[analytics]
reporting_enabled = false

[snapshots]
external_enabled = false

[users]
auto_assign_org_role = Admin

{{ if eq (env "OIDC_ENABLED") "1" }}
[auth]
disable_login_form = true
oauth_allow_insecure_email_lookup=true # https://github.com/grafana/grafana/issues/70203

[auth.generic_oauth]
enabled = true
scopes = openid email profile
name = oauth
icon = signin
tls_skip_verify_insecure = false
allow_sign_up = true
auto_login = true
client_id = {{ env "OIDC_CLIENT_ID" }}
client_secret = {{ secret "grafana_oidc_client_secret" }}
auth_url = {{ env "OIDC_AUTH_URL" }}
token_url = {{ env "OIDC_TOKEN_URL" }}
api_url = {{ env "OIDC_API_URL" }}

[auth.basic]
enabled = false
{{ end }}

[plugins]
enable_alpha = true

[database]
type = sqlite3
wal = true