server = {
    'port': '5000',
    'host': '0.0.0.0'
}

# Pecan Application Configurations
app = {
    'root': 'anchor.controllers.RootController',
    'modules': ['anchor'],
    # 'static_root': '%(confdir)s/public',
    # 'template_path': '%(confdir)s/${package}/templates',
    'debug': True,
    'errors': {
        '404': '/error/404',
        '__force_dict__': True
    }
}

auth = {
    'static': {
        'user': 'woot',
        'secret': 'woot',
    },
    # 'ldap': {
    #     'host': "ldap.host.com",
    #     'domain': "host.com",
    #     'base': "CN=Users,DC=host,DC=com",
    # },
    # 'keystone': {
    #     'url': 'https://keystone.example.com:35357',
    # },
}

validators = [
    {
        "name": "default",
        "steps": [
            ('common_name', {'allowed_domains': ['.example.com']}),
            ('alternative_names', {'allowed_domains': ['.example.com']}),
            ('server_group', {'group_prefixes': {
                'nv': 'Nova_Team',
                'sw': 'Swift_Team',
                'bk': 'Bock_Team',
                'gl': 'Glance_Team',
                'cs': 'CS_Team',
                'mb': 'MB_Team',
                'ops': 'SysEng_Team',
                'qu': 'Neutron_Team',
                }}),
            ('extensions', {'allowed_extensions': ['keyUsage', 'subjectAltName', 'basicConstraints', 'subjectKeyIdentifier']}),
            ('key_usage', {'allowed_usage': ['Digital Signature', 'Key Encipherment', 'Non Repudiation', 'Certificate Sign', 'CRL Sign']}),
            ('ca_status', {'ca_requested': False}),
            ('source_cidrs', {'cidrs': ["127.0.0.0/8"]}),
        ]
    },
    {
        "name": "ip",
        "steps": [
            ('common_name', {'allowed_networks': ['127/8']}),
            ('alternative_names', {'allowed_networks': ['127/8']}),
            ('ca_status', {'ca_requested': False}),
            ('source_cidrs', {'cidrs': ["127.0.0.0/8"]}),
        ]
    },
]

ca = {
    'cert_path': "CA/root-ca.crt",
    'key_path': "CA/root-ca-unwrapped.key",
    'output_path': "certs",
    'valid_hours': 24,
    'signing_hash': "sha1",
}

logging = {
    'root': {'level': 'INFO', 'handlers': ['console']},
    'loggers': {
        'anchor': {'level': 'DEBUG'},
        'wsgi': {'level': 'INFO'},
    },
    'handlers': {
        'console': {
            'level': 'DEBUG',
            'class': 'logging.StreamHandler',
            'formatter': 'simple'
        }
    },
    'formatters': {
        'simple': {
            'format': ('%(asctime)s %(levelname)-5.5s [%(name)s]'
                       '[%(process)d/%(threadName)s] %(message)s')
        }
    }
}