text: (window.webpackJsonp=window.webpackJsonp||[]).push([[11],{111:function(n,e,t){"use strict";t.d(e,"a",(function(){return m})),t.d(e,"b",(function(){return c}));var a=t(0),o=t.n(a);function i(n,e,t){return e in n?Object.defineProperty(n,e,{value:t,enumerable:!0,configurable:!0,writable:!0}):n[e]=t,n}function s(n,e){var t=Object.keys(n);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(n);e&&(a=a.filter((function(e){return Object.getOwnPropertyDescriptor(n,e).enumerable}))),t.push.apply(t,a)}return t}function r(n){for(var e=1;e<arguments.length;e++){var t=null!=arguments[e]?arguments[e]:{};e%2?s(Object(t),!0).forEach((function(e){i(n,e,t[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(n,Object.getOwnPropertyDescriptors(t)):s(Object(t)).forEach((function(e){Object.defineProperty(n,e,Object.getOwnPropertyDescriptor(t,e))}))}return n}function l(n,e){if(null==n)return{};var t,a,o=function(n,e){if(null==n)return{};var t,a,o={},i=Object.keys(n);for(a=0;a<i.length;a++)t=i[a],e.indexOf(t)>=0||(o[t]=n[t]);return o}(n,e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(n);for(a=0;a<i.length;a++)t=i[a],e.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(n,t)&&(o[t]=n[t])}return o}var u=o.a.createContext({}),E=function(n){var e=o.a.useContext(u),t=e;return n&&(t="function"==typeof n?n(e):r(r({},e),n)),t},m=function(n){var e=E(n.components);return o.a.createElement(u.Provider,{value:e},n.children)},d={inlineCode:"code",wrapper:function(n){var e=n.children;return o.a.createElement(o.a.Fragment,{},e)}},_=o.a.forwardRef((function(n,e){var t=n.components,a=n.mdxType,i=n.originalType,s=n.parentName,u=l(n,["components","mdxType","originalType","parentName"]),m=E(t),_=a,c=m["".concat(s,".").concat(_)]||m[_]||d[_]||i;return t?o.a.createElement(c,r(r({ref:e},u),{},{components:t})):o.a.createElement(c,r({ref:e},u))}));function c(n,e){var t=arguments,a=e&&e.mdxType;if("string"==typeof n||a){var i=t.length,s=new Array(i);s[0]=_;var r={};for(var l in e)hasOwnProperty.call(e,l)&&(r[l]=e[l]);r.originalType=n,r.mdxType="string"==typeof n?n:a,s[1]=r;for(var u=2;u<i;u++)s[u]=t[u];return o.a.createElement.apply(null,s)}return o.a.createElement.apply(null,t)}_.displayName="MDXCreateElement"},69:function(n,e,t){"use strict";t.r(e),t.d(e,"frontMatter",(function(){return s})),t.d(e,"metadata",(function(){return r})),t.d(e,"rightToc",(function(){return l})),t.d(e,"default",(function(){return E}));var a=t(2),o=t(6),i=(t(0),t(111)),s={id:"configuration",title:"Configuration"},r={unversionedId:"reference/configuration",id:"reference/configuration",isDocsHomePage:!1,title:"Configuration",description:"\x3c!-- THIS FILE IS BEING AUTO-GENERATED. DO NOT MODIFY IT AS ALL CHANGES WILL BE OVERWRITTEN.",source:"@site/docs/reference/configuration.md",slug:"/reference/configuration",permalink:"/oathkeeper/docs/next/reference/configuration",editUrl:"https://github.com/ory/oathkeeper/edit/master/docs/docs/reference/configuration.md",version:"current",lastUpdatedBy:"aeneasr",lastUpdatedAt:1601371031,sidebar:"docs",previous:{title:"Connect to ORY Hydra OAuth2 Token Introspection",permalink:"/oathkeeper/docs/next/oauth2-token-introspection-hydra"},next:{title:"REST API",permalink:"/oathkeeper/docs/next/reference/api"}},l=[],u={rightToc:l};function E(n){var e=n.components,t=Object(o.a)(n,["components"]);return Object(i.b)("wrapper",Object(a.a)({},u,t,{components:e,mdxType:"MDXLayout"}),Object(i.b)("p",null,"If file ",Object(i.b)("inlineCode",{parentName:"p"},"$HOME/.oathkeeper.yaml")," exists, it will be used as a configuration file which supports all\nconfiguration settings listed below."),Object(i.b)("p",null,"You can load the config file from another source using the ",Object(i.b)("inlineCode",{parentName:"p"},"-c path/to/config.yaml")," or ",Object(i.b)("inlineCode",{parentName:"p"},"--config path/to/config.yaml"),"\nflag: ",Object(i.b)("inlineCode",{parentName:"p"},"oathkeeper --config path/to/config.yaml"),"."),Object(i.b)("p",null,"Config files can be formatted as JSON, YAML and TOML. Some configuration values support reloading without server restart.\nAll configuration values can be set using environment variables, as documented below."),Object(i.b)("p",null,"To find out more about edge cases like setting string array values through environmental variables head to the\n",Object(i.b)("a",Object(a.a)({parentName:"p"},{href:"https://www.ory.sh/docs/ecosystem/configuring"}),"Configuring ORY services")," section."),Object(i.b)("pre",null,Object(i.b)("code",Object(a.a)({parentName:"pre"},{className:"language-yaml"}),'## ORY Oathkeeper Configuration\n#\n\n\n## HTTP(s) ##\n#\nserve:\n  \n  ## HTTP REST API ##\n  #\n  api:\n    \n    ## Port ##\n    #\n    # The port to listen on.\n    #\n    # Default value: 4456\n    #\n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export SERVE_API_PORT=<value>\n    # - Windows Command Line (CMD):\n    #    > set SERVE_API_PORT=<value>\n    #\n    port: -9816897\n\n    ## Host ##\n    #\n    # The network interface to listen on.\n    #\n    # Examples:\n    # - localhost\n    # - 127.0.0.1\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export SERVE_API_HOST=<value>\n    # - Windows Command Line (CMD):\n    #    > set SERVE_API_HOST=<value>\n    #\n    host: localhost\n\n    ## HTTP Timeouts ##\n    #\n    # Control the HTTP timeouts.\n    #\n    timeout:\n      \n      ## HTTP Read Timeout ##\n      #\n      # The maximum duration for reading the entire request, including the body.\n      #\n      # Default value: 5s\n      #\n      # Examples:\n      # - 5s\n      # - 5m\n      # - 5h\n      # \n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_API_TIMEOUT_READ=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_API_TIMEOUT_READ=<value>\n      #\n      read: 5m\n\n      ## HTTP Write Timeout ##\n      #\n      # The maximum duration before timing out writes of the response. Increase this parameter to prevent unexpected closing a client connection if an upstream request is responding slowly.\n      #\n      # Default value: 120s\n      #\n      # Examples:\n      # - 5s\n      # - 5m\n      # - 5h\n      # \n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_API_TIMEOUT_WRITE=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_API_TIMEOUT_WRITE=<value>\n      #\n      write: 5m\n\n      ## HTTP Idle Timeout ##\n      #\n      #  The maximum amount of time to wait for any action of a request session, reading data or writing the response.\n      #\n      # Default value: 120s\n      #\n      # Examples:\n      # - 5s\n      # - 5m\n      # - 5h\n      # \n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_API_TIMEOUT_IDLE=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_API_TIMEOUT_IDLE=<value>\n      #\n      idle: 5h\n\n    ## Cross Origin Resource Sharing (CORS) ##\n    #\n    # Configure [Cross Origin Resource Sharing (CORS)](http://www.w3.org/TR/cors/) using the following options.\n    #\n    cors:\n      \n      ## Enable CORS ##\n      #\n      # If set to true, CORS will be enabled and preflight-requests (OPTION) will be answered.\n      #\n      # Default value: false\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_API_CORS_ENABLED=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_API_CORS_ENABLED=<value>\n      #\n      enabled: false\n\n      ## Allowed Origins ##\n      #\n      # A list of origins a cross-domain request can be executed from. If the special * value is present in the list, all origins will be allowed. An origin may contain a wildcard (*) to replace 0 or more characters (i.e.: http://*.domain.com). Usage of wildcards implies a small performance penality. Only one wildcard can be used per origin.\n      #\n      # Default value: *\n      #\n      # Examples:\n      # - - https://example.com\n      #   - https://*.example.com\n      #   - https://*.foo.example.com\n      # \n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_API_CORS_ALLOWED_ORIGINS=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_API_CORS_ALLOWED_ORIGINS=<value>\n      #\n      allowed_origins:\n        - https://example.com\n        - https://*.example.com\n        - https://*.foo.example.com\n\n      ## Allowed HTTP Methods ##\n      #\n      # A list of methods the client is allowed to use with cross-domain requests.\n      #\n      # Default value: GET,POST,PUT,PATCH,DELETE\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_API_CORS_ALLOWED_METHODS=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_API_CORS_ALLOWED_METHODS=<value>\n      #\n      allowed_methods:\n        - CONNECT\n        - POST\n        - PATCH\n        - PUT\n        - HEAD\n\n      ## Allowed Request HTTP Headers ##\n      #\n      # A list of non simple headers the client is allowed to use with cross-domain requests.\n      #\n      # Default value: Authorization,Content-Type\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_API_CORS_ALLOWED_HEADERS=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_API_CORS_ALLOWED_HEADERS=<value>\n      #\n      allowed_headers:\n        - aliqua est ea Ut aute\n        - et sint adipisicing cillum\n        - sunt pariatur fugiat do\n        - sunt consectetur ut\n\n      ## Allowed Response HTTP Headers ##\n      #\n      # Indicates which headers are safe to expose to the API of a CORS API specification\n      #\n      # Default value: Content-Type\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_API_CORS_EXPOSED_HEADERS=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_API_CORS_EXPOSED_HEADERS=<value>\n      #\n      exposed_headers:\n        - ipsum qui Excepteur\n        - enim aliqua cupidatat\n        - Lorem aliqua incididunt tempor\n        - deserunt nostrud sint\n\n      ## Allow HTTP Credentials ##\n      #\n      # Indicates whether the request can include user credentials like cookies, HTTP authentication or client side SSL certificates.\n      #\n      # Default value: false\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_API_CORS_ALLOW_CREDENTIALS=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_API_CORS_ALLOW_CREDENTIALS=<value>\n      #\n      allow_credentials: true\n\n      ## Maximum Age ##\n      #\n      # Indicates how long (in seconds) the results of a preflight request can be cached. The default is 0 which stands for no max age.\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_API_CORS_MAX_AGE=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_API_CORS_MAX_AGE=<value>\n      #\n      max_age: -88142866\n\n      ## Enable Debugging ##\n      #\n      # Set to true to debug server side CORS issues.\n      #\n      # Default value: false\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_API_CORS_DEBUG=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_API_CORS_DEBUG=<value>\n      #\n      debug: false\n\n    ## HTTPS ##\n    #\n    # Configure HTTP over TLS (HTTPS). All options can also be set using environment variables by replacing dots (`.`) with underscores (`_`) and uppercasing the key. For example, `some.prefix.tls.key.path` becomes `export SOME_PREFIX_TLS_KEY_PATH`. If all keys are left undefined, TLS will be disabled.\n    #\n    tls:\n      \n      ## Private Key (PEM) ##\n      #\n      key:\n        \n        ## path ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export SERVE_API_TLS_KEY_PATH=<value>\n        # - Windows Command Line (CMD):\n        #    > set SERVE_API_TLS_KEY_PATH=<value>\n        #\n        path: path/to/file.pem\n\n        ## base64 ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export SERVE_API_TLS_KEY_BASE64=<value>\n        # - Windows Command Line (CMD):\n        #    > set SERVE_API_TLS_KEY_BASE64=<value>\n        #\n        base64: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tXG5NSUlEWlRDQ0FrMmdBd0lCQWdJRVY1eE90REFOQmdr...\n\n      ## TLS Certificate (PEM) ##\n      #\n      cert:\n        \n        ## path ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export SERVE_API_TLS_CERT_PATH=<value>\n        # - Windows Command Line (CMD):\n        #    > set SERVE_API_TLS_CERT_PATH=<value>\n        #\n        path: path/to/file.pem\n\n        ## base64 ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export SERVE_API_TLS_CERT_BASE64=<value>\n        # - Windows Command Line (CMD):\n        #    > set SERVE_API_TLS_CERT_BASE64=<value>\n        #\n        base64: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tXG5NSUlEWlRDQ0FrMmdBd0lCQWdJRVY1eE90REFOQmdr...\n\n  ## HTTP Reverse Proxy ##\n  #\n  proxy:\n    \n    ## Port ##\n    #\n    # The port to listen on.\n    #\n    # Default value: 4455\n    #\n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export SERVE_PROXY_PORT=<value>\n    # - Windows Command Line (CMD):\n    #    > set SERVE_PROXY_PORT=<value>\n    #\n    port: 82696024\n\n    ## Host ##\n    #\n    # The network interface to listen on. Leave empty to listen on all interfaces.\n    #\n    # Examples:\n    # - localhost\n    # - 127.0.0.1\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export SERVE_PROXY_HOST=<value>\n    # - Windows Command Line (CMD):\n    #    > set SERVE_PROXY_HOST=<value>\n    #\n    host: 127.0.0.1\n\n    ## HTTP Timeouts ##\n    #\n    # Control the HTTP timeouts.\n    #\n    timeout:\n      \n      ## HTTP Read Timeout ##\n      #\n      # The maximum duration for reading the entire request, including the body.\n      #\n      # Default value: 5s\n      #\n      # Examples:\n      # - 5s\n      # - 5m\n      # - 5h\n      # \n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_PROXY_TIMEOUT_READ=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_PROXY_TIMEOUT_READ=<value>\n      #\n      read: 5h\n\n      ## HTTP Write Timeout ##\n      #\n      # The maximum duration before timing out writes of the response. Increase this parameter to prevent unexpected closing a client connection if an upstream request is responding slowly.\n      #\n      # Default value: 120s\n      #\n      # Examples:\n      # - 5s\n      # - 5m\n      # - 5h\n      # \n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_PROXY_TIMEOUT_WRITE=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_PROXY_TIMEOUT_WRITE=<value>\n      #\n      write: 120s\n\n      ## HTTP Idle Timeout ##\n      #\n      #  The maximum amount of time to wait for any action of a request session, reading data or writing the response.\n      #\n      # Default value: 120s\n      #\n      # Examples:\n      # - 5s\n      # - 5m\n      # - 5h\n      # \n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_PROXY_TIMEOUT_IDLE=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_PROXY_TIMEOUT_IDLE=<value>\n      #\n      idle: 5s\n\n    ## Cross Origin Resource Sharing (CORS) ##\n    #\n    # Configure [Cross Origin Resource Sharing (CORS)](http://www.w3.org/TR/cors/) using the following options.\n    #\n    cors:\n      \n      ## Enable CORS ##\n      #\n      # If set to true, CORS will be enabled and preflight-requests (OPTION) will be answered.\n      #\n      # Default value: false\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_PROXY_CORS_ENABLED=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_PROXY_CORS_ENABLED=<value>\n      #\n      enabled: true\n\n      ## Allowed Origins ##\n      #\n      # A list of origins a cross-domain request can be executed from. If the special * value is present in the list, all origins will be allowed. An origin may contain a wildcard (*) to replace 0 or more characters (i.e.: http://*.domain.com). Usage of wildcards implies a small performance penality. Only one wildcard can be used per origin.\n      #\n      # Default value: *\n      #\n      # Examples:\n      # - - https://example.com\n      #   - https://*.example.com\n      #   - https://*.foo.example.com\n      # \n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_PROXY_CORS_ALLOWED_ORIGINS=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_PROXY_CORS_ALLOWED_ORIGINS=<value>\n      #\n      allowed_origins:\n        - https://example.com\n        - https://*.example.com\n        - https://*.foo.example.com\n\n      ## Allowed HTTP Methods ##\n      #\n      # A list of methods the client is allowed to use with cross-domain requests.\n      #\n      # Default value: GET,POST,PUT,PATCH,DELETE\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_PROXY_CORS_ALLOWED_METHODS=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_PROXY_CORS_ALLOWED_METHODS=<value>\n      #\n      allowed_methods:\n        - PATCH\n\n      ## Allowed Request HTTP Headers ##\n      #\n      # A list of non simple headers the client is allowed to use with cross-domain requests.\n      #\n      # Default value: Authorization,Content-Type\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_PROXY_CORS_ALLOWED_HEADERS=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_PROXY_CORS_ALLOWED_HEADERS=<value>\n      #\n      allowed_headers:\n        - pariatur\n        - dolore pariatur\n        - cupidatat\n        - occaecat cillum commodo enim laboris\n\n      ## Allowed Response HTTP Headers ##\n      #\n      # Indicates which headers are safe to expose to the API of a CORS API specification\n      #\n      # Default value: Content-Type\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_PROXY_CORS_EXPOSED_HEADERS=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_PROXY_CORS_EXPOSED_HEADERS=<value>\n      #\n      exposed_headers:\n        - proident enim voluptate laboris reprehenderit\n        - velit Excepteur magna pariatur laborum\n        - reprehenderit do irure\n        - culpa ut\n        - ex sint consectetur\n\n      ## Allow HTTP Credentials ##\n      #\n      # Indicates whether the request can include user credentials like cookies, HTTP authentication or client side SSL certificates.\n      #\n      # Default value: false\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_PROXY_CORS_ALLOW_CREDENTIALS=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_PROXY_CORS_ALLOW_CREDENTIALS=<value>\n      #\n      allow_credentials: true\n\n      ## Maximum Age ##\n      #\n      # Indicates how long (in seconds) the results of a preflight request can be cached. The default is 0 which stands for no max age.\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_PROXY_CORS_MAX_AGE=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_PROXY_CORS_MAX_AGE=<value>\n      #\n      max_age: 87483585\n\n      ## Enable Debugging ##\n      #\n      # Set to true to debug server side CORS issues.\n      #\n      # Default value: false\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export SERVE_PROXY_CORS_DEBUG=<value>\n      # - Windows Command Line (CMD):\n      #    > set SERVE_PROXY_CORS_DEBUG=<value>\n      #\n      debug: true\n\n    ## HTTPS ##\n    #\n    # Configure HTTP over TLS (HTTPS). All options can also be set using environment variables by replacing dots (`.`) with underscores (`_`) and uppercasing the key. For example, `some.prefix.tls.key.path` becomes `export SOME_PREFIX_TLS_KEY_PATH`. If all keys are left undefined, TLS will be disabled.\n    #\n    tls:\n      \n      ## Private Key (PEM) ##\n      #\n      key:\n        \n        ## path ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export SERVE_PROXY_TLS_KEY_PATH=<value>\n        # - Windows Command Line (CMD):\n        #    > set SERVE_PROXY_TLS_KEY_PATH=<value>\n        #\n        path: path/to/file.pem\n\n        ## base64 ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export SERVE_PROXY_TLS_KEY_BASE64=<value>\n        # - Windows Command Line (CMD):\n        #    > set SERVE_PROXY_TLS_KEY_BASE64=<value>\n        #\n        base64: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tXG5NSUlEWlRDQ0FrMmdBd0lCQWdJRVY1eE90REFOQmdr...\n\n      ## TLS Certificate (PEM) ##\n      #\n      cert:\n        \n        ## path ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export SERVE_PROXY_TLS_CERT_PATH=<value>\n        # - Windows Command Line (CMD):\n        #    > set SERVE_PROXY_TLS_CERT_PATH=<value>\n        #\n        path: path/to/file.pem\n\n        ## base64 ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export SERVE_PROXY_TLS_CERT_BASE64=<value>\n        # - Windows Command Line (CMD):\n        #    > set SERVE_PROXY_TLS_CERT_BASE64=<value>\n        #\n        base64: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tXG5NSUlEWlRDQ0FrMmdBd0lCQWdJRVY1eE90REFOQmdr...\n\n  ## Prometheus scraping endpoint ##\n  #\n  prometheus:\n    \n    ## Port ##\n    #\n    # The port to listen on.\n    #\n    # Default value: 9000\n    #\n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export SERVE_PROMETHEUS_PORT=<value>\n    # - Windows Command Line (CMD):\n    #    > set SERVE_PROMETHEUS_PORT=<value>\n    #\n    port: 668248\n\n    ## Host ##\n    #\n    # The network interface to listen on. Leave empty to listen on all interfaces.\n    #\n    # Examples:\n    # - localhost\n    # - 127.0.0.1\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export SERVE_PROMETHEUS_HOST=<value>\n    # - Windows Command Line (CMD):\n    #    > set SERVE_PROMETHEUS_HOST=<value>\n    #\n    host: ""\n\n    ## Path ##\n    #\n    # The path to provide metrics on\n    #\n    # Default value: /metrics\n    #\n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export SERVE_PROMETHEUS_METRICS_PATH=<value>\n    # - Windows Command Line (CMD):\n    #    > set SERVE_PROMETHEUS_METRICS_PATH=<value>\n    #\n    metrics_path: Ut Excepteur\n\n    ## CollapsePaths ##\n    #\n    # When set to true the request label will include just the first segment of the request path\n    #\n    # Default value: true\n    #\n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export SERVE_PROMETHEUS_COLLAPSE_REQUEST_PATHS=<value>\n    # - Windows Command Line (CMD):\n    #    > set SERVE_PROMETHEUS_COLLAPSE_REQUEST_PATHS=<value>\n    #\n    collapse_request_paths: false\n\n## Access Rules ##\n#\n# Configure access rules. All sub-keys support configuration reloading without restarting.\n#\naccess_rules:\n  \n  ## Repositories ##\n  #\n  # Locations (list of URLs) where access rules should be fetched from on boot. It is expected that the documents at those locations return a JSON or YAML Array containing ORY Oathkeeper Access Rules:\n  # \n  # - If the URL Scheme is `file://`, the access rules (an array of access rules is expected) will be fetched from the local file system.\n  # - If the URL Scheme is `inline://`, the access rules (an array of access rules is expected) are expected to be a base64 encoded (with padding!) JSON/YAML string (base64_encode(`[{"id":"foo-rule","authenticators":[....]}]`)).\n  # - If the URL Scheme is `http://` or `https://`, the access rules (an array of access rules is expected) will be fetched from the provided HTTP(s) location.\n  #\n  # Examples:\n  # - - file://path/to/rules.json\n  #   - inline://W3siaWQiOiJmb28tcnVsZSIsImF1dGhlbnRpY2F0b3JzIjpbXX1d\n  #   - https://path-to-my-rules/rules.json\n  # \n  # Set this value using environment variables on\n  # - Linux/macOS:\n  #    $ export ACCESS_RULES_REPOSITORIES=<value>\n  # - Windows Command Line (CMD):\n  #    > set ACCESS_RULES_REPOSITORIES=<value>\n  #\n  repositories:\n    - file://path/to/rules.json\n    - inline://W3siaWQiOiJmb28tcnVsZSIsImF1dGhlbnRpY2F0b3JzIjpbXX1d\n    - https://path-to-my-rules/rules.json\n\n  ## Matching strategy ##\n  #\n  # This an optional field describing matching strategy. Currently supported values are \'glob\' and \'regexp\'.\n  #\n  # Default value: regexp\n  #\n  # One of:\n  # - glob\n  # - regexp\n  # \n  # Examples:\n  # - glob\n  # \n  # Set this value using environment variables on\n  # - Linux/macOS:\n  #    $ export ACCESS_RULES_MATCHING_STRATEGY=<value>\n  # - Windows Command Line (CMD):\n  #    > set ACCESS_RULES_MATCHING_STRATEGY=<value>\n  #\n  matching_strategy: regexp\n\n## Authenticators ##\n#\n# For more information on authenticators head over to: https://www.ory.sh/oathkeeper/docs/pipeline/authn\n#\nauthenticators:\n  \n  ## Anonymous ##\n  #\n  # The [`anonymous` authenticator](https://www.ory.sh/oathkeeper/docs/pipeline/authn#anonymous).\n  #\n  anonymous:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export AUTHENTICATORS_ANONYMOUS_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set AUTHENTICATORS_ANONYMOUS_ENABLED=<value>\n    #\n    enabled: true\n\n    ## Anonymous Authenticator Configuration ##\n    #\n    # This section is optional when the authenticator is disabled.\n    #\n    config:\n      \n      ## Anonymous Subject ##\n      #\n      # Sets the anonymous username.\n      #\n      # Default value: anonymous\n      #\n      # Examples:\n      # - guest\n      # - anon\n      # - unknown\n      # \n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export AUTHENTICATORS_ANONYMOUS_CONFIG_SUBJECT=<value>\n      # - Windows Command Line (CMD):\n      #    > set AUTHENTICATORS_ANONYMOUS_CONFIG_SUBJECT=<value>\n      #\n      subject: guest\n\n  ## No Operation (noop) ##\n  #\n  # The [`noop` authenticator](https://www.ory.sh/oathkeeper/docs/pipeline/authn#noop).\n  #\n  noop:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export AUTHENTICATORS_NOOP_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set AUTHENTICATORS_NOOP_ENABLED=<value>\n    #\n    enabled: false\n\n  ## Unauthorized ##\n  #\n  # The [`unauthorized` authenticator](https://www.ory.sh/oathkeeper/docs/pipeline/authn#unauthorized).\n  #\n  unauthorized:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export AUTHENTICATORS_UNAUTHORIZED_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set AUTHENTICATORS_UNAUTHORIZED_ENABLED=<value>\n    #\n    enabled: true\n\n  ## Cookie Session ##\n  #\n  # The [`cookie_session` authenticator](https://www.ory.sh/oathkeeper/docs/pipeline/authn#cookie_session).\n  #\n  cookie_session:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export AUTHENTICATORS_COOKIE_SESSION_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set AUTHENTICATORS_COOKIE_SESSION_ENABLED=<value>\n    #\n    enabled: true\n\n  ## JSON Web Token (jwt) ##\n  #\n  # The [`jwt` authenticator](https://www.ory.sh/oathkeeper/docs/pipeline/authn#jwt).\n  #\n  jwt:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export AUTHENTICATORS_JWT_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set AUTHENTICATORS_JWT_ENABLED=<value>\n    #\n    enabled: true\n\n  ## OAuth 2.0 Client Credentials ##\n  #\n  # The [`oauth2_client_credentials` authenticator](https://www.ory.sh/oathkeeper/docs/pipeline/authn#oauth2_client_credentials).\n  #\n  oauth2_client_credentials:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export AUTHENTICATORS_OAUTH2_CLIENT_CREDENTIALS_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set AUTHENTICATORS_OAUTH2_CLIENT_CREDENTIALS_ENABLED=<value>\n    #\n    enabled: false\n\n  ## OAuth 2.0 Token Introspection ##\n  #\n  # The [`oauth2_introspection` authenticator](https://www.ory.sh/oathkeeper/docs/pipeline/authn#oauth2_introspection).\n  #\n  oauth2_introspection:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export AUTHENTICATORS_OAUTH2_INTROSPECTION_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set AUTHENTICATORS_OAUTH2_INTROSPECTION_ENABLED=<value>\n    #\n    enabled: true\n\n## Error Handling ##\n#\nerrors:\n  \n  ## Error Handling Fallback ##\n  #\n  # This array defines how to handle errors when no "when" clause matches. If you have, for example, enabled redirect and json in your access rule, you could tell ORY Oathkeeper to try sending JSON if the request does not match the access rule definition\n  #\n  # Default value: json\n  #\n  # Examples:\n  # - - redirect\n  # \n  # Set this value using environment variables on\n  # - Linux/macOS:\n  #    $ export ERRORS_FALLBACK=<value>\n  # - Windows Command Line (CMD):\n  #    > set ERRORS_FALLBACK=<value>\n  #\n  fallback:\n    - json\n\n  ## Individual Error Handler Configuration ##\n  #\n  handlers:\n    \n    ## HTTP WWW-Authenticate Handler ##\n    #\n    # Responds with the WWW-Authenticate HTTP Response\n    #\n    www_authenticate:\n      \n      ## Enabled ##\n      #\n      # En-/disables this component.\n      #\n      # Default value: false\n      #\n      # Examples:\n      # - true\n      # \n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export ERRORS_HANDLERS_WWW_AUTHENTICATE_ENABLED=<value>\n      # - Windows Command Line (CMD):\n      #    > set ERRORS_HANDLERS_WWW_AUTHENTICATE_ENABLED=<value>\n      #\n      enabled: false\n\n    ## HTTP Redirect Error Handler ##\n    #\n    # Responds with a 301/302 HTTP redirect.\n    #\n    redirect:\n      \n      ## config ##\n      #\n      config:\n        \n        ## to ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export ERRORS_HANDLERS_REDIRECT_CONFIG_TO=<value>\n        # - Windows Command Line (CMD):\n        #    > set ERRORS_HANDLERS_REDIRECT_CONFIG_TO=<value>\n        #\n        to: http://my-app.com/dashboard\n\n        ## code ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export ERRORS_HANDLERS_REDIRECT_CONFIG_CODE=<value>\n        # - Windows Command Line (CMD):\n        #    > set ERRORS_HANDLERS_REDIRECT_CONFIG_CODE=<value>\n        #\n        code: 301\n\n        ## return_to_query_param ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export ERRORS_HANDLERS_REDIRECT_CONFIG_RETURN_TO_QUERY_PARAM=<value>\n        # - Windows Command Line (CMD):\n        #    > set ERRORS_HANDLERS_REDIRECT_CONFIG_RETURN_TO_QUERY_PARAM=<value>\n        #\n        return_to_query_param: Vcsc\n\n        ## when ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export ERRORS_HANDLERS_REDIRECT_CONFIG_WHEN=<value>\n        # - Windows Command Line (CMD):\n        #    > set ERRORS_HANDLERS_REDIRECT_CONFIG_WHEN=<value>\n        #\n        when:\n          - error:\n              - not_found\n            request:\n              cidr:\n                - aliquip ut adipisicing minim eu\n              header:\n                content_type: []\n                accept: []\n          - error:\n              - forbidden\n              - internal_server_error\n              - forbidden\n              - unauthorized\n            request:\n              cidr:\n                - Ut velit qui in\n                - non dolore\n                - nostrud sunt velit in\n                - sit\n                - Lorem\n              header:\n                content_type: []\n                accept: []\n\n      ## Enabled ##\n      #\n      # En-/disables this component.\n      #\n      # Default value: false\n      #\n      # Examples:\n      # - true\n      # \n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export ERRORS_HANDLERS_REDIRECT_ENABLED=<value>\n      # - Windows Command Line (CMD):\n      #    > set ERRORS_HANDLERS_REDIRECT_ENABLED=<value>\n      #\n      enabled: true\n\n    ## JSON Error Handler ##\n    #\n    # Responds with a JSON error response\n    #\n    # Default value: [object Object]\n    #\n    json:\n      \n      ## config ##\n      #\n      config:\n        \n        ## verbose ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export ERRORS_HANDLERS_JSON_CONFIG_VERBOSE=<value>\n        # - Windows Command Line (CMD):\n        #    > set ERRORS_HANDLERS_JSON_CONFIG_VERBOSE=<value>\n        #\n        verbose: false\n\n        ## when ##\n        #\n        # Set this value using environment variables on\n        # - Linux/macOS:\n        #    $ export ERRORS_HANDLERS_JSON_CONFIG_WHEN=<value>\n        # - Windows Command Line (CMD):\n        #    > set ERRORS_HANDLERS_JSON_CONFIG_WHEN=<value>\n        #\n        when:\n          - error:\n              - unauthorized\n              - internal_server_error\n              - forbidden\n              - forbidden\n            request:\n              cidr:\n                - et\n                - sunt\n              header:\n                content_type: []\n                accept: []\n          - error:\n              - forbidden\n              - internal_server_error\n              - not_found\n              - forbidden\n              - unauthorized\n            request:\n              cidr:\n                - do veniam quis nulla\n                - ut consectetur pariatur\n              header:\n                content_type: []\n                accept: []\n          - error:\n              - internal_server_error\n              - internal_server_error\n              - not_found\n              - internal_server_error\n              - unauthorized\n            request:\n              cidr:\n                - deserunt\n                - Lorem in incididunt\n                - anim eiusmod aute sed exercitation\n                - Lorem sit\n                - enim\n              header:\n                content_type: []\n                accept: []\n          - error:\n              - unauthorized\n            request:\n              cidr:\n                - mollit\n                - tempor\n                - id\n                - non in dolor\n                - amet\n              header:\n                content_type: []\n                accept: []\n\n      ## Enabled ##\n      #\n      # En-/disables this component.\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export ERRORS_HANDLERS_JSON_ENABLED=<value>\n      # - Windows Command Line (CMD):\n      #    > set ERRORS_HANDLERS_JSON_ENABLED=<value>\n      #\n      enabled: true\n\n## Authorizers ##\n#\n# For more information on authorizers head over to: https://www.ory.sh/oathkeeper/docs/pipeline/authz\n#\nauthorizers:\n  \n  ## Allow ##\n  #\n  # The [`allow` authorizer](https://www.ory.sh/oathkeeper/docs/pipeline/authz#allow).\n  #\n  allow:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export AUTHORIZERS_ALLOW_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set AUTHORIZERS_ALLOW_ENABLED=<value>\n    #\n    enabled: false\n\n  ## Deny ##\n  #\n  # The [`deny` authorizer](https://www.ory.sh/oathkeeper/docs/pipeline/authz#allow).\n  #\n  deny:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export AUTHORIZERS_DENY_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set AUTHORIZERS_DENY_ENABLED=<value>\n    #\n    enabled: false\n\n  ## ORY Keto Access Control Policies Engine ##\n  #\n  # The [`keto_engine_acp_ory` authorizer](https://www.ory.sh/oathkeeper/docs/pipeline/authz#keto_engine_acp_ory).\n  #\n  keto_engine_acp_ory:\n    \n    ## config ##\n    #\n    config:\n      \n      ## base_url ##\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export AUTHORIZERS_KETO_ENGINE_ACP_ORY_CONFIG_BASE_URL=<value>\n      # - Windows Command Line (CMD):\n      #    > set AUTHORIZERS_KETO_ENGINE_ACP_ORY_CONFIG_BASE_URL=<value>\n      #\n      base_url: http://my-keto/\n\n      ## required_action ##\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export AUTHORIZERS_KETO_ENGINE_ACP_ORY_CONFIG_REQUIRED_ACTION=<value>\n      # - Windows Command Line (CMD):\n      #    > set AUTHORIZERS_KETO_ENGINE_ACP_ORY_CONFIG_REQUIRED_ACTION=<value>\n      #\n      required_action: esse proident anim\n\n      ## required_resource ##\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export AUTHORIZERS_KETO_ENGINE_ACP_ORY_CONFIG_REQUIRED_RESOURCE=<value>\n      # - Windows Command Line (CMD):\n      #    > set AUTHORIZERS_KETO_ENGINE_ACP_ORY_CONFIG_REQUIRED_RESOURCE=<value>\n      #\n      required_resource: nostrud\n\n      ## subject ##\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export AUTHORIZERS_KETO_ENGINE_ACP_ORY_CONFIG_SUBJECT=<value>\n      # - Windows Command Line (CMD):\n      #    > set AUTHORIZERS_KETO_ENGINE_ACP_ORY_CONFIG_SUBJECT=<value>\n      #\n      subject: Lorem ad et sunt\n\n      ## flavor ##\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export AUTHORIZERS_KETO_ENGINE_ACP_ORY_CONFIG_FLAVOR=<value>\n      # - Windows Command Line (CMD):\n      #    > set AUTHORIZERS_KETO_ENGINE_ACP_ORY_CONFIG_FLAVOR=<value>\n      #\n      flavor: ullamco nulla aliquip Duis Excepteur\n\n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export AUTHORIZERS_KETO_ENGINE_ACP_ORY_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set AUTHORIZERS_KETO_ENGINE_ACP_ORY_ENABLED=<value>\n    #\n    enabled: true\n\n  ## Remote ##\n  #\n  # The [`remote` authorizer](https://www.ory.sh/oathkeeper/docs/pipeline/authz#remote).\n  #\n  remote:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export AUTHORIZERS_REMOTE_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set AUTHORIZERS_REMOTE_ENABLED=<value>\n    #\n    enabled: false\n\n  ## Remote JSON ##\n  #\n  # The [`remote_json` authorizer](https://www.ory.sh/oathkeeper/docs/pipeline/authz#remote_json).\n  #\n  remote_json:\n    \n    ## config ##\n    #\n    config:\n      \n      ## remote ##\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export AUTHORIZERS_REMOTE_JSON_CONFIG_REMOTE=<value>\n      # - Windows Command Line (CMD):\n      #    > set AUTHORIZERS_REMOTE_JSON_CONFIG_REMOTE=<value>\n      #\n      remote: https://host/path\n\n      ## payload ##\n      #\n      # Set this value using environment variables on\n      # - Linux/macOS:\n      #    $ export AUTHORIZERS_REMOTE_JSON_CONFIG_PAYLOAD=<value>\n      # - Windows Command Line (CMD):\n      #    > set AUTHORIZERS_REMOTE_JSON_CONFIG_PAYLOAD=<value>\n      #\n      payload: \'{"subject":"{{ .Subject }}"}\'\n\n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export AUTHORIZERS_REMOTE_JSON_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set AUTHORIZERS_REMOTE_JSON_ENABLED=<value>\n    #\n    enabled: true\n\n## Mutators ##\n#\n# For more information on mutators head over to: https://www.ory.sh/oathkeeper/docs/pipeline/mutator\n#\nmutators:\n  \n  ## No Operation (noop) ##\n  #\n  # The [`noop` mutator](https://www.ory.sh/oathkeeper/docs/pipeline/mutator#noop).\n  #\n  noop:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export MUTATORS_NOOP_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set MUTATORS_NOOP_ENABLED=<value>\n    #\n    enabled: true\n\n  ## HTTP Cookie ##\n  #\n  # The [`cookie` mutator](https://www.ory.sh/oathkeeper/docs/pipeline/mutator#cookie).\n  #\n  cookie:\n    \n    ## config ##\n    #\n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export MUTATORS_COOKIE_CONFIG=<value>\n    # - Windows Command Line (CMD):\n    #    > set MUTATORS_COOKIE_CONFIG=<value>\n    #\n    config: {}\n\n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export MUTATORS_COOKIE_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set MUTATORS_COOKIE_ENABLED=<value>\n    #\n    enabled: true\n\n  ## HTTP Header ##\n  #\n  # The [`header` mutator](https://www.ory.sh/oathkeeper/docs/pipeline/mutator#header).\n  #\n  header:\n    \n    ## config ##\n    #\n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export MUTATORS_HEADER_CONFIG=<value>\n    # - Windows Command Line (CMD):\n    #    > set MUTATORS_HEADER_CONFIG=<value>\n    #\n    config: {}\n\n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export MUTATORS_HEADER_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set MUTATORS_HEADER_ENABLED=<value>\n    #\n    enabled: false\n\n  ## Hydrator ##\n  #\n  # The [`hydrator` mutator](https://www.ory.sh/oathkeeper/docs/pipeline/mutator#hydrator).\n  #\n  hydrator:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export MUTATORS_HYDRATOR_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set MUTATORS_HYDRATOR_ENABLED=<value>\n    #\n    enabled: false\n\n  ## ID Token (JSON Web Token) ##\n  #\n  # The [`id_token` mutator](https://www.ory.sh/oathkeeper/docs/pipeline/mutator#id_token).\n  #\n  id_token:\n    \n    ## Enabled ##\n    #\n    # En-/disables this component.\n    #\n    # Default value: false\n    #\n    # Examples:\n    # - true\n    # \n    # Set this value using environment variables on\n    # - Linux/macOS:\n    #    $ export MUTATORS_ID_TOKEN_ENABLED=<value>\n    # - Windows Command Line (CMD):\n    #    > set MUTATORS_ID_TOKEN_ENABLED=<value>\n    #\n    enabled: false\n\n## Log ##\n#\n# Configure logging using the following options. Logging will always be sent to stdout and stderr.\n#\nlog:\n  \n  ## Level ##\n  #\n  # Debug enables stack traces on errors. Can also be set using environment variable LOG_LEVEL.\n  #\n  # Default value: info\n  #\n  # One of:\n  # - panic\n  # - fatal\n  # - error\n  # - warn\n  # - info\n  # - debug\n  # \n  # Set this value using environment variables on\n  # - Linux/macOS:\n  #    $ export LOG_LEVEL=<value>\n  # - Windows Command Line (CMD):\n  #    > set LOG_LEVEL=<value>\n  #\n  level: info\n\n  ## Format ##\n  #\n  # The log format can either be text or JSON.\n  #\n  # Default value: text\n  #\n  # One of:\n  # - text\n  # - json\n  # \n  # Set this value using environment variables on\n  # - Linux/macOS:\n  #    $ export LOG_FORMAT=<value>\n  # - Windows Command Line (CMD):\n  #    > set LOG_FORMAT=<value>\n  #\n  format: text\n\n## Profiling ##\n#\n# Enables CPU or memory profiling if set. For more details on profiling Go programs read [Profiling Go Programs](https://blog.golang.org/profiling-go-programs).\n#\n# One of:\n# - cpu\n# - mem\n# - ""\n# \n# Set this value using environment variables on\n# - Linux/macOS:\n#    $ export PROFILING=<value>\n# - Windows Command Line (CMD):\n#    > set PROFILING=<value>\n#\nprofiling: mem\n\n## The Oathkeeper version this config is written for. ##\n#\n# SemVer according to https://semver.org/ prefixed with `v` as in our releases.\n#\n# Set this value using environment variables on\n# - Linux/macOS:\n#    $ export VERSION=<value>\n# - Windows Command Line (CMD):\n#    > set VERSION=<value>\n#\nversion: v0.0.3-0.0rhIasLxcEe.12vyAXY-XS0.82228802.0.1564573626z8faC63s5J.0\n\n')))}E.isMDXComponent=!0}}]);