# Sample /etc/overseer.yaml. Copy to /etc/overseer.yaml and adjust.
# Mode SHOULD be 0640 root:overseer or stricter — the OIDC client_secret
# is sensitive.

bind_address: "127.0.0.1"           # IP or "unix:/path/to/socket"
port: 8080                          # ignored when bind_address starts with "unix:"
log_level: "info"                   # trace|debug|info|warn|error|critical
db_path: "/var/lib/overseer/overseer.db"

oidc:
    issuer_url:    "https://keycloak.example.com/realms/family"
    client_id:     "overseer"
    client_secret: "REPLACE_ME"
    redirect_uri:  "https://overseer.example.com/oidc/callback"

session:
    cookie_name: "overseer_sid"
    max_age_minutes: 480