This repository has been archived by the owner on Sep 5, 2023. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy path.env.template
120 lines (101 loc) · 5.2 KB
/
.env.template
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
# This template is used to automatically generate .env files when running ./bin/install.sh
# The services that are run in Docker. Append -dev to run in a development container. Remove to run natively.
# Setup cannot be done natively.
COMPOSE_PROFILES=apex,libro,email,token
##Env
# fatal, error, warn, info, debug, trace (trace only libro-server)
LOG_LEVEL=debug
# development, staging, or production
RAILS_ENV=staging
# development, or production
KTOR_ENV=production
## Feature flags
# Set to true to disable elasticsearch integration
DISABLE_SEARCHKICK=false
# Set to false to disable the prometheus collector endpoint
DISABLE_PROMETHEUS=true
# Allows studio page management without authentication.
STUDIO_SKIP_AUTH=true
## Ports
APEX_SERVICE_PORT=3000
LIBRO_SERVICE_PORT=3080
EMAIL_SERVICE_PORT=3002
TOKEN_SERVICE_PORT=3003
## General secrets
DEVISE_SECRET={secret}
JWT_ENCRYPTION_TOKEN={secret}
SECRET_KEY_BASE={secret}
SESSION_SECRET={secret}
# OpenId Connect automatic client registration signing key
OIDC_KEY="-----BEGIN PRIVATE KEY-----\nMIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQCfd3OzNijuKz/9\n1zpuOa5AJcR/18QPDDxaHoSczfXzBtGuScBmk2LzvCNeZX9eI6LoXgM3FmilS1E8\nB83Q5FTRrXa2Y6cwH94FnI29W9v7tEqeADOwQ5dtiZn+nmDSgqgmfHps6q9/seqE\nIS5pPt5jK6w7HXz1ZIrceewjTNzECdeIuWUT2PEZKH8Wdg2XFp7DmDip75dX0Zfw\nBFxV52xnBdvZOTv5lKEdguDA1M7+Ny85RuIu0kLpYN733uaUGDaH4dLKveI18YOX\n33yIabqL32b2lLJSNzWG3XwuLDaVBX7p9KXKR5GTDNM77LhKIOjoeCnla08nHOtf\negVxMlUzAgMBAAECggEAMWvc4MK9RqsCxxHoGvcnaNwLnS9qpNs+7RMeOFagjfQk\nEebriR7OgQli0MOWCL/0oh1Y077PKcNA5uDoSYAqRV2EOByEWSbXMVgGmZQZhlWm\n9nbLjio0iQ8nOcEt8q/pmxvi+VR2lZW3P8Hk11tTotqLIzsNWiQR4SisJXiRxvNk\npRyo1guJHx3tlj+JyDn8/aMAva0ZlYwyDdXzmDwW149vIIUwBtMpvG5ZCD7je811\ndk+aGdCWYPjxkPa9jMBVbVUpUPOYPFC5j6VV6+7JwEHfO6se8baW/PYs6yg/n4ra\nxzROd+jMiEBlZza4DPmewo2mgIaRzxmjR698+PN7eQKBgQDN/qS25e+X2edmLZHI\nSo8kII5m1VT4a7ZKXoFTF+x3oKOjnJ1d47rGG6Kg/XBmL4lo4LlRgZTo57QaknrG\n+U1O3n0SexhIBcu6TYN9ujA5Iaj2SDXdW2laBBqba/MW4X2AYViw82wajo5oVbcO\nlxUSkYq+2zVuJENHsx9Y2ybdbwKBgQDGLVyjJ5EoAfKg5GP2JhPIvGxDyZCcJCjR\ny/Gn8w2vSyAnRbez7/k7fwHr0CYCp98t3ZMrMlRNEVmmSUfCCfYfL8Hpb8NVMeMw\nMpB1ayK1eAgJ433rEtdgk7Lvdp9INpToyn1B1Z5klwDy86tOLEaWf4HUYcg+vRtG\ntvHJtVwqfQKBgQDNAS1fsDnfv8Zgk91PnZQS+it9/7VOfbOvE5pU3axB6aaxPz4F\noIvSeNJCsbbYm1p++5aynOlbWKyO/VQfDSB460dByyuBEfOMd3Py/gbb9Lm4UGj6\n4OxZ31ezcZ09Gi/SQg8IG1lsnI7xGszRQl6AWkPgaTwlXwVuJ798qK1nFQKBgQCS\nJ3Azj4G5HL6gs++Y4Hokx/mcgLIaxXwpRZyCPXlxNxmOfRc/KBMKMt/q1sbBnKa2\nv7vC1spfUBVq0o6OZyRR2bnL/DX1xeYEbLYnMo0VgmGDUXhS/sFCo4sKmdRcwIxP\nps572ByJmOgFRXmoHHUulvjb9gVlZ7gPDesB1LQVTQKBgQCxqC6I3SMz15Ix61ZQ\npyAKL5kRjmZgCkCVhcR285Ge9Xcn0FpjpOTJrMurAwOBXRZ6QdnJ8XzUIq5YdiTX\ncI/0BchWf2NjKx5Nc/CZTjwYT0sErdLWKvObrgJWnmjnJRENmFezlPibqBkVFBq8\nMlO62VVnh4udtI8CknqgHevRog==\n-----END PRIVATE KEY-----"
SSL_CERT_FILE={certfile}
## Maps
# Get from https://account.mapbox.com/
MAPBOX_KEY=
MAPBOX_USERNAME=
# Get from https://developer.mapquest.com/user/login
NOMINATIM_KEY=
NOMINATIM_URL=
## Error handling
## Get keys from https://docs.bugsnag.com/product/getting-started/
# Backend bugsnag key
BUGSNAG_KEY={bugsnag_key}
# Libro server bugsnag key
SERVER_BUGSNAG_KEY={bugsnag_key}
# Libro client bugsnag key
CLIENT_BUGSNAG_KEY={bugsnag_key}
## Postgresql
POSTGRESQL_USERNAME=postgres
POSTGRESQL_PASSWORD={postgres_password}
POSTGRES_USERNAME=postgres
POSTGRES_PASSWORD={postgres_password}
POSTGRESQL_ADDRESS=postgres
POSTGRESQL_PORT=5432
POSTGRESQL_DATABASE=apex_{database_suffix}
TOKEN_SERVICE_DATABASE=token_{database_suffix}
EMAIL_SERVICE_DATABASE=email_{database_suffix}
## Redis
REDIS_ADDRESS=redis
# Backend Redis connection string
REDIS_URL=redis://redis:6379/0
# See `application.conf` in Libro Server for more options
# DB number to store cached resources in
CACHE_REDIS_DATABASE=8
# DB number to store sessions and studio resources (projects, distributions) in
PERSISTENT_REDIS_DATABASE=6
# DB number to listen on for invalidations
STREAM_REDIS_DATABASE=7
# Stream key to use for invalidations
CACHE_STREAM=transactions
# The redis channel to use to make invalidations for the Libro Server cache
CACHE_CHANNEL=cache
## Ruby service options
ASSET_HOST=argu.{tld}
CARRIERWAVE_HOST=https://argu.{tld}
ELASTICSEARCH_URL={elastic_search}
HOSTNAME=argu.{tld}
# Used to protect the internal endpoints (SPI)
INT_IP_WHITELIST=127.0.0.0/16,10.0.1.0/16,172.16.0.0/12,172.99.0.0/16
LIBRO_SERVER_URL=http://libro.svc.cluster.localdev:3080
NO_STDOUT_PATH=true
# Tell rails to write to the console rather than files
RAILS_LOG_TO_STDOUT=true
RAILS_SERVE_STATIC_FILES=true
# Abort serialization when a response refers to local ids which aren't included.
RAISE_ON_MISSING_NODES=true
# Let the backend raise when translations aren't present in all locales
RAISE_ON_MISSING_TRANSLATIONS=true
# Unset to ask which tenant to connect to when opening a rails console
SKIP_APARTMENT=1
# IP (range) authorized to access web debugging console when exceptions are raised
TRUSTED_IP=172.99.0.0/16
## Other
MAIL_ADDRESS=mailcatcher
# Tell node to accept self-signed certificates (for WDS). Do not use in production
NODE_TLS_REJECT_UNAUTHORIZED=0
# The pathname that will be used to mount the live data connection on.
WEBSOCKET_PATH=cable
# Used in docker-compose as a prefix for all containers
COMPOSE_PROJECT_NAME=argu
DATA_SERVICE_NAME=data
CLUSTER_DOMAIN=cluster.localdev