_format_version: '1.1'

###
### Consumers / Users
###
consumers:
- username: anon
  keyauth_credentials:
    - key: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyb2xlIjoiYW5vbiIsImlzcyI6InN1cGFiYXNlIiwianRpIjoiMjVhYTQ5YTYtZTdjMi00ZDFlLTkyNWYtMWY5MjMxOTYxMjFkIiwiaWF0IjoxNjgzNjM4Mjg0LCJleHAiOjE2ODM2NDE4ODR9.3caVrpdo8l7l3uSCChe3JInrTln4evTGwb6LAI_SdnU
- username: service_role
  keyauth_credentials:
    - key: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyb2xlIjoic2VydmljZV9yb2xlIiwiaXNzIjoic3VwYWJhc2UiLCJqdGkiOiJhZTNlNWFmZi02ODNlLTRjMGItYTQ5MC1iYzMxZTU0NDhkZjUiLCJpYXQiOjE2ODM2MzgyODQsImV4cCI6MTY4MzY0MTg4NH0.Xf-Z7g5YwMbg04NfvTdtp5GhcqCXrQdPltN_47uMFfw

###
### Access Control List
###
acls:
- consumer: anon
  group: anon
- consumer: service_role
  group: admin

###
### API Routes
###
services:
## Open Auth routes
- name: test
  url: https://kongtest.nick-prim.workers.dev/
  routes:
    - name: test
      strip_path: true
      paths:
        - /test
  plugins:
    - name: cors
- name: auth-v1-open
  host: "[fdaa:2:21ef:a7b:104:294c:d066:2]"
  port: 9999
  routes:
    - name: auth-v1-open
      strip_path: true
      paths:
        - /auth/v1/verify
  plugins:
    - name: cors
- name: auth-v1-open-callback
  host: "[fdaa:2:21ef:a7b:104:294c:d066:2]"
  port: 9999
  routes:
    - name: auth-v1-open-callback
      strip_path: true
      paths:
        - /auth/v1/callback
  plugins:
    - name: cors
- name: auth-v1-open-authorize
  host: "[fdaa:2:21ef:a7b:104:294c:d066:2]"
  port: 9999
  routes:
    - name: auth-v1-open-authorize
      strip_path: true
      paths:
        - /auth/v1/authorize
  plugins:
    - name: cors

## Secure Auth routes
- name: auth-v1
  host: "[fdaa:2:21ef:a7b:104:294c:d066:2]"
  port: 9999
  routes:
    - name: auth-v1-all
      strip_path: true
      paths:
        - /auth/v1/
  plugins:
    - name: cors
    - name: key-auth
      config:
        hide_credentials: false
    - name: acl
      config:
        hide_groups_header: true
        allow:
          - admin
          - anon

## Secure REST routes
- name: rest-v1
  url: "https://quiet-snow-8383.fly.dev/"
  routes:
    - name: rest-v1-all
      strip_path: true
      paths:
        - /rest/v1/
  plugins:
    - name: cors
    - name: key-auth
      config:
        hide_credentials: true
    - name: acl
      config:
        hide_groups_header: true
        allow:
          - admin
          - anon
## Secure Database routes
- name: meta
  host: "[fdaa:2:21ef:a7b:f8:e57d:369d:2]"
  port: 8080
  routes:
    - name: meta-all
      strip_path: true
      paths:
        - /pg/