---
# this is for a localhost deployment, database passwords for public servers
# must be different random values encrypted via ansible-vault
hydra_db_password: hydra
hydra_db_host: localhost
hydra_db_port: 5432
hydra_tls:
  cert: "{{ hydra_home }}/etc/hydra.cacert.localhost+1.pem"
  key: "{{ hydra_home }}/etc/hydra.cacert.localhost+1-key.pem"
# this is for a localhost deployment, secrets for public servers must be
# different random values encrypted via ansible-vault
hydra_system_secret: "AczA+NZ25Ye9eAreglv5bo9XcND6uwBQHVUYCvPfwXo="

idp_tls:
  cert: "{{ cacert_home }}/etc/login.cacert.localhost.pem"
  key: "{{ cacert_home }}/etc/login.cacert.localhost-key.pem"

register_tls:
  cert: "{{ cacert_home }}/etc/register.cacert.localhost.pem"
  key: "{{ cacert_home }}/etc/register.cacert.localhost-key.pem"

demoapp_tls:
  cert: "{{ cacert_home }}/etc/app.cacert.localhost.pem"
  key: "{{ cacert_home }}/etc/app.cacert.localhost-key.pem"

oidc_urls:
  hydra_admin:
    host: hydra.cacert.localhost
    port: 4445
  hydra_public:
    host: auth.cacert.localhost
    port: 4444
  idp:
    host: login.cacert.localhost
    port: 3000
  demoapp:
    host: app.cacert.localhost
    port: 4000
  register:
    host: register.cacert.localhost
    port: 5000

use_mkcert: true