<%- require 'json' -%>

#
# Default configuration options for Tapicero
#

# couch connection configuration
connection:
  protocol: "http"
  host: "localhost"
  port: <%= @couchdb_port %>
  username: <%= @couchdb_admin_user %>
  password: <%= @couchdb_admin_password %>
  prefix : ""
  suffix : ""
  netrc: "/etc/couchdb/couchdb.netrc"

# file to store the last processed user record in so we can resume after
# a restart:
seq_dir: "/var/lib/leap/tapicero/"

# Configure log_file like this if you want to log to a file instead of syslog:
# log_file: "/var/leap/log/tapicero.log"
log_level: info

# tapicero specific options
options:
  # prefix for per user databases:
  db_prefix: "user-"
  mode: <%= @couchdb_mode %>
<%- if @couchdb_replication %>
  replication: <%= @couchdb_replication.to_json %>
<%- end -%>

  # security settings to be used for the per user databases
  security:
    admins:
      names:
        # We explicitly allow the admin user to access per user databases, even
        # though admin access ignores per database security we just do this to be
        # explicit about this
        - <%= @couchdb_admin_user %>
      roles: []
    members:
      names:
        - <%= @couchdb_soledad_user %>
        - <%= @couchdb_leap_mx_user %>
      roles:
        - replication