config.yml

# === Main ===

layout: 'control_panel'

charset: 'UTF-8'

# If set to true, Dancer2 will look to X-Forwarded-Protocol and X-Forwarded-host.
behind_proxy: 1

# If set to true, Dancer2 will not add an "X-Powered-By" header and also
# append the Dancer2 version to the "Server" header.
no_server_tokens: 1

# Template engine.
template: 'Xslate'

# Session engine.
session: 'Redis'

# Custom dsl.
dsl_class: 'Dsl'

# === Engines ===

engines:

  # Dancer2::Template::Xslate.
  template:
    Xslate:
      location: 'views'
      module:
        - 'Text::Xslate::Bridge::Star'

# === Plugins ===

plugins:

  # Dancer2::Plugin::Auth::Extensible::Provider::DBIC.
  Auth::Extensible:
    realms:
      users:
        provider: 'DBIC'

        # get_user_details return an inflated DBIC object.
        user_as_object: 1

        # Schema.
        users_resultset: User
        roles_resultset: Role
        user_roles_resultset: UserRoles

        # Columns.
        users_username_column: username
        users_password_column: password
        roles_role_column: role
        users_lastlogin_column: lastlogin
        users_pwresetcode_column: pw_reset_code
        users_pwchanged_column: pw_changed

        # Days after which passwords expire.
        password_expiry_days: 30

        # Optionally set additional conditions when searching for the
        # user in the database. These are the same format as required
        # by DBIC, and are passed directly to the DBIC resultset search.
        user_valid_conditions:
          deleted: 0

        # Key for the user's roles to be returned in.
        roles_key: roles

        # Optionally specify the algorithm when encrypting new passwords.
        encryption_algorithm: SHA-256

    # Not using DPAE routes and pages.
    no_default_pages: 1
    # no_login_handler: 1
    record_lastlogin: 1

  # Dancer2::Plugin::FormValidator.
  FormValidator:
    session:
      namespace: '_form_validator'
    messages:
      language: en
      ucfirst: 1
    extensions:
      password:
        provider: 'Dancer2::Plugin::FormValidator::Extension::Password'
      dbic:
        provider: 'Dancer2::Plugin::FormValidator::Extension::DBIC'
        database: 'default'

  # Dancer2::Plugin::CSRFI
  CSRFI:
    session_key: '_csrf'
    template_token: 'csrf_token'
    validate_post: 1
    field_name: 'csrf_token'
    error_status: 419
    error_message: 'Page expired'