content: [global]
  [[global.environment]]
  name = 'ENVIRONMENT'
  value = 'production'
  
  [hasura]
  version = 'v2.24.1-ce'
  adminSecret = '{{ secrets.HASURA_GRAPHQL_ADMIN_SECRET }}'
  webhookSecret = '{{ secrets.NHOST_WEBHOOK_SECRET }}'
  
  [[hasura.jwtSecrets]]
  type = 'HS256'
  key = '{{ secrets.HASURA_GRAPHQL_JWT_SECRET }}'
  
  [hasura.settings]
  corsDomain = ['*']
  devMode = true
  enableAllowList = false
  enableConsole = true
  enableRemoteSchemaPermissions = false
  enabledAPIs = ['metadata', 'graphql', 'pgdump', 'config']
  
  [hasura.logs]
  level = 'warn'
  
  [hasura.events]
  httpPoolSize = 100
  
  [functions]
  [functions.node]
  version = 22
  
  [auth]
  version = '0.20.0'
  
  [auth.redirections]
  clientUrl = 'https://my.app.com'
  
  [auth.signUp]
  enabled = true
  
  [auth.user]
  [auth.user.roles]
  default = 'user'
  allowed = ['user', 'me']
  
  [auth.user.locale]
  default = 'en'
  allowed = ['en']
  
  [auth.user.gravatar]
  enabled = true
  default = 'blank'
  rating = 'g'
  
  [auth.user.email]
  
  [auth.user.emailDomains]
  
  [auth.session]
  [auth.session.accessToken]
  expiresIn = 900
  
  [auth.session.refreshToken]
  expiresIn = 2592000
  
  [auth.method]
  [auth.method.anonymous]
  enabled = false
  
  [auth.method.emailPasswordless]
  enabled = false
  
  [auth.method.emailPassword]
  hibpEnabled = false
  emailVerificationRequired = true
  passwordMinLength = 9
  
  [auth.method.smsPasswordless]
  enabled = false
  
  [auth.method.oauth]
  [auth.method.oauth.apple]
  enabled = true
  clientId = '{{ secrets.APPLE_CLIENT_ID }}'
  keyId = '{{ secrets.APPLE_KEY_ID }}'
  teamId = '{{ secrets.APPLE_TEAM_ID }}'
  privateKey = '{{ secrets.APPLE_PRIVATE_KEY }}'
  
  [auth.method.oauth.azuread]
  tenant = 'common'
  enabled = false
  
  [auth.method.oauth.bitbucket]
  enabled = false
  
  [auth.method.oauth.discord]
  enabled = false
  
  [auth.method.oauth.facebook]
  enabled = false
  
  [auth.method.oauth.github]
  enabled = false
  
  [auth.method.oauth.gitlab]
  enabled = false
  
  [auth.method.oauth.google]
  enabled = false
  
  [auth.method.oauth.linkedin]
  enabled = false
  
  [auth.method.oauth.spotify]
  enabled = false
  
  [auth.method.oauth.strava]
  enabled = false
  
  [auth.method.oauth.twitch]
  enabled = false
  
  [auth.method.oauth.twitter]
  enabled = false
  
  [auth.method.oauth.windowslive]
  enabled = false
  
  [auth.method.oauth.workos]
  enabled = false
  
  [auth.method.webauthn]
  enabled = false
  
  [auth.method.webauthn.attestation]
  timeout = 60000
  
  [auth.totp]
  enabled = false
  
  [postgres]
  version = '14.6-20230406-2'
  
  [postgres.resources.storage]
  capacity = 1
  
  [provider]
  
  [storage]
  version = '0.3.4'
  
  [observability]
  [observability.grafana]
  adminPassword = '{{ secrets.GRAFANA_ADMIN_PASSWORD }}'
  