server:
  port: 8080

management:
  endpoints:
    web:
      exposure:
        include: health,info

prole:
  auth:
    enabled: false
    cookieName: prole_session
    cookieDomain: ${PROLE_AUTH_COOKIE_DOMAIN:.prole.org}
    sessionTtl: 8h
    # REQUIRED in production when enabled. Provide via env: PROLE_AUTH_SESSION_SECRET
    sessionSecret: ""
    emailDomain: prole.org
    formEnabled: false
    # Comma-separated list of bare usernames granted admin group membership.
    # Override via env: PROLE_AUTH_ADMIN_PRINCIPALS=admin
    adminPrincipals: []
  kerberos:
    # REQUIRED for SPNEGO when enabled. Provide via env.
    servicePrincipal: ""
    keytabPath: ""
    realm: ""