server:
  port: 8080
  servlet:
    context-path: /violin-iam
  shutdown: graceful

spring:
  application:
    name: violin-iam
  profiles:
    active: ${SPRING_PROFILES_ACTIVE:local}
  jackson:
    default-property-inclusion: non_null
    date-format: yyyy-MM-dd HH:mm:ss
    time-zone: Asia/Shanghai
  lifecycle:
    timeout-per-shutdown-phase: 30s

violin:
  jwt:
    issuer: ${VIOLIN_JWT_ISSUER:violin-iam}
    audience: ${VIOLIN_JWT_AUDIENCE:violin-services}
    expiration-ms: ${VIOLIN_JWT_EXPIRATION_MS:86400000}
    key-id: ${VIOLIN_JWT_KEY_ID:violin-iam-1}
    private-key-path: ${VIOLIN_JWT_PRIVATE_KEY_PATH:}
    public-key-path: ${VIOLIN_JWT_PUBLIC_KEY_PATH:}
    jwks-url: ${VIOLIN_JWT_JWKS_URL:http://localhost:8080/violin-iam/.well-known/jwks.json}
    refresh-seconds: ${VIOLIN_JWT_REFRESH_SECONDS:300}
    clock-skew-seconds: ${VIOLIN_JWT_CLOCK_SKEW_SECONDS:30}
    profile: ${SPRING_PROFILES_ACTIVE:local}
  auth:
    exclude-paths: /error
    anonymous-message-code: AUTHORIZATION_MISSING
  iam:
    service-id: ${VIOLIN_IAM_SERVICE_ID:violin-caller}
    url: ${VIOLIN_IAM_URL:http://localhost:8080}
    context-path: ${VIOLIN_IAM_CONTEXT_PATH:/violin-iam}
    service-token-secret: ${VIOLIN_IAM_SERVICE_TOKEN_SECRET:}
    service-allowlist: ${VIOLIN_IAM_SERVICE_ALLOWLIST:}
    profile: ${SPRING_PROFILES_ACTIVE:local}
    oidc:
      client:
        issuer: ${IAM_OIDC_CLIENT_ISSUER:${AUTHENTIK_ISSUER:}}
        client-id: ${IAM_OIDC_CLIENT_CLIENT_ID:${AUTHENTIK_CLIENT_ID:}}
        client-secret: ${IAM_OIDC_CLIENT_CLIENT_SECRET:${AUTHENTIK_CLIENT_SECRET:}}
        redirect-uri: ${IAM_OIDC_CLIENT_REDIRECT_URI:${AUTHENTIK_REDIRECT_URI:}}
        scope: ${IAM_OIDC_CLIENT_SCOPE:${AUTHENTIK_SCOPE:openid profile email}}
      authentik:
        token-endpoint: ${IAM_OIDC_AUTHENTIK_TOKEN_ENDPOINT:}
        userinfo-endpoint: ${IAM_OIDC_AUTHENTIK_USERINFO_ENDPOINT:}
        authorize-endpoint: ${IAM_OIDC_AUTHENTIK_AUTHORIZE_ENDPOINT:}

management:
  endpoints:
    web:
      exposure:
        include: health,prometheus
  endpoint:
    health:
      show-details: never
      probes:
        enabled: true
      group:
        liveness:
          include: livenessState
        readiness:
          include: readinessState,db
    info:
      enabled: false
  info:
    env:
      enabled: false
      keys: []

info:
  app:
    name: "@project.name@"
    version: "@project.version@"