{ ... }:

{
  imports = [ ./module-authbackend.nix ];

  config.my.authBackend.approle = {
    tune = {
      default_lease_ttl = "1h";
      max_lease_ttl = "1h";
      listing_visibility = "hidden";
      token_type = "default-service";
    };
  };
}