issuer: http://localhost:5556/dex

storage:
  type: memory

web:
  http: 0.0.0.0:5556

connectors:
- type: ldap
  id: ldap
  name: LDAP
  config:
    host: ldap:389
    insecureNoSSL: true
    bindDN: cn=admin,dc=example,dc=com
    bindPW: admin
    userSearch:
      baseDN: ou=people,dc=example,dc=com
      filter: "(objectClass=inetOrgPerson)"
      username: uid
      idAttr: uid
      emailAttr: mail
      nameAttr: cn
    groupSearch:
      baseDN: ou=groups,dc=example,dc=com
      filter: "(objectClass=groupOfNames)"
      userMatchers:
      - userAttr: DN
        groupAttr: member
      nameAttr: cn

oauth2:
  skipApprovalScreen: true

staticClients:
- id: mattermost
  redirectURIs:
  - 'http://localhost:8065/signup/openid/complete'
  - 'http://localhost:8065/login/openid/complete'
  name: 'Mattermost'
  secret: mattermost-secret-key-12345

enablePasswordDB: false