[frontend]
# The name of the instance as shown in the page title
site_name = Some Snazzy Name


[security]
# A comma-separated list of entitlements (as read from oauth) that should
# be required to access the site. Access is granted if the user has any of
# the listed entitlements.
# Optional. If omitted, anyone can access the site.
access_entitlement = urn:mace:some:entitlement

# A comma-separated list of entitlement (as read from oauth) that should
# be required to see information beyond who is assigned which location, and
# to export data to file. Permission is granted if the user has any of
# the listed entitlements.
# Optional. If omitted, this permission level does not apply.
export_entitlement = urn:mace:some:other-entitlement

# A comma-separated list of entitlements (as read from oauth) that should
# be required to make changes on the site. Implies export rights. Permission
# is granted if the user has any of the listed entitlements.
# Optional. If omitted, anyone with access is granted this permission.
admin_entitlement = urn:mace:yet:another-entitlement


[oauth]
authorization_url = https://oauth.example/authorize
token_url = https://oauth.example/exchange
introspection_url = https://oauth.example/introspect
client_id = some_id_string
client_secret = some_secret_string