dev_ca: &dev_ca
  client_ca_key: "./test/files/ca.key"
  client_ca_cert: "./test/files/ca.crt"
  ca_key_password: nil

cert_options: &cert_options
  client_cert_lifespan: "2 months"
  client_cert_bit_size: 2024
  client_cert_hash: "SHA256"
  allow_limited_certs: false
  allow_unlimited_certs: true
  allow_anonymous_certs: false
  limited_cert_prefix: "LIMITED"
  unlimited_cert_prefix: "UNLIMITED"

downloads: &downloads
  client_download_domain: https://dl.bitmask.net
  available_clients:
    - linux
    - osx
    - windows
    - android
  download_paths:
    android: /android/
    linux:   /linux/
    osx:     /mac/
    windows: /windows/
    other:   /

common: &common
  force_ssl: false
  pagination_size: 30
  auth:
    token_expires_after: 60
  # handles that will be blocked from being used as logins or email aliases
  # in addition to the ones in /etc/passwd and http://tools.ietf.org/html/rfc2142
  handle_blacklist:
    - certmaster
    - ssladmin
    - arin-admin
    - administrator
    - www-data
    - maildrop
    - postmaster
    - admin
    - contact
    - info
    - noreply
    - robot
    - helpdesk
    - help
    - tickets
    - owner
  # handles that will be allowed despite being in /etc/passwd or rfc2142
  handle_whitelist: []
  # actions enabled in the account settings
  # see /users/app/views/users/_edit.html.haml for a list.
  user_actions: ['contact_email', 'destroy_account']
  admin_actions: ['contact_email', 'change_pgp_key', 'change_service_level', 'destroy_account']
  billing: ~
  default_locale: :en
  available_locales:
    - :cs
    - :de
    - :el
    - :en
    - :es
    - :fi
    - :fr
    - :hu
    - :it
    - :lt
    - :nb
    - :nl
    - :pl
    - :pt
    - :ru
    - :tr
    - :zh
  minimum_client_version: "0.5"
  engines:
    - support
    - billing
  allow_registration: true
  invite_required: false
  config_file_paths:
    soledad-service: 'public/1/config/soledad-service.json'
    eip-service: 'public/1/config/eip-service.json'
    smtp-service: 'public/1/config/smtp-service.json'
    provider: 'config/provider/provider.json'
  mailer:
    from_address: 'noreply'

service_levels: &service_levels
  service_levels:
    1:
      name: free
      description: "free account, with rate limited VPN"
      eip_rate_limit: true
      storage: 100
      services:
        - eip
    2:
      name: premium
      description: "premium account, with unlimited vpn"
      rate:
        USD: 10
        EUR: 10
      services:
        - eip
        - email
  default_service_level: 1

development:
  <<: *downloads
  <<: *dev_ca
  <<: *cert_options
  <<: *common
  <<: *service_levels
  admins: [blue, red, staff]
  api_tokens:
    monitor: nil
    admin: nil
  domain: example.org
  secret_key_base: "1a904c4222fe04548fbe7a3545c4d5210b0a31af1227cbbe304708cf08e5f3a4dffe56372c30aa5486bb8ad577bf86032e720c1513b61870dc1a480e813ffecd"
  reraise_errors: true

test:
  <<: *downloads
  <<: *dev_ca
  <<: *cert_options
  <<: *common
  <<: *service_levels
  admins: [admin, admin2]
  api_tokens:
    monitor: "212da28a59dcaca487365309dc93aa09"
    admin: nil
    allowed_ips:
      - 0.0.0.0
  domain: test.me
  secret_key_base: "e1c04f93edb26b64040ba49f34084b03abbc286a7fbb60b5b0736bed2d9fe3ec5f16ef4253b252080f3c8b52e11541d57adc8eee6e4bd53f3b568aced3455106"
  reraise_errors: true
  billing: {}
  default_locale: :en
  available_locales:
    - :en
    - :de

production:
  <<: *downloads
  <<: *cert_options
  <<: *common
  admins: []
  api_tokens:
    monitor: nil
    admin: nil
  domain: example.net
  engines:
    - support
  # logfile: /path/to/your/logs