### BASIC ###
DOMAIN=https://{{ vaultwarden_domain }}
LOG_LEVEL={{ vaultwarden_loglevel }}
IP_HEADER=X-Real-IP

SIGNUPS_ALLOWED={{ vaultwarden_signups_allowed | bool | lower }}
{% if vaultwarden_signups_domains_whitelist %}
SIGNUPS_DOMAINS_WHITELIST={{ vaultwarden_signups_domains_whitelist }}
{% endif %}
SIGNUPS_VERIFY={{ vaultwarden_signups_verify | bool | lower }}
INVITATIONS_ALLOWED={{ vaultwarden_invitations_allowed | bool | lower }}
INVITATION_ORG_NAME={{ vaultwarden_invitation_org_name }}
SHOW_PASSWORD_HINT={{ vaultwarden_show_password_hint | bool | lower }}
PASSWORD_ITERATIONS={{ vaultwarden_password_iterations }}

{# admin panel stays disabled without a token #}
{% if vaultwarden_admin_token %}
ADMIN_TOKEN='{{ vaultwarden_admin_token }}'
{% endif %}


### SSO ###
SSO_ENABLED={{ vaultwarden_sso_enabled | bool | lower }}
{% if vaultwarden_sso_enabled | bool %}
SSO_ONLY={{ vaultwarden_sso_only | bool | lower }}
SSO_SIGNUPS_MATCH_EMAIL={{ vaultwarden_sso_signups_match_email | bool | lower }}
SSO_AUTHORITY={{ vaultwarden_sso_authority }}
SSO_SCOPES="{{ vaultwarden_sso_scopes }}"
SSO_PKCE=true
SSO_CLIENT_ID={{ vaultwarden_sso_client_id }}
SSO_CLIENT_SECRET='{{ vaultwarden_sso_client_secret }}'
{% endif %}


### SMTP ###
SMTP_HOST={{ vaultwarden_smtp_host }}
SMTP_PORT={{ vaultwarden_smtp_port }}
SMTP_SECURITY={{ vaultwarden_smtp_security }}
SMTP_FROM={{ vaultwarden_smtp_from }}
SMTP_FROM_NAME={{ vaultwarden_smtp_from_name }}
SMTP_USERNAME={{ vaultwarden_smtp_user }}
SMTP_PASSWORD='{{ vaultwarden_smtp_pass }}'