# ZITADEL FirstInstance bootstrap（dev / k6 用，固定憑證）
# 啟動完成後：
#   deploy/zitadel/machinekey/zitadel-admin-sa.token  ← 給 Gateway 當 ServiceUserToken
#   deploy/zitadel/machinekey/zitadel-admin-sa.json   ← 給 SDK 用的 JWT key（k6 不會用到）

FirstInstance:
  MachineKeyPath: /machinekey/zitadel-admin-sa.json
  PatPath: /machinekey/zitadel-admin-sa.token

  InstanceName: ZITADEL
  DefaultLanguage: en

  Org:
    Name: GatewayDev

    Human:
      UserName: zitadel-admin@zitadel.localhost
      FirstName: ZITADEL
      LastName: Admin
      NickName: admin
      DisplayName: Admin
      PreferredLanguage: en
      Email:
        Address: admin@zitadel.localhost
        Verified: true
      Password: Password1!
      PasswordChangeRequired: false

    Machine:
      Machine:
        Username: zitadel-admin-sa
        Name: ServiceAccount
        Description: Backend service account for Gateway (dev / k6)
      Pat:
        ExpirationDate: "2099-01-01T00:00:00Z"
        Scopes:
          - openid
      MachineKey:
        Type: 1
        ExpirationDate: "2099-01-01T00:00:00Z"