[server]
listen_addr     = ":8443"
grpc_addr       = ":9443"
# grpc_plain_addr = "127.0.0.1:9444"  # Optional: plaintext gRPC for reverse proxy
tls_cert        = "/srv/eng-pad-server/certs/fullchain.pem"
tls_key         = "/srv/eng-pad-server/certs/privkey.pem"

[web]
listen_addr = ":8080"
base_url    = "https://pad.metacircular.net"

[database]
path = "/srv/eng-pad-server/eng-pad-server.db"

[auth]
token_ttl      = "24h"
argon2_memory  = 65536
argon2_time    = 3
argon2_threads = 4

[webauthn]
rp_display_name = "Engineering Pad"
rp_id           = "pad.metacircular.net"
rp_origins      = ["https://pad.metacircular.net"]

[log]
level = "info"