server:
  port: ${AUTH_PORT:9100}
spring:
  profiles:
    active: ${SPRING_PROFILES_ACTIVE:dev}
  application:
    name: auth-service
  config:
    import:
      - optional:nacos:baiyue-common.yml?group=BAIYUE&refreshEnabled=true
      - optional:nacos:${spring.application.name}.yml?group=BAIYUE&refreshEnabled=true
  data:
    redis:
      host: ${REDIS_HOST:127.0.0.1}
      port: ${REDIS_PORT:6379}
      password: ${REDIS_PASSWORD:}
      database: ${REDIS_DATABASE:0}
      timeout: ${REDIS_TIMEOUT:3s}
  cloud:
    nacos:
      server-addr: ${NACOS_SERVER_ADDR:127.0.0.1:8848}
      username: ${NACOS_USERNAME:nacos}
      password: ${NACOS_PASSWORD:nacos}
      discovery:
        enabled: ${NACOS_DISCOVERY_ENABLED:true}
        register-enabled: ${NACOS_REGISTER_ENABLED:true}
        group: ${NACOS_GROUP:BAIYUE}
        namespace: ${NACOS_NAMESPACE:public}
      config:
        namespace: ${NACOS_NAMESPACE:public}
        encode: UTF-8
baiyue.security:
  jwt-secret: ${JWT_SECRET:change-me-to-at-least-32-bytes-long-before-start}
  internal-service-token: ${INTERNAL_SERVICE_TOKEN:change-me-to-an-internal-token-at-least-32-bytes-long}
  token-key-prefix: ${REDIS_TOKEN_KEY_PREFIX:baiyue:auth}
  issuer: ${JWT_ISSUER:auth-service}
  audience: ${JWT_AUDIENCE:lastleg-api}
  access-token-ttl: ${ACCESS_TOKEN_TTL:24m}
  refresh-token-ttl: ${REFRESH_TOKEN_TTL:7d}
  max-login-failures: ${MAX_LOGIN_FAILURES:5}
  lock-duration: ${LOGIN_LOCK_DURATION:15m}
  overseas-jwt:
    enabled: ${OVERSEAS_JWT_ENABLED:false}
    issuer: ${OVERSEAS_JWT_ISSUER:auth-service}
    audience: ${OVERSEAS_JWT_AUDIENCE:lastleg-api}
    rsa-jwk-set: ${OVERSEAS_JWT_RSA_JWK_SET:}
    current-kid: ${OVERSEAS_JWT_CURRENT_KID:}
    access-token-ttl: ${OVERSEAS_ACCESS_TOKEN_TTL:15m}

baiyue.clients:
  iam:
    url: ${IAM_SERVICE_URL:}

management.endpoints.web.exposure.include: health,info,prometheus