logger:
  level: 1
  format: human
server:
  http:
    host: 0.0.0.0
    port: 3000
  database:
    driver: sqlite
    dsn: sqlite:///var/lib/emissary/data.sqlite?_pragma=foreign_keys(1)&_pragma=busy_timeout=60000
  cors:
    allowedOrigins: []
    allowCredentials: true
    allowMethods:
      - POST
      - GET
      - PUT
      - DELETE
    allowedHeaders:
      - Origin
      - Accept
      - Content-Type
      - Authorization
      - Sentry-Trace
  debug: false
  auth:
    local:
      privateKeyPath: /var/lib/emissary/server-key.json
    roleExtractionRules:
      - "jwt.role != nil ? str(jwt.role) : ''"
    remote: ~
      # jwksUrl: https://my-server/.well-known/jwks.json