server:
  port: ${AUTH_PORT:9100}
spring:
  application:
    name: auth-service
  config:
    import:
      - optional:nacos:baiyue-common.yml?group=BAIYUE&refreshEnabled=true
      - optional:nacos:${spring.application.name}.yml?group=BAIYUE&refreshEnabled=true
  data:
    redis:
      host: ${REDIS_HOST:127.0.0.1}
      port: ${REDIS_PORT:6379}
      password: ${REDIS_PASSWORD:}
      database: ${REDIS_DATABASE:0}
      timeout: ${REDIS_TIMEOUT:3s}
  cloud:
    nacos:
      server-addr: ${NACOS_SERVER_ADDR:127.0.0.1:8848}
      username: ${NACOS_USERNAME:nacos}
      password: ${NACOS_PASSWORD:nacos}
      discovery:
        enabled: ${NACOS_DISCOVERY_ENABLED:true}
        register-enabled: ${NACOS_REGISTER_ENABLED:true}
        group: ${NACOS_GROUP:BAIYUE}
        namespace: ${NACOS_NAMESPACE:public}
      config.namespace: ${NACOS_NAMESPACE:public}
  datasource:
    driver-class-name: com.mysql.cj.jdbc.Driver
    url: ${AUTH_DB_URL:jdbc:mysql://127.0.0.1:3306/baiyue_auth?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai&rewriteBatchedStatements=true}
    username: ${AUTH_DB_USERNAME:root}
    password: ${AUTH_DB_PASSWORD:123456}

baiyue.security:
  jwt-secret: ${JWT_SECRET:change-me-to-at-least-32-bytes-long-before-start}
  internal-service-token: ${INTERNAL_SERVICE_TOKEN:change-me-to-an-internal-token-at-least-32-bytes-long}
  token-key-prefix: ${REDIS_TOKEN_KEY_PREFIX:baiyue:auth}
  issuer: ${JWT_ISSUER:auth-service}
  access-token-ttl: ${ACCESS_TOKEN_TTL:30m}
  refresh-token-ttl: ${REFRESH_TOKEN_TTL:7d}
  max-login-failures: ${MAX_LOGIN_FAILURES:5}
  lock-duration: ${LOGIN_LOCK_DURATION:15m}

baiyue.clients:
  iam:
    url: ${IAM_SERVICE_URL:}

management.endpoints.web.exposure.include: health,info,prometheus