# {{ ansible_managed }}
# Fleet-managed AuthForge policy. Hand-edits will be overwritten on the next
# Ansible run. To override locally, drop a higher-numbered file in
# /etc/authforge/policy.d/ (e.g. 99-local.conf).

{% for stack, cfg in authforge_stacks.items() %}
[stacks.{{ stack }}]
mode = "{{ cfg.mode }}"
methods = {{ cfg.methods | to_json }}

{% endfor %}
[storage]
backend = "{{ authforge_storage_backend }}"
central_path = "{{ authforge_storage_central_path }}"

[firstrun]
default_required_methods = {{ authforge_firstrun_methods | to_json }}
deadline_hours = {{ authforge_firstrun_deadline_hours }}