{

	"ConnectionStrings": {

		// Database connection string (required)
		"DefaultConnection": "Data Source=SERVER;Initial Catalog=DATABASE;User ID=USERNAME;Password=PASSWORD"

	},

	"Bindings": {

		// Uncomment the line below if HTTPS is disabled for the site
		//"HttpsMode": "Optional",

		// Set the HTTPS port below if other than 443
		//"SslPort": 8443,
	},

	// Logging configuration
	"Serilog": {

		"MinimumLevel": {

			/*
					Uncomment the line below to change the default verbosity level (Warning).

					Valid verbosity levels:
					- Verbose
					- Debug
					- Information
					- Warning (recommended)
					- Error
					- Fatal
			 */
			//"Default": "Information",

			// Uncomment the line below to get more verbosity only from Lacuna-specific code
			//"Lacuna": "Information",
		},
		"WriteTo": [
			{
				"Name": "File",
				"Args": {
					// Path of the log file -- if you change this setting, remember to grant write permissions to the application user to the directory
					"path": "C:\\Logs\\LacunaSigner.log",
					"outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] [{SourceContext}] {Message:lj}{NewLine}{Exception}"
				}
			}
		]
	},

	"General": {

		// Publicly accessible URL of the website (e.g.: https://ca.patorum.com/). This address is used to compose emails with links back to the website
		"SiteUrl": "",

		// Name of the instance, will be shown in the title tag of all pages
		"SiteName": "",

		// 256-bit key used to encrypt temporary secrets issued by the site and keys stored on the database. You must fill this value to store keys on the database.
		// Generate it by running this on a Powershell:
		// $k = New-Object byte[] 32; [System.Security.Cryptography.RandomNumberGenerator]::Create().GetBytes($k); [Convert]::ToBase64String($k);
		"EncryptionKey": "",

		// By default, the application tries to perform model changes to the database after an update (when needed). Set to false if the application does not have owner permissions over the database.
		//"AutoUpdateDatabase": false,

		// By default, the application has background jobs processing for sending emails and performing other tasks. Set to false if you need to stop this processing
		//"ProcessBackgroundJobs": false,

		// Uncomment and fill the line below to change the support email address (used on the footer of outgoing emails)
		//"SupportEmailAddress": "support@patorum.com",

		// Application color scheme. Available options are: dgy, clg, alg, osg, gdc, eva, idg
		//"Theme": "",

		// If the system is open, i.e. allows users to register and use the system (without the administrator's permission) set it to true. If set to false, users must be previously added to an organization by the administrator in order to use the application
		// It is recomended to install the application with this option set to true and after the first user has registered (and automatically set as administrator) change it to false if desired.
		"PersonalAccountsEnabled": true,

		// Enables document type selection when creating a new document
		"EnableDocumentTypes": false,

		// Enables electronic signature
		"EnableElectronicSignature": false
	},

	//HSM Configuration
	//"Hsm": {
	//Enable HSM integration
	//	"Enabled": false,
	//URL of the promotional image for the HSM
	//	"ImageUrl": "https://<img_url>",
	//Name of the HSM
	//	"Name": "HSM Dinamo",
	//The URL for the RSS service that communicates with the HSM
	//	"EndpointUrl": "https://<rss_url>"
	//},

	"ApplicationInsights": {

		// Uncomment and fill the line below to get extra instrumentation with Azure Application Insights
		// "ConnectionString": ""
	},

	// Blob storage configuration
	"BlobStorage": {

		// Store files on local file system
		"Type": "FileSystem",

		// Path of the folder on which to store files. Make sure the application has write access to the folder.
		"Path": ""
	},

	"PkiSuite": {

		// Your license for the PKI SDK, in Base64 format (required)
		"SdkLicense": "",

		// Your license for the Web PKI component in binary (Base64) format. Only required if users will issue certificates on their computers (web issuing procedure)
		"WebLicense": ""

		// If you have a custom setup brand on Web PKI, set it here
		//"WebBrand": "mybrand",
	},

	"Email": {

		// To enable email sending, set the value below to `true` and set the values below (otherwise, leave as `false` and ignore the remainder of this section)
		"Enabled": false,

		// Hostname of the SMTP server
		"ServerHost": "",

		// Credentials to be used on the SMTP protocol
		"Username": "",
		"Password": "",

		// Email address to be used as sender
		"SenderAddress": ""

		// Optionally, set the sender name
		//"SenderName": "Patorum Certification Authority",

		// By default, the SMTP conversation is performed over SSL. To disable SSL, uncomment the line below
		//"EnableSsl": false,

		// By default, the SMTP conversation is performed over port 587. Uncomment and fill the line below to use a different port
		//"ServerPort": 465,
	},

	// Open ID Connect configuration
	"Oidc": {

		// OIDC authority, the Subscription URL Endpoint, e.g.: https://lac.grantid.com
		"Authority": "",

		// GrantID API endpoint, e.g.: https://api.grantid.com
		"ApiEndpoint": "",

		// Required GrantID API scope. Make sure that the scope has all basic informations configured
		"ApiName": "",

		// GrantID application id for a Client Credentials type of application that has permission to manage subscription users
		"AppId": "",

		// GrantID application secret for the GrantID application configured in the setting AppId
		"AppSecret": "",

		//  GrantID application id for an Implicit flow type of application
		"ClientAppId": "",

		// The claim configured as CPF in GrantID
		"CpfClaim": "preferred_username",

		// Custom scopes that will be requested during the login
		"CustomScopes": "preferred_username"
	},

	// Trust arbitrator settings -- configure which certificates are allowed when performing digital signatures. ICP-Brasil is set as default
	//"TrustArbitrator": {
	// -------- AppSetting --------
	// Set the configuration file content as a setting. Recommended if only Standard PKIs are used.
	//"Type": "AppSetting",
	//"Content": "{ \"Version\": \"2019-05-09\", \"StandardPkis\": [ \"Brazil\" ] }"

	// -------- BlobStorage --------
	// Uses the current BlobStorage settings to retrieve the json configuration file with the indicated name in the "trustarbitrators" folder.
	//"Type": "BlobStorage",
	//"StorageId": "brazil-lac.json"
	//},

	// SMS sending -- required if electronic signature is enabled
	"SMS": {

		// To enable SMS sending, set the value below to `true` and uncomment one of the groups of settings below, depending on the provider you have subscribed to (otherwise, leave as `false` and ignore the remainder of this section)
		"Enabled": false

		// -------- Twilio --------
		// Type: Twilio
		// MessageFrom: the "from number", e.g.: +12125550000
		// AccountSid: the "account SID", e.g.: AC00000000000000000000000000000000
		// AuthToken: the "auth token", e.g.: ffffffffffffffffffffffffffffffff

		//"Type": "Twilio",
		//"MessageFrom": "",
		//"AccountSid": "",
		//"AuthToken": "",

		// -------- TotalVoice --------
		// Type: TotalVoice
		// AccessToken: the "access token", e.g.: 0123456789abcdef0123456789abcdef

		//"Type": "TotalVoice",
		//"AccessToken": "",
	}
}
