# Copy to kepr.toml (never saved: it holds the admin password hash and the bucket key).
# The admin console's bucket section can rewrite it; comments are not kept.

domain = "kepr.example"
data_dir = "data"
# bun -e 'console.log(await Bun.password.hash(prompt("password:"), "argon2id"))'
admin_password_hash = "$argon2id$..."

[bucket]
endpoint = "https://s3.fr-par.scw.cloud"
name = "my-koh-bucket"
region = "fr-par"
# A read-only key: Kepr never writes to the bucket.
access_key_id = "SCW..."
secret_access_key = "..."
# Optional write key, S3-only: Kepr hands this to a machine you sign in from; it is never shown or backed up.
#[bucket.write]
#access_key_id = "SCW..."
#secret_access_key = "..."

# For development and tests, read a Koh 3 folder remote instead of S3.
# Replace the five S3 keys above with:
# folder = "/path/to/koh/folder/remote"