data_dir: ../.cache/dev/data

server:
  listen: 127.0.0.1:8080
  public_url: http://localhost:8081
  log_level: debug

acme:
  email: dev@localhost
  directory_url: https://acme.mock/directory
  accept_terms: true
  automatic_issuance: false
  mock: true

auth: {}
dns_credentials:
  cloudflare_dev:
    provider: cloudflare
    environment:
      CLOUDFLARE_DNS_API_TOKEN: ""
  route53_dev:
    provider: route53
    environment:
      AWS_ACCESS_KEY_ID: ""
      AWS_SECRET_ACCESS_KEY: ""

zones:
  - name: homelab.test
    credential: cloudflare_dev
  - name: services.test
    credential: route53_dev

certificates:
  - name: homelab-wildcard
    domains:
      - homelab.test
      - "*.homelab.test"
    key_type: ec256
    renew_before: 720h
    enabled: true
  - name: internal-services
    domains:
      - services.test
      - dashboard.services.test
      - monitoring.services.test
    key_type: rsa2048
    renew_before: 480h
    enabled: true
  - name: media-services
    domains:
      - media.services.test
      - jellyfin.services.test
      - photos.services.test
    key_type: ec384
    renew_before: 720h
    enabled: true
  - name: network-infrastructure
    domains:
      - router.homelab.test
      - switches.homelab.test
      - wifi.homelab.test
    key_type: rsa3072
    renew_before: 360h
    enabled: true
  - name: monitoring-wildcard
    domains:
      - monitoring.homelab.test
      - "*.monitoring.homelab.test"
    key_type: ec256
    renew_before: 720h
    enabled: true
  - name: backup-server
    domains:
      - backup.services.test
    key_type: rsa4096
    renew_before: 240h
    credential: route53_dev
    automatic_issuance: false
    enabled: true
hooks: []