dev_ca: &dev_ca
  client_ca_key: "./certs/test/files/ca.key"
  client_ca_cert: "./certs/test/files/ca.crt"
  ca_key_password: nil

cert_options: &cert_options
  client_cert_lifespan: 2
  client_cert_bit_size: 2024
  client_cert_hash: "SHA256"
  allow_limited_certs: false
  allow_unlimited_certs: true
  allow_anonymous_certs: false
  limited_cert_prefix: "LIMITED"
  unlimited_cert_prefix: "UNLIMITED"

downloads: &downloads
  client_download_domain: https://downloads.leap.se
  available_clients:
    - linux32
    - linux64
    - osx
    - windows
    - android
  download_paths:
    android: /client/android/Bitmask-Android-latest.apk
    linux:   /client/linux
    linux32: /client/linux/Bitmask-linux32-latest.tar.bz2
    linux64: /client/linux/Bitmask-linux64-latest.tar.bz2
    osx:     /client/osx/Bitmask-OSX-latest.dmg
    windows: /client/windows/Bitmask-win32-latest.zip
    other:   /client

common: &common
  force_ssl: false
  pagination_size: 30
  auth:
    token_expires_after: 60
  # handles that will be blocked from being used as logins or email aliases
  # in addition to the ones in /etc/passwd and http://tools.ietf.org/html/rfc2142
  handle_blacklist: [certmaster, ssladmin, arin-admin, administrator, www-data, maildrop]
  # handles that will be allowed despite being in /etc/passwd or rfc2142
  handle_whitelist: []
  # actions enabled in the account settings
  # see /users/app/views/users/_edit.html.haml for a list.
  user_actions: ['destroy_account']
  admin_actions: ['change_pgp_key', 'change_service_level', 'destroy_account']
  billing: ~

service_levels: &service_levels
  service_levels:
    0:
      name: anonymous
      cert_prefix: "LIMITED"
      description: "anonymous account, with rate limited VPN"
    1:
      name: free
      cert_prefix: "LIMITED"
      description: "free account, with rate limited VPN"
      cost: 0
      quota: 100
    2:
      name: premium
      cert_prefix: "UNLIMITED"
      description: "premium account, with unlimited vpn"
      cost:
        USD: 10
        EUR: 10
  default_service_level: 1

development:
  <<: *downloads
  <<: *dev_ca
  <<: *cert_options
  <<: *common
  <<: *service_levels
  admins: [blue, admin, admin2]
  domain: example.org
  secret_token: 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
  reraise_errors: true

test:
  <<: *downloads
  <<: *dev_ca
  <<: *cert_options
  <<: *common
  <<: *service_levels
  admins: [admin, admin2]
  domain: test.me
  secret_token: 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
  reraise_errors: true
  billing: {}

production:
  <<: *downloads
  <<: *cert_options
  <<: *common
  admins: []
  domain: example.net
  # logfile: /path/to/your/logs