# oauth2-proxy configuration

# Listen address
http_address = "127.0.0.1:4180"

# Email Domains
email_domains = ["*"]

# Authenticated Emails File
# Using /tmp for better compatibility
authenticated_emails_file = "/tmp/authenticated_emails.txt"

# Cookie Settings
cookie_secret = "OAUTH2_PROXY_COOKIE_SECRET_RANDOM_123"
cookie_secure = true
cookie_httponly = true
cookie_refresh = "1h"
cookie_expire = "168h"

# Provider Settings
# provider = "github" # Moved to command line arguments in start.sh

# Providers (Multi-provider support)
# providers = [ ... ] # Alpha config removed due to instability


# Upstreams
upstreams = [
    "http://127.0.0.1:7681"
]

# Logging
request_logging = true
auth_logging = true
standard_logging = true
show_debug_on_error = true