bastion/config.example.yml at master · notion/bastion · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
cookiesecret: s0secure
dbinfo:
  host: localhost
  name: example
  pass: example
  port: 3306
  sqlite: true
  user: example
debug:
  db:
    enabled: true
  info:
    enabled: false
    gostacktrace: true
  ssh:
    enabled: true
  web:
    enabled: true
gce:
  bucket:
    enabled: true
    name: example-logs
  iap:
    aud: /projects/0000000000000/global/backendServices/000000000000000000
    enabled: false
    hd:
    - example.com
    issuer: https://cloud.google.com/iap
  lb:
    enabled: false
    proxyproto:
      enabled: false
multihost:
  enabled: false
  hostname: ""
  ip: ""
oauthcredentials:
  clientid: 0000000000000-foobar.apps.googleusercontent.com
  clientsecret: foobar
  endpoint:
    authurl: https://accounts.google.com/o/oauth2/auth
    tokenurl: https://accounts.google.com/o/oauth2/token
  redirecturl: https://auth.example.com
  scopes:
  - https://www.googleapis.com/auth/userinfo.email
otp:
  enabled: false
  issuer: example.com
pkpassphrase: ""
sessions:
  directory: sessions
  enabled: true
sshcert:
  graceperiod: 4h