config:
  connectors:
  - config:
      bindDN: CN=ldapsearch,OU=ldapsearch,DC=cascade,DC=strudelline,DC=net
        #bindPW: run deploy.sh with --set config.connectors[0].config.bindPW="yourpw" to set this value
      groupSearch:
        baseDN: cn=Users,dc=cascade,dc=strudelline,dc=net
        filter: (objectClass=group)
        nameAttr: cn
        userMatchers:
        - groupAttr: member
          userAttr: distinguishedName
      host: cascade.strudelline.net:636
      insecureNoSSL: false
      insecureSkipVerify: true
      userSearch:
        baseDN: cn=Users,dc=cascade,dc=strudelline,dc=net
        emailAttr: mail
        filter: (objectClass=person)
        idAttr: sAMAccountName
        nameAttr: cn
        preferredUsernameAttr: sAMAccountName
        username: sAMAccountName
      usernamePrompt: username
    id: ad
    name: ActiveDirectory
    type: ldap
  enablePasswordDB: true
  issuer: https://dex.strudelline.net
  oauth2:
    responseTypes:
    - code
    - token
    - id_token
    skipApprovalScreen: true
  staticClients:
  - id: dexdebug
    name: Dex Debugger
    redirectURIs:
    - https://dexdebug.strudelline.net/auth/callback
    secret: dexdebugSecret
  - id: gitea
    name: Dex Debugger
    redirectURIs:
    - https://git.strudelline.net/user/oauth2/werts/callback
    secret: nUs1qeYWA7o3poJFM8gXJMQhwoMIA3py7go8lPEdWTNwZTXW5HnsxJMYSlolBbFt5OS5u3rUapwehGJ19opECR
  - id: oa2p
    name: oauth2proxy
    redirectURIs:
    - https://oidc.strudelline.net/be/callback
    secret: oa2ptest
  staticPasswords:
  - email: test@strudelline.net
    hash: $2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W
    userID: 08a8684b-db88-4b73-90a9-3cd1661f5466
    username: test
  storage:
    config:
      inCluster: true
    type: kubernetes
ingress:
  enabled: true
  hosts:
  - host: dex.strudelline.net
    paths:
    - path: /
      pathType: Prefix