-
Notifications
You must be signed in to change notification settings - Fork 2.5k
/
dynamic_settings.yml.example
115 lines (114 loc) · 6 KB
/
dynamic_settings.yml.example
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
# this config file is useful if you don't want to run a consul
# cluster with canvas. Just provide the config data you would
# like for the DynamicSettings class to find, and it will use
# it whenever a call for consul data is issued. Data should be
# shaped like the example below, one key for the related set of data,
# and a hash of key/value pairs (no nesting)
development:
# tree
config:
# service
canvas:
# environment
canvas:
encryption-secret: "astringthatisactually32byteslong"
signing-secret: "astringthatisactually32byteslong"
datadog-rum:
application_id: "27627d1e-8a4f-4645-b390-bb396fc83c81"
client_token: "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r"
sample_rate_percentage: 0.0 # Between 0.0 and 100.0; 0.0 disables the feature.
live-events:
aws_endpoint: http://kinesis.canvaslms.docker
kinesis_stream_name: live-events
live-events-subscription-service:
app-host: "http://les.docker"
sad-panda: null
math-man:
base_url: 'http://mathman.docker'
use_for_svg: 'false'
use_for_mml: 'false'
microsoft-sync:
client-id: some_client_id
client-secret: some_client_secret
rich-content-service:
app-host: "rce.docker"
common_cartridge_viewer:
base_url: "http://localhost:3300"
fullstory:
sampling_rate: '0.0' # randomly inject this fraction of the time
app_key: 'xyzzy'
# another service
inst-fs:
app-host: "http://api.instfs.docker"
# this is just "super-sekret-value", base64-encoded:
secret: "c3VwZXItc2VrcmV0LXZhbHVlCg=="
pandata:
ios-pandata-key: IOS_pandata_key
ios-pandata-secret: teamrocketblastoffatthespeedoflight
android-pandata-key: ANDROID_pandata_key
android-pandata-secret: surrendernoworpreparetofight
private:
canvas:
auditors.yml: |
write_paths:
- active_record
read_path: active_record
# datadog_apm.yml: |
# sample_rate: 0.0
# host_sample_rate: 0.0
# immersive_reader.yml: |
# ir_tenant_id: ""
# ir_client_id: ""
# ir_client_secret: ""
# ir_subdomain: "canvasir"
# use a unique subdomain per attachment, so that browsers will enforce security
# permissions (such as microphone/camera access) per-file. You must have wildcard
# DNS set up for this to work.
# attachment_specific_file_domain: true
# ha_cache.yml: |
# cache_store: ha_store
# servers:
# - redis://localhost/2
# # keep stale data for up to 1 week in the cache
# race_condition_ttl: 604800
# # how long it might take to recompute a cache value
# # before the lock times out and another process is
# # allowed to write it
# lock_timeout: 5
# # how long before a cache entry is considered stale
# expires_in: 300
# # when deleting from the cache, trigger a consul event
# # you can use the example script/consume_consul_events
# # to delete from local nodes, but may need to tweak
# # slightly if your config doesn't match
# consul_event: "canvas/dev/invalidate_ha_cache"
# # if configured, trigger the event in multiple Consul
# # datacenters, rather than just the local one
# # if you use this you SHOULD still list the local
# # dc; it won't be added for you
# consul_datacenters:
# - dc1
# - dc2
# clone_url_strand.yml: |
# lti1.instructure.com: lti1
# lti2.instructure.com: lti2
# csp_logging.yml: |
# host: https://csplogging.inscloudgate.net/
# shared_secret: s00p3r_s3cr3t
# To work with the release notes UI, uncomment this and ensure you have vault_contents.yml
# with the example contents. Also see docker-compose/dynamodb.override.yml
# release_notes.yml: |
# ddb_endpoint: 'http://dynamo:8000/'
# ddb_table_name: 'canvas-release-notes'
# vault_credential_path: 'sts/testaccount/sts/canvas-release-notes'
store:
canvas:
lti-keys:
# these are all the same JWK but with different kid
# to generate a new key, run the following in a Canvas console:
#
# key = OpenSSL::PKey::RSA.generate(2048)
# key.public_key.to_jwk(kid: Time.now.utc.iso8601).to_json
jwk-past.json: "{\"kty\":\"RSA\",\"e\":\"AQAB\",\"n\":\"uX1MpfEMQCBUMcj0sBYI-iFaG5Nodp3C6OlN8uY60fa5zSBd83-iIL3n_qzZ8VCluuTLfB7rrV_tiX727XIEqQ\",\"kid\":\"2018-05-18T22:33:20Z\",\"d\":\"pYwR64x-LYFtA13iHIIeEvfPTws50ZutyGfpHN-kIZz3k-xVpun2Hgu0hVKZMxcZJ9DkG8UZPqD-zTDbCmCyLQ\",\"p\":\"6OQ2bi_oY5fE9KfQOcxkmNhxDnIKObKb6TVYqOOz2JM\",\"q\":\"y-UBef95njOrqMAxJH1QPds3ltYWr8QgGgccmcATH1M\",\"dp\":\"Ol_xkL7rZgNFt_lURRiJYpJmDDPjgkDVuafIeFTS4Ic\",\"dq\":\"RtzDY5wXr5TzrwWEztLCpYzfyAuF_PZj1cfs976apsM\",\"qi\":\"XA5wnwIrwe5MwXpaBijZsGhKJoypZProt47aVCtWtPE\"}"
jwk-present.json: "{\"kty\":\"RSA\",\"e\":\"AQAB\",\"n\":\"uX1MpfEMQCBUMcj0sBYI-iFaG5Nodp3C6OlN8uY60fa5zSBd83-iIL3n_qzZ8VCluuTLfB7rrV_tiX727XIEqQ\",\"kid\":\"2018-06-18T22:33:20Z\",\"d\":\"pYwR64x-LYFtA13iHIIeEvfPTws50ZutyGfpHN-kIZz3k-xVpun2Hgu0hVKZMxcZJ9DkG8UZPqD-zTDbCmCyLQ\",\"p\":\"6OQ2bi_oY5fE9KfQOcxkmNhxDnIKObKb6TVYqOOz2JM\",\"q\":\"y-UBef95njOrqMAxJH1QPds3ltYWr8QgGgccmcATH1M\",\"dp\":\"Ol_xkL7rZgNFt_lURRiJYpJmDDPjgkDVuafIeFTS4Ic\",\"dq\":\"RtzDY5wXr5TzrwWEztLCpYzfyAuF_PZj1cfs976apsM\",\"qi\":\"XA5wnwIrwe5MwXpaBijZsGhKJoypZProt47aVCtWtPE\"}"
jwk-future.json: "{\"kty\":\"RSA\",\"e\":\"AQAB\",\"n\":\"uX1MpfEMQCBUMcj0sBYI-iFaG5Nodp3C6OlN8uY60fa5zSBd83-iIL3n_qzZ8VCluuTLfB7rrV_tiX727XIEqQ\",\"kid\":\"2018-07-18T22:33:20Z\",\"d\":\"pYwR64x-LYFtA13iHIIeEvfPTws50ZutyGfpHN-kIZz3k-xVpun2Hgu0hVKZMxcZJ9DkG8UZPqD-zTDbCmCyLQ\",\"p\":\"6OQ2bi_oY5fE9KfQOcxkmNhxDnIKObKb6TVYqOOz2JM\",\"q\":\"y-UBef95njOrqMAxJH1QPds3ltYWr8QgGgccmcATH1M\",\"dp\":\"Ol_xkL7rZgNFt_lURRiJYpJmDDPjgkDVuafIeFTS4Ic\",\"dq\":\"RtzDY5wXr5TzrwWEztLCpYzfyAuF_PZj1cfs976apsM\",\"qi\":\"XA5wnwIrwe5MwXpaBijZsGhKJoypZProt47aVCtWtPE\"}"