SXCHNGE_JWT_SECRET
    CORS:
      allowed_origins: ["http://localhost:5126"]
      allowed_methods: ["GET", "POST", "PATCH", "DELETE", "OPTIONS"]
      allowed_headers: ["Content-Type", "Authorization", "X-Auth-Transport", "X-CSRF-Protection"]
      allow_credentials: true
      max_age: 300
    token:
      expiration_hours:
        account: 1
        refresh: 720
      length: 32
    password:
      token_length: 32
      check:
        min_length: 12