#
# Default configuration options for LEAP Certificate Authority Daemon
#

#
# Certificate Authority
#
ca_key_path: "/etc/x509/keys/leap_ca_daemon.key"
ca_key_password: nil
ca_cert_path: "/etc/x509/certs/leap_ca_daemon.crt"

#
# Certificate pool
#
max_pool_size: 100
client_cert_lifespan: 2
client_cert_bit_size: 2024
client_cert_hash: "SHA256"

#
# Database
#
db_name: "client_certificates"
couch_connection:
  protocol: "https"
  host: <%= couchdb_host %>
  port: 6984 
  username: <%= couchdb_user %>
  password: <%= couchdb_password %>
  prefix: ""
  suffix: ""