config.toml

[token]
format = "paseto"
version = "v4"
purpose = "local"
key_path = "./keys/paseto.key"
issuer = "schema-forge"

# Rate limiting (acton-service governor backend).
# Defaults are tuned for production (100 req/min/user). The seed script
# inside `task demo` fires ~50 entity creates back-to-back as the bootstrap
# admin, so the production cap trips immediately. Lift the per-user budget
# to 6000/min (≈100 req/s) so demo seeding completes while the middleware
# stays active for any rate-limit behavior testing.
[rate_limit]
per_user_rpm = 6000
per_client_rpm = 60000

# Human-facing name of this deployment. Shown to onboarding users in
# invitation emails (body + subject) and used as the default email From
# display-name when the `from` below is a bare address. Defaults to
# "SchemaForge" when unset — set it to your application's name.
# [schema_forge]
# project_name = "Bob's Dog Scheduling"

# Outbound email (user invitations, issue #71). Disabled by default.
# The SMTP password is NEVER read from this file — supply it at runtime via
# the SCHEMAFORGE_SMTP_PASSWORD environment variable so the secret stays out
# of git. (acton-service's ACTON_-prefixed env layering can't target the
# `[schema_forge]` section, so this dedicated env var is the supported path.)
# [schema_forge.email]
# enabled = true
# host = "mail.example.gov"
# port = 465                 # 465 = implicit TLS (default); 587 = STARTTLS
# tls = "implicit"           # or "start_tls"
# from = "Example <noreply@example.gov>"
# username = "noreply@example.gov"
# public_base_url = "https://app.example.gov"   # used to build invite-accept links

# Webhook notification settings
# [schema_forge.webhooks]
# enabled = true
# default_retry_count = 3
# default_timeout_seconds = 10
# max_concurrent_deliveries = 100
# signing_secret = "set-via-env-var"
# allowed_url_schemes = ["https"]