# E2E 專用設定（make e2e-full 使用；勿與 gateway.dev.yaml 混用）
# 固定 Port 18888，避免與本機 dev server (8888) 衝突

Name: gateway-e2e
Host: 0.0.0.0
Port: 18888

Mongo:
  Schema: mongodb
  Host: 127.0.0.1
  Port: 27017
  Database: gateway_e2e
  AuthSource: ""
  ReplicaName: ""
  TLS: false
  MaxPoolSize: 30
  MinPoolSize: 5
  MaxConnIdleTime: 30m

Redis:
  Host: localhost:6379
  Type: node

Notification:
  DefaultLocale: zh-tw
  Email:
    Provider: mock
    From: e2e-noreply@example.com
    SMTP:
      Enable: false
  SMS:
    Provider: mock
    Mitake:
      Enable: false
  Async:
    Worker: 1
    MaxRetry: 3
    BackoffSeconds: [1, 2, 5]
  RatePerTenant:
    Email: 1000
    SMS: 500

Member:
  OTP:
    Length: 6
    TTLSeconds: 300
    MaxAttempts: 5
    ResendCooldownSeconds: 1
    DailyVerifyLimit: 100
  TOTP:
    Issuer: CloudEP-E2E
    Algorithm: SHA1
    Digits: 6
    PeriodSeconds: 30
    Window: 1
    BackupCodeCount: 5
    BackupCodeLength: 12
    EnrollTTLSeconds: 600
    ReplayTTLSeconds: 90
    SecretKEK: "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
  Registration:
    RequireInviteCode: false
    TrustSocialEmailVerified: true

Auth:
  AccessExpire: 900
  RefreshExpire: 604800
  ActiveKID: v1
  AccessSecret: "e2e-access-secret-32-bytes-min!!"
  RefreshSecret: "e2e-refresh-secret-32-bytes-min!"
  RegistrationSessionTTLSeconds: 600

Permission:
  Casbin:
    Enabled: false
    ModelPath: etc/rbac.conf
    PolicyAdapter: auto
  Cache:
    UserRolesTTLSeconds: 60
    RolePermsTTLSeconds: 60
    CatalogTTLSeconds: 120
  Reload:
    Channel: casbin:reload:e2e
    DebounceMilliseconds: 100
    HeartbeatSeconds: 30

Zitadel:
  Issuer: ""
  ServiceUserToken: ""
  DefaultOrgID: ""
  OAuthClientID: ""
  OAuthClientSecret: ""
  TimeoutSeconds: 5