# Standard plugin configuration (Mongo-backed identity store).
bootstrapUser:
  username: "admin"
  password: "changeme"

passwordPolicy:
  minimumLength: 12
  requireUppercase: true
  requireLowercase: true
  requireDigit: true
  requireSymbol: true

passwordHashing:
  algorithm: "Argon2id"
  memorySizeInKib: 19456
  iterations: 2
  parallelism: 1

lockout:
  enabled: true
  maxAttempts: 5
  windowMinutes: 15

tokenSigning:
  # Path to the directory containing signing keys (relative paths resolve
  # against the location of this manifest, environment variables are expanded,
  # and the final value is normalised to an absolute path during startup.
  keyDirectory: "../keys"
