# Myrmex's server at myrmex.li (Halkyon Days' ADR 0045, D22; todo.halkyon.eu, then
# todo.halkyon.li before it), behind the instance's Caddy (deploy/compose.myrmex.yaml):
# its API and its web server on the one domain, as Halkyon's and Train's; its database
# in the instance's PostgreSQL.

# Configuration for the main API server.
apiServer:
  port: 8080
  publicHost: myrmex.li
  publicPort: 443
  publicScheme: https

# No insightsServer, as Halkyon's: without the block Serverpod doesn't start Insights.

# Configuration for the web server.
webServer:
  port: 8082
  publicHost: myrmex.li
  publicPort: 443
  publicScheme: https

# This is the database setup for your servers. The default for the Google Cloud
# Engine Terraform configuration is to connect on a private IP address.
# If you are connecting on a public IP (e.g. on AWS or Google Cloud Run), you
# connect on the public IP of the database e.g. database.examplepod.com.
database:
  host: postgres
  port: 5432
  name: halkyon_myrmex
  user: halkyon_myrmex
  # On the instance's own network, never leaving the server.
  requireSsl: false
  #isUnixSocket: true # defaults to false
  #maxConnectionCount: 10 # Defaults to 10, a negative or null value removes the limit


maxRequestSize: 524288 # The maximum size of requests allowed in bytes

# Session logs stay out of the database, for privacy, as Learn's (never re-enable).
sessionLogs:
  consoleEnabled: false
  persistentEnabled: false
# consoleLogFormat: json # Defaults to "json", options are "text" or "json"

#futureCall:
#  enabled: true # Defaults to true, set to false to disable scheduling and running future calls
#  executionEnabled: true # Defaults to true
#  concurrencyLimit: 1 # Defaults to 1, a negative or null value removes the limit
#  scanInterval: 5000 # Unit in milliseconds, defaults to 5000

# Recommended when serving web clients: keeps auth tokens in httpOnly
# cookies. Without this, web tokens live in JavaScript-readable storage,
# where any XSS can steal them. Web clients opt in with
# `client.cookieAuth = true`. Requires `allowedOrigins`; browsers from
# origins not in the list lose cross-origin access, including to public
# endpoints.
#authCookie:
#  sameSite: lax # Defaults to "lax", options are "strict" or "none"
#  #name: serverpod_auth # Defaults to "serverpod_auth"
#  #refreshName: serverpod_auth_refresh # Defaults to "<name>_refresh"
#  #domain: examplepod.com # Defaults to host-only; set to share across subdomains
#  #path: / # Defaults to "/"
#  #secure: true # Defaults to true; the cookie is only sent over https
#allowedOrigins:
#  - https://app.examplepod.com # The origin serving your Flutter web app