zitadel/cmd/zitadel/startup.yaml

Log:
  Level: $ZITADEL_LOG_LEVEL
  Formatter:
    Format: text

Tracing:
  Type: $TRACING_TYPE
  Config:
    ProjectID: $ZITADEL_TRACING_PROJECT_ID
    MetricPrefix: ZITADEL-V1
    Fraction: $ZITADEL_TRACING_FRACTION

AuthZ:
  Repository:
    Eventstore:
      ServiceName: 'AuthZ'
      Repository:
        SQL:
          Host: $ZITADEL_EVENTSTORE_HOST
          Port: $ZITADEL_EVENTSTORE_PORT
          User: 'authz'
          Database: 'eventstore'
          Password: $CR_AUTHZ_PASSWORD
          SSL:
            Mode: $CR_SSL_MODE
            RootCert: $CR_ROOT_CERT
            Cert: $CR_AUTHZ_CERT
            Key: $CR_AUTHZ_KEY
      Cache:
        Type: 'fastcache'
        Config:
          MaxCacheSizeInByte: 10485760 #10mb
    View:
      Host: $ZITADEL_EVENTSTORE_HOST
      Port: $ZITADEL_EVENTSTORE_PORT
      User: 'authz'
      Database: 'authz'
      Password: $CR_AUTHZ_PASSWORD
      SSL:
        Mode: $CR_SSL_MODE
        RootCert: $CR_ROOT_CERT
        Cert: $CR_AUTHZ_CERT
        Key: $CR_AUTHZ_KEY
    Spooler:
      ConcurrentTasks: 1
      BulkLimit: 100
      FailureCountUntilSkip: 5

Auth:
  SearchLimit: 100
  Eventstore:
    ServiceName: 'authAPI'
    Repository:
      SQL:
        Host: $ZITADEL_EVENTSTORE_HOST
        Port: $ZITADEL_EVENTSTORE_PORT
        User: 'auth'
        Database: 'eventstore'
        Password: $CR_AUTH_PASSWORD
        SSL:
          Mode: $CR_SSL_MODE
          RootCert: $CR_ROOT_CERT
          Cert: $CR_AUTH_CERT
          Key: $CR_AUTH_KEY
    Cache:
      Type: 'fastcache'
      Config:
        MaxCacheSizeInByte: 10485760 #10mb
  AuthRequest:
    Connection:
      Host: $ZITADEL_EVENTSTORE_HOST
      Port: $ZITADEL_EVENTSTORE_PORT
      User: 'auth'
      Database: 'auth'
      Password: $CR_AUTH_PASSWORD
      SSL:
        Mode: $CR_SSL_MODE
        RootCert: $CR_ROOT_CERT
        Cert: $CR_AUTH_CERT
        Key: $CR_AUTH_KEY
  View:
    Host: $ZITADEL_EVENTSTORE_HOST
    Port: $ZITADEL_EVENTSTORE_PORT
    User: 'auth'
    Database: 'auth'
    Password: $CR_AUTH_PASSWORD
    SSL:
      Mode: $CR_SSL_MODE
      RootCert: $CR_ROOT_CERT
      Cert: $CR_AUTH_CERT
      Key: $CR_AUTH_KEY
  Spooler:
    ConcurrentTasks: 4
    BulkLimit: 100
    FailureCountUntilSkip: 5
  KeyConfig:
    Size: 2048
    PrivateKeyLifetime: 6h
    PublicKeyLifetime: 30h
    EncryptionConfig:
      EncryptionKeyID: $ZITADEL_OIDC_KEYS_ID
    SigningKeyRotation: 10s

Admin:
  SearchLimit: 100
  Domain: $ZITADEL_DEFAULT_DOMAIN
  Eventstore:
    ServiceName: 'Admin'
    Repository:
      SQL:
        Host: $ZITADEL_EVENTSTORE_HOST
        Port: $ZITADEL_EVENTSTORE_PORT
        User: 'adminapi'
        Database: 'eventstore'
        Password: $CR_ADMINAPI_PASSWORD
        SSL:
          Mode: $CR_SSL_MODE
          RootCert: $CR_ROOT_CERT
          Cert: $CR_ADMINAPI_CERT
          Key: $CR_ADMINAPI_KEY
    Cache:
      Type: 'fastcache'
      Config:
        MaxCacheSizeInByte: 10485760 #10mb
  View:
    Host: $ZITADEL_EVENTSTORE_HOST
    Port: $ZITADEL_EVENTSTORE_PORT
    User: 'adminapi'
    Database: 'adminapi'
    Password: $CR_ADMINAPI_PASSWORD
    SSL:
      Mode: $CR_SSL_MODE
      RootCert: $CR_ROOT_CERT
      Cert: $CR_ADMINAPI_CERT
      Key: $CR_ADMINAPI_KEY
  Spooler:
    ConcurrentTasks: 1
    BulkLimit: 100
    FailureCountUntilSkip: 5

Mgmt:
  SearchLimit: 100
  Domain: $ZITADEL_DEFAULT_DOMAIN
  Eventstore:
    ServiceName: 'ManagementAPI'
    Repository:
      SQL:
        Host: $ZITADEL_EVENTSTORE_HOST
        Port: $ZITADEL_EVENTSTORE_PORT
        User: 'management'
        Database: 'eventstore'
        Password: $CR_MANAGEMENT_PASSWORD
        SSL:
          Mode: $CR_SSL_MODE
          RootCert: $CR_ROOT_CERT
          Cert: $CR_MANAGEMENT_CERT
          Key: $CR_MANAGEMENT_KEY
    Cache:
      Type: 'fastcache'
      Config:
        MaxCacheSizeInByte: 10485760 #10mb
  View:
    Host: $ZITADEL_EVENTSTORE_HOST
    Port: $ZITADEL_EVENTSTORE_PORT
    User: 'management'
    Database: 'management'
    Password: $CR_MANAGEMENT_PASSWORD
    SSL:
      Mode: $CR_SSL_MODE
      RootCert: $CR_ROOT_CERT
      Cert: $CR_MANAGEMENT_CERT
      Key: $CR_MANAGEMENT_KEY
  Spooler:
    ConcurrentTasks: 4
    BulkLimit: 100
    FailureCountUntilSkip: 5

API:
  GRPC:
    ServerPort: 50001
    GatewayPort: 50002
    CustomHeaders:
      - x-zitadel-
  OIDC:
    OPConfig:
      Issuer: $ZITADEL_ISSUER
      DefaultLogoutRedirectURI: $ZITADEL_ACCOUNTS/logout/done
    StorageConfig:
      DefaultLoginURL: $ZITADEL_ACCOUNTS/login?authRequestID=
      DefaultAccessTokenLifetime: 12h
      DefaultIdTokenLifetime: 12h
      SigningKeyAlgorithm: RS256
    UserAgentCookieConfig:
      Name: caos.zitadel.useragent
      Domain: $ZITADEL_COOKIE_DOMAIN
      Key:
        EncryptionKeyID: $ZITADEL_COOKIE_KEY
    Cache:
      MaxAge: $ZITADEL_CACHE_MAXAGE
      SharedMaxAge: $ZITADEL_CACHE_SHARED_MAXAGE
    Endpoints:
      Auth:
        Path: 'authorize'
        URL: '$ZITADEL_AUTHORIZE/authorize'
      Token:
        Path: 'token'
        URL: '$ZITADEL_OAUTH/token'
      EndSession:
        Path: 'endsession'
        URL: '$ZITADEL_AUTHORIZE/endsession'
      Userinfo:
        Path: 'userinfo'
        URL: '$ZITADEL_OAUTH/userinfo'
      Keys:
        Path: 'keys'
        URL: '$ZITADEL_OAUTH/keys'

UI:
  Port: 50003
  Login:
    Handler:
      OidcAuthCallbackURL: '$ZITADEL_AUTHORIZE/authorize/'
      ZitadelURL: '$ZITADEL_CONSOLE'
      LanguageCookieName: 'caos.zitadel.login.lang'
      DefaultLanguage: 'de'
      CSRF:
        CookieName: 'caos.zitadel.login.csrf'
        Key:
          EncryptionKeyID: $ZITADEL_CSRF_KEY
        Development: $ZITADEL_CSRF_DEV
      Cache:
        MaxAge: $ZITADEL_CACHE_MAXAGE
        SharedMaxAge: $ZITADEL_CACHE_SHARED_MAXAGE
  Console:
    EnvOverwriteDir: $ZITADEL_CONSOLE_ENV_DIR
    ShortCache:
      MaxAge: $ZITADEL_SHORT_CACHE_MAXAGE
      SharedMaxAge: $ZITADEL_SHORT_CACHE_SHARED_MAXAGE
    LongCache:
      MaxAge: $ZITADEL_CACHE_MAXAGE
      SharedMaxAge: $ZITADEL_CACHE_SHARED_MAXAGE
    CSPDomain: $ZITADEL_DEFAULT_DOMAIN

Notification:
  Repository:
    DefaultLanguage: 'de'
    Domain: $ZITADEL_DEFAULT_DOMAIN
    Eventstore:
      ServiceName: 'Notification'
      Repository:
        SQL:
          Host: $ZITADEL_EVENTSTORE_HOST
          Port: $ZITADEL_EVENTSTORE_PORT
          User: 'notification'
          Database: 'eventstore'
          Password: $CR_NOTIFICATION_PASSWORD
          SSL:
            Mode: $CR_SSL_MODE
            RootCert: $CR_ROOT_CERT
            Cert: $CR_NOTIFICATION_CERT
            Key: $CR_NOTIFICATION_KEY
      Cache:
        Type: 'fastcache'
        Config:
          MaxCacheSizeInByte: 10485760 #10mb
    View:
      Host: $ZITADEL_EVENTSTORE_HOST
      Port: $ZITADEL_EVENTSTORE_PORT
      User: 'notification'
      Database: 'notification'
      Password: $CR_NOTIFICATION_PASSWORD
      SSL:
        Mode: $CR_SSL_MODE
        RootCert: $CR_ROOT_CERT
        Cert: $CR_NOTIFICATION_CERT
        Key: $CR_NOTIFICATION_KEY
    Spooler:
      ConcurrentTasks: 4
      BulkLimit: 100
      FailureCountUntilSkip: 5
      Handlers:
        Notification:
          MinimumCycleDuration: 10s