config.toml

[server]
port = 80
mode = "release"  # "release", "debug", "test"

[database]
host = "localhost"
port = 5432
user = "postgres"
password = "password"
db = "gin-boilerplate"
ssl_mode = "disable"  # "disable", "allow", "prefer", "require"

[security]
allowed_hosts = []
sts_seconds = 31536000
sts_include_subdomains = true
frame_deny = true
content_type_nosniff = true
browser_xss_filter = true
content_security_policy = "default-src 'self'; script-src 'self'; object-src 'self'"
csrf_secret = "some_secret_key"

[session]
key = "13d45bf0a822b832cc8886fa41ce4ced30584189bad02ec8ce552ace0d1ae8b1"  # hex encoded 32 byte string
enc_key = "2bb61a68ac3dec4f7c25efb062f4ae3b"  # hex encoded 16 byte string
path = "/"
domain = ""
max_age = 2592000
secure = false
http_only = true
same_site = 2  # Default = 1, Lax = 2, Strict = 3, None = 4