apiVersion: v1
kind: ConfigMap
metadata:
  name: config
data:
  DOMAIN: "https://passwords.kluster.moll.re"
  SIGNUPS_ALLOWED: "false"
  INVITATIONS_ALLOWED: "true" # not sure about that?
  ADMIN_TOKEN: null # not set in order to disable the admin interface
  SHOW_PASSWORD_HINT: "false"

  SSO_ENABLED: "true"
  SSO_ONLY: "true" # disable email+Master password authentication
  SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION: "true"
  # remaining SSO_ variables are set in a secret