images:
  lam:                          "ghcr.io/ldapaccountmanager/lam:latest"
oauth2_proxy:
  application:                  application
  port:                         80
  allowed_groups:
    - "web-app-lam-administrator"
features:
  matomo:                       true
  css:                          true
  port-ui-desktop:              true
  ldap:                         true
  central_database:             false
  oauth2:                       false
  universal_logout:             true
csp:
  flags:
    style-src:
      unsafe-inline:            true
    script-src-elem:
      unsafe-inline:            true
      unsafe-eval:              true
    script-src:
      unsafe-inline:            true
domains:
  aliases:
    - "ldap.{{primary_domain}}"
  canonical:
    - lam.{{ primary_domain }}