authentik/authentik/lib/default.yml

# update website/docs/installation/configuration.md
# This is the default configuration file
postgresql:
  host: localhost
  name: authentik
  user: authentik
  port: 5432
  password: 'env://POSTGRES_PASSWORD'
  use_pgbouncer: false

listen:
  listen_http: 0.0.0.0:9000
  listen_https: 0.0.0.0:9443
  listen_metrics: 0.0.0.0:9300

redis:
  host: localhost
  port: 6379
  password: ''
  tls: false
  tls_reqs: "none"
  db: 0
  cache_timeout: 300
  cache_timeout_flows: 300
  cache_timeout_policies: 300
  cache_timeout_reputation: 300

debug: false

log_level: info

error_reporting:
  enabled: false
  sentry_dsn: https://151ba72610234c4c97c5bcff4e1cffd8@o4504163616882688.ingest.sentry.io/4504163677503489
  environment: customer
  send_pii: false
  sample_rate: 0.1

# Global email settings
email:
  host: localhost
  port: 25
  username: ""
  password: ""
  use_tls: false
  use_ssl: false
  timeout: 10
  from: authentik@localhost
  template_dir: /templates

throttle:
  providers:
    oauth2:
      device: 20/hour
  default: 1000/second

outposts:
  # Placeholders:
  # %(type)s: Outpost type; proxy, ldap, etc
  # %(version)s: Current version; 2021.4.1
  # %(build_hash)s: Build hash if you're running a beta version
  container_image_base: ghcr.io/goauthentik/%(type)s:%(version)s
  discover: true
  disable_embedded_outpost: false

ldap:
  tls:
    ciphers: null

cookie_domain: null
disable_update_check: false
disable_startup_analytics: false
avatars: env://AUTHENTIK_AUTHENTIK__AVATARS?gravatar
geoip: "/geoip/GeoLite2-City.mmdb"

footer_links: []

default_user_change_name: true
default_user_change_email: true
default_user_change_username: true

gdpr_compliance: true
cert_discovery_dir: /certs
default_token_length: 60
impersonation: true

blueprints_dir: /blueprints

web:
  # No default here as it's set dynamically
  # workers: 2
  threads: 4