Example Config

# Autogenerated
# Filename: proxy-config-example.yaml

tracing:
  enabled: false
  type: ""
  endpoint: ""
  collector: ""
log:
  level: ""
  pretty: false
  color: false
  file: ""
debug:
  addr: 127.0.0.1:9205
  token: ""
  pprof: false
  zpages: false
http:
  addr: 0.0.0.0:9200
  root: /
  tls_cert: /home/chaser/.opencloud/proxy/server.crt
  tls_key: /home/chaser/.opencloud/proxy/server.key
  tls: true
reva:
  address: eu.opencloud.api.gateway
  tls:
    mode: ""
    cacert: ""
grpc_client_tls: null
role_quotas: {}
policies:
- name: default
  routes:
  - endpoint: /
    service: eu.opencloud.web.web
    unprotected: true
    skip_x_access_token: false
  - endpoint: /.well-known/ocm
    service: eu.opencloud.web.ocm
    unprotected: true
    skip_x_access_token: false
  - endpoint: /.well-known/webfinger
    service: eu.opencloud.web.webfinger
    unprotected: true
    skip_x_access_token: false
  - endpoint: /.well-known/openid-configuration
    service: eu.opencloud.web.idp
    unprotected: true
    skip_x_access_token: false
  - endpoint: /branding/logo
    service: eu.opencloud.web.web
    skip_x_access_token: false
  - endpoint: /konnect/
    service: eu.opencloud.web.idp
    unprotected: true
    skip_x_access_token: false
  - endpoint: /signin/
    service: eu.opencloud.web.idp
    unprotected: true
    skip_x_access_token: false
  - endpoint: /archiver
    service: eu.opencloud.web.frontend
    skip_x_access_token: false
  - endpoint: /ocs/v2.php/apps/notifications/api/v1/notifications/sse
    service: eu.opencloud.sse.sse
    skip_x_access_token: false
  - endpoint: /ocs/v2.php/apps/notifications/api/v1/notifications
    service: eu.opencloud.web.userlog
    skip_x_access_token: false
  - type: regex
    endpoint: /ocs/v[12].php/cloud/user/signing-key
    service: eu.opencloud.web.ocs
    skip_x_access_token: false
  - type: regex
    endpoint: /ocs/v[12].php/config
    service: eu.opencloud.web.frontend
    unprotected: true
    skip_x_access_token: false
  - endpoint: /sciencemesh/
    service: eu.opencloud.web.ocm
    skip_x_access_token: false
  - endpoint: /ocm/
    service: eu.opencloud.web.ocm
    skip_x_access_token: false
  - endpoint: /ocs/
    service: eu.opencloud.web.frontend
    skip_x_access_token: false
  - type: query
    endpoint: /remote.php/?preview=1
    service: eu.opencloud.web.webdav
    skip_x_access_token: false
  - type: regex
    method: REPORT
    endpoint: (/remote.php)?/(web)?dav
    service: eu.opencloud.web.webdav
    skip_x_access_token: false
  - type: query
    endpoint: /dav/?preview=1
    service: eu.opencloud.web.webdav
    skip_x_access_token: false
  - type: query
    endpoint: /webdav/?preview=1
    service: eu.opencloud.web.webdav
    skip_x_access_token: false
  - endpoint: /remote.php/
    service: eu.opencloud.web.ocdav
    skip_x_access_token: false
  - endpoint: /dav/
    service: eu.opencloud.web.ocdav
    skip_x_access_token: false
  - endpoint: /webdav/
    service: eu.opencloud.web.ocdav
    skip_x_access_token: false
  - endpoint: /status
    service: eu.opencloud.web.ocdav
    unprotected: true
    skip_x_access_token: false
  - endpoint: /status.php
    service: eu.opencloud.web.ocdav
    unprotected: true
    skip_x_access_token: false
  - endpoint: /index.php/
    service: eu.opencloud.web.ocdav
    skip_x_access_token: false
  - endpoint: /apps/
    service: eu.opencloud.web.ocdav
    skip_x_access_token: false
  - endpoint: /data
    service: eu.opencloud.web.frontend
    unprotected: true
    skip_x_access_token: false
  - endpoint: /app/list
    service: eu.opencloud.web.frontend
    unprotected: true
    skip_x_access_token: false
  - endpoint: /app/
    service: eu.opencloud.web.frontend
    skip_x_access_token: false
  - endpoint: /graph/v1beta1/extensions/org.libregraph/activities
    service: eu.opencloud.web.activitylog
    skip_x_access_token: false
  - endpoint: /graph/v1.0/invitations
    service: eu.opencloud.web.invitations
    skip_x_access_token: false
  - endpoint: /graph/
    service: eu.opencloud.web.graph
    skip_x_access_token: false
  - endpoint: /api/v0/settings
    service: eu.opencloud.web.settings
    skip_x_access_token: false
  - endpoint: /auth-app/tokens
    service: eu.opencloud.web.auth-app
    skip_x_access_token: false
additional_policies: []
oidc:
  issuer: https://localhost:9200
  insecure: false
  access_token_verify_method: jwt
  skip_user_info: false
  user_info_cache:
    store: memory
    addresses:
    - 127.0.0.1:9233
    database: cache-userinfo
    table: ""
    ttl: 10s
    disable_persistence: false
    username: ""
    password: ""
  jwks:
    refresh_interval: 60
    refresh_timeout: 10
    refresh_limit: 60
    refresh_unknown_kid: true
  rewrite_well_known: false
service_account:
  service_account_id: ""
  service_account_secret: ""
role_assignment:
  driver: default
  oidc_role_mapper:
    role_claim: roles
    role_mapping:
    - role_name: admin
      claim_value: opencloudAdmin
    - role_name: spaceadmin
      claim_value: opencloudSpaceAdmin
    - role_name: user
      claim_value: opencloudUser
    - role_name: user-light
      claim_value: opencloudGuest
policy_selector:
  static:
    policy: default
  claims: null
  regex: null
pre_signed_url:
  allowed_http_methods:
  - GET
  enabled: true
  signing_keys:
    store: nats-js-kv
    addresses:
    - 127.0.0.1:9233
    ttl: 12h0m0s
    disable_persistence: true
    username: ""
    password: ""
account_backend: cs3
user_oidc_claim: preferred_username
user_cs3_claim: username
machine_auth_api_key: ""
auto_provision_accounts: false
auto_provision_claims:
  username: preferred_username
  email: email
  display_name: name
  groups: groups
enable_basic_auth: false
insecure_backends: false
backend_https_cacert: ""
auth_middleware:
  credentials_by_user_agent: {}
  allow_app_auth: true
policies_middleware:
  query: ""
csp_config_file_location: ""
events:
  endpoint: 127.0.0.1:9233
  cluster: opencloud-cluster
  tls_insecure: false
  tls_root_ca_certificate: ""
  enable_tls: false
  username: ""
  password: ""