#
# DATABASE CONNECTION
#
# See database preparation instructions at https://docs.lacunasoftware.com/articles/rest-pki/core/on-premises/prepare-database

# SQL Server connection string
ConnectionStrings__DefaultConnection=Data Source=my_db_server;Initial Catalog=my_db_name;User ID=my_username;Password=my_password

# PostgreSQL connection string
#ConnectionStrings__DefaultConnection=Host=my_db_server;Database=my_db_name;Username=my_username;Password=my_password
#ConnectionStrings__DefaultConnection_ProviderName=Postgres


#
# BLOB STORAGE
#

# The default configuration is to use a Docker volume mounted on `/var/app` as blob storage (comment to use a different configuration)
BlobStorage__Type=FileSystem
BlobStorage__Path=/var/app

# Uncomment and fill to use an Azure Blob Storage container as blob storage
#BlobStorage__Type=Azure
#BlobStorage__ConnectionString=DefaultEndpointsProtocol=https;AccountName=myaccountname;AccountKey=myaccountkey;EndpointSuffix=core.windows.net
#BlobStorage__ContainerName=myapp-container

# Uncomment and fill to use a AWS S3 bucket as blob storage
#BlobStorage__Type=AwsS3
#BlobStorage__BucketName=myappbucket
#BlobStorage__Region=us-east-1
#BlobStorage__AccessKey=MYACCESSKEYID
#BlobStorage__SecretKey=MYSECRETACCESSKEY


#
# GENERAL CONFIGURATION
#

# 256-bit key used to encrypt sensitive data stored on the database. You must fill this value to store keys on the database.
# See generation instructions at https://docs.lacunasoftware.com/en-us/articles/rest-pki/core/on-premises/tool/gen-enc-key
General__EncryptionKey=

# Hashed root password, see generation instructions at https://docs.lacunasoftware.com/en-us/articles/rest-pki/core/on-premises/tool/hash-root-pass
General__RootPasswordHash=

# Publicly accessible URL of the website
General__SiteUrl=

# Name of your instance
General__SiteName=My Signature Service


#
# LICENSES
#

# Your license for the PKI SDK, in Base64 format (required)
PkiSuite__SdkLicense=

# Your license for the Web PKI component in binary (Base64) format (required)
PkiSuite__WebLicense=


#
# BINDINGS
#

# Set to `False` if Rest PKI Core will not be behind a reverse proxy (in Docker it almost always is)
Bindings__UseReverseProxy=True

# If HTTPS is configured, you may change the setting below to
# - `RedirectPages` to redirect users landing on the HTTP site to HTTPS or
# - `Strict` to not only redirect users but also deny incoming API requests through HTTP
Bindings__HttpsMode=Optional

# If the HTTPS port is not 443, configure it below
#Bindings__SslPort=8443


#
# PRESETS
#

# Leave this as `False` unless you have configured email sending -- https://docs.lacunasoftware.com/en-us/articles/rest-pki/core/on-premises/configure-email
Email__Enabled=False

# Leave this as `False` unless you have configured OIDC -- https://docs.lacunasoftware.com/en-us/articles/rest-pki/core/on-premises/configure-oidc
Oidc__Enabled=False