# Dex OIDC provider configuration
issuer: https://auth.{{ domain }}

storage:
  type: sqlite3
  config:
    file: /var/dex/dex.db

web:
  http: 0.0.0.0:5556

connectors:
  - type: ldap
    id: lldap
    name: LLDAP
    config:
      host: lldap:3890
      insecureNoSSL: true
      bindDN: uid=admin,ou=people,{{ ldap_base_dn }}
      bindPW: "{{ lldap_admin_password }}"
      userSearch:
        baseDN: ou=people,{{ ldap_base_dn }}
        filter: "(objectClass=person)"
        username: uid
        idAttr: uid
        emailAttr: mail
        nameAttr: displayName
        preferredUsernameAttr: uid
      groupSearch:
        baseDN: ou=groups,{{ ldap_base_dn }}
        filter: "(objectClass=groupOfUniqueNames)"
        userMatchers:
          - userAttr: DN
            groupAttr: uniqueMember
        nameAttr: cn

staticClients:
  - id: outline
    name: Outline
    secret: "{{ dex_outline_client_secret }}"
    redirectURIs:
      - https://docs.{{ domain }}/auth/oidc.callback

  - id: gitea
    name: Gitea
    secret: "{{ dex_gitea_client_secret }}"
    redirectURIs:
      - https://git.{{ domain }}/user/oauth2/dex/callback

oauth2:
  skipApprovalScreen: true