[pipeline:main]
pipeline = neobab
# To activate the `maintenance` mode and the `app-auth-cas`, use the following line instead
;pipeline = maintenance app-auth-cas neobab

[app:neobab]
use = egg:neobab

app_url = https://www.neobab.fr
sqlalchemy.url = sqlite:///%(here)s/db.sqlite
data_dir = %(here)s/data/attachements

; Si `ldap.server` n'est pas renseigné, les appels à LDAP échoueront, ce qui évitera
; les temps de latence (timeouts) dans les tests.
; ldap.server = annuaire.ehess.fr
ldap.port = 389
ldap.dn =
ldap.password =
ldap.search_base = ou=personnes,dc=neobab,dc=fr
# Timeout in seconds
ldap.timeout = 2

smtp.server = localhost
smtp.port = 25
smtp.from = no-reply@neobab.fr
smtp.no_reply = no-reply@neobab.fr
smtp.cc = no-reply@neobab.fr
smtp.bcc = no-reply@neobab.fr
# When set, all the emails will be sent to `stmp.test` address instead
smtp.test = no-reply@neobab.fr

# To enable secured headers in production mode
headers.secured = true

# Can be generated with Python function `secrets.token_hex()`
auth.secret = MySecret
auth.backdoor = false

session.type = file
session.data_dir = %(here)s/data/sessions/data
session.lock_dir = %(here)s/data/sessions/lock
session.cookie_on_exception = true
session.key = session
# Can be generated with Python function `secrets.token_hex()`
session.secret = MySecret
# Source: <https://beaker.readthedocs.io/en/latest/sessions.html?highlight=secure#cookie-security>
session.httponly = true
session.secure = true
session.samesite = Lax
;session.samesite = Strict

i18n.enabled = true
i18n.available_languages = fr_FR
i18n.default_locale_name = fr_FR
i18n.directories =
    neobab:locale
    formencode:i18n
i18n.domain = neobab

pyramid.reload_templates = false
pyramid.debug_authorization = false
pyramid.debug_notfound = false
pyramid.debug_routematch = false
forms.enabled = true
mako.directories =
    neobab:templates
    pyramid_helpers:templates

[filter:maintenance]
use = egg:neobab#middleware
neobab.maintenance = false

[filter:app-auth-cas]
use = egg:PyCAS#middleware
pycas.enabled = true
pycas.host = cas.ehess.fr
pycas.port = 443
pycas.path = /casv3
pycas.version = 2.0
pycas.protect = /auth/sign-in
pycas.mode = normal
pycas.logout_local = /auth/sign-out
pycas.logout_path = /auth/cas/logout
pycas.logout_redirect = http://www.ehess.fr
;pycas.callback_url = /proxy-callback
pycas.verify = /etc/ssl/certs/ca-certificates.crt
pycas.session.type = file
pycas.session.secret = the-ultra-secret-session-key
pycas.session.data_dir = %(here)s/data/pycas/sessions/data
pycas.session.lock_dir = %(here)s/data/pycas/sessions/lock

[server:main]
use = egg:gunicorn
host = 0.0.0.0
port = 6543

[loggers]
keys = root, neobab, sqlalchemy

[logger_root]
level = DEBUG
handlers = console

[logger_neobab]
level = DEBUG
handlers =
qualname = neobab

[logger_sqlalchemy]
level = INFO
handlers =
qualname = sqlalchemy.engine

[handlers]
keys = console

[handler_console]
class = StreamHandler
args = (sys.stderr,)
level = NOTSET
formatter = generic

[formatters]
keys = generic

[formatter_generic]
format = %(asctime)s %(levelname)-5.5s [%(name)s:%(lineno)s][%(threadName)s] %(message)s