infra/roles/hackmd/templates/config.json.j2

{
    "production": {
        "domain": "{{ hackmd_domain }}",
        "protocolUseSSL": true,
        "allowAnonymous": false,
        "allowAnonymousEdits": true,
        "allowFreeURL": true,
        "sessionSecret": "{{ hackmd_secret }}",
        "hsts": {
            "enable": true,
            "maxAgeSeconds": "2592000",
            "includeSubdomains": true,
            "preload": true
        },
        "csp": {
            "enable": true,
            "directives": {
            },
            "upgradeInsecureRequests": "auto",
            "addDefaults": true,
            "addDisqus": true,
            "addGoogleAnalytics": true
        },
        "db": {
            "username": "{{ hackmd_dbuser }}",
            "password": "{{ hackmd_dbpass }}",
            "database": "{{ hackmd_dbname }}",
            "host": "localhost",
            "port": "5432",
            "dialect": "postgres"
        },
        "ldap": {
            "url": "{{ ldap_uri }}",
            "bindDn": "{{ ldap_binddn }}",
            "bindCredentials": "{{ ldap_bindpw }}",
            "searchBase": "{{ ldap_base }}",
            "searchFilter": "(uid={{ '{{' }}username{{ '}}' }})",
            "searchAttributes": ["cn", "uid"],
            "usernameField": "cn",
            "useridField": "uid",
            "tlsca": "/etc/ssl/certs/ca-certificates.crt"
        },
        "email": false
    }
}