ASPNETCORE_ENVIRONMENT=Development
ConnectionStrings__Default=Host=localhost;Database=member_center;Username=postgres;Password=postgres
Auth__Issuer=http://localhost:7850/
Auth__WebLoginUrl=http://localhost:5080/account/login
Auth__AllowedLoginReturnUrlPrefixes=http://localhost:7850/
Auth__AllowInternalHttpTokenEndpoint=false
# Optional PFX file overrides. Production normally reads app-managed certificates provisioned by installer into DB.
Auth__Certificates__Signing__Path=
Auth__Certificates__Signing__Password=
Auth__Certificates__Encryption__Path=
Auth__Certificates__Encryption__Password=
DataProtection__Certificate__Path=
DataProtection__Certificate__Password=
# Optional during rotation: repeat with __Previous__1__, etc.
Auth__Certificates__Signing__Previous__0__Path=
Auth__Certificates__Signing__Previous__0__Password=
Auth__Certificates__Encryption__Previous__0__Path=
Auth__Certificates__Encryption__Previous__0__Password=
DataProtection__Certificate__Previous__0__Path=
DataProtection__Certificate__Previous__0__Password=
Certificates__ExpirationWarningDays=30
ReverseProxy__TrustForwardedHeaders=false
ReverseProxy__KnownProxies=
ReverseProxy__KnownNetworks=
ReverseProxy__ForwardLimit=1
IdentitySecurity__Password__RequiredLength=8
IdentitySecurity__Password__RequireDigit=true
IdentitySecurity__Password__RequireLowercase=true
IdentitySecurity__Password__RequireUppercase=true
IdentitySecurity__Password__RequireNonAlphanumeric=false
IdentitySecurity__Lockout__AllowedForNewUsers=true
IdentitySecurity__Lockout__MaxFailedAccessAttempts=5
IdentitySecurity__Lockout__DefaultLockoutMinutes=15
RateLimits__Web__AuthLogin__PermitLimit=10
RateLimits__Web__AuthLogin__WindowSeconds=300
RateLimits__Web__AuthRegister__PermitLimit=5
RateLimits__Web__AuthRegister__WindowSeconds=900
RateLimits__Web__AuthRecovery__PermitLimit=5
RateLimits__Web__AuthRecovery__WindowSeconds=900
RateLimits__Web__AuthTokenConsumption__PermitLimit=10
RateLimits__Web__AuthTokenConsumption__WindowSeconds=600
RateLimits__Api__AuthRegister__PermitLimit=5
RateLimits__Api__AuthRegister__WindowSeconds=900
RateLimits__Api__AuthRecovery__PermitLimit=5
RateLimits__Api__AuthRecovery__WindowSeconds=900
RateLimits__Api__AuthTokenConsumption__PermitLimit=10
RateLimits__Api__AuthTokenConsumption__WindowSeconds=600
RateLimits__Api__NewsletterSubscribe__PermitLimit=20
RateLimits__Api__NewsletterSubscribe__WindowSeconds=600
RateLimits__Api__NewsletterUnsubscribeToken__PermitLimit=10
RateLimits__Api__NewsletterUnsubscribeToken__WindowSeconds=600
RateLimits__Api__NewsletterOneClickToken__PermitLimit=60
RateLimits__Api__NewsletterOneClickToken__WindowSeconds=60
RateLimits__Api__OAuthToken__PermitLimit=30
RateLimits__Api__OAuthToken__WindowSeconds=60
NewsletterTokens__ConfirmTokenLifetimeDays=7
NewsletterTokens__UnsubscribeTokenLifetimeDays=7
NewsletterTokens__OneClickTokenLifetimeDays=7
NewsletterTokens__OneClickBatchSizeLimit=1000
FileAccessTokens__DefaultLifetimeSeconds=300
FileAccessTokens__MinimumLifetimeSeconds=30
FileAccessTokens__MaximumLifetimeSeconds=900
Auth__MemberCenterAudience=member_center_api
Auth__SendEngineAudience=send_engine_api
SendEngine__BaseUrl=http://localhost:6060
SendEngine__SubscriptionEventsPath=/webhooks/subscriptions
SendEngine__WebhookSecret=change-me
Testing__DisableSubscriptionDryRunNoDb=false