'use strict';

// Example secrets configuration file (file-based config, for non-Docker use).
// Copy to nodejs/conf/secrets.js and fill in your values.
//
// Docker users: you usually don't need this file — pass `app_*` env vars instead
// (see DEPLOYMENT.md). This file is for bare-metal / mounted-config deployments.
// Values here override conf/base.js and win over <environment>.js. `app_*` env
// vars (if any are set) override this file too.

module.exports = {
    port: 3001,
    name: 'SSO Manager',                 // shown in UI and outbound email
    ldap: {
        url: 'ldap://localhost',         // or ldaps://host:636 for TLS
        bindDN: 'cn=admin,dc=example,dc=com',
        bindPassword: 'your-ldap-password',
        userBase: 'ou=people,dc=example,dc=com',
        groupBase: 'ou=groups,dc=example,dc=com',
    },
    smtp: {
        host: 'smtp.example.com',
        port: 587,
        secure: false,                   // true for 465, false for other ports
        user: 'noreply@example.com',
        pass: 'your-smtp-password',
        from: 'SSO Manager <noreply@example.com>',
    },
    voipms: {
        username: '',                    // VoIP.ms username (optional)
        password: '',                    // VoIP.ms password (optional)
        did: '',                          // VoIP.ms DID (optional)
    },
    oauth: {
        issuer: '',                       // falls back to the request host at runtime
        jwtSecret: 'generate-a-secure-random-string-here',
        token_lifetime: {
            access_token: 3600,          // 1 hour in seconds
            refresh_token: 2592000       // 30 days in seconds
        }
    },
};