config.example.json

// vim:filetype=json5
{
	"config": {
		// Address and port the web server should bind to
		"BindAddress": "127.0.0.1",
		"BindPort": 5556,
		// URL the StepCA server is reachable under
		"CaUrl": "https://ca.example.com:9000",
		// URL the PostgreSQL server housing the StepCA database is reachable under
		"CaDbUrl": "postgresql://stepuser:steppass@localhost/stepdb",
		// Frequency for certificate database refresh in "m"inutes or "s"seconds (only relevant if "CaDbUrl" is set)
		"CaDbRefresh": "5m",
		// SHA256 hash of the root CA certificate used by the StepCA server
		"CaHash": "9da25f5056fdc3901a827b5e2639af48bef834f17e51a2de15e38e2f775c907e",
		// Name of the admin provisioner (defaults to "Admin JWK")
		"CaAdminProv": "Admin JWK",
		// Password for admin provisioner
		"CaPass": "xxxx",
		// Oauth2 client ID
		"ClientId": "xxx",
		// Oauth2  client secret (client must be confidential)
		"ClientSecret": "xxxxx",
		// URL under which the .well-known/ OIDC discovery data can be found
		"OidcBaseUrl": "https://id.example.com/",
		// URL under which Stepdance is hosted (used for OAuth2 callback)
		"AppBaseUrl": "https://certificates.example.com",
	}
}