codimd/lib/config/dockerSecret.ts

import * as fs from "fs";
import * as path from "path";

const basePath = path.resolve('/var/run/secrets/')

function getSecret(secret) {
  const filePath = path.join(basePath, secret)
  if (fs.existsSync(filePath)) return fs.readFileSync(filePath)
  return undefined
}

let dockerSecretConfig: any = {}
if (fs.existsSync(basePath)) {
  dockerSecretConfig = {
    dbURL: getSecret('dburl'),
    // ssl path
    sslKeyPath: getSecret('sslkeypath'),
    sslCertPath: getSecret('sslcertpath'),
    sslCAPath: getSecret('sslcapath'),
    dhParamPath: getSecret('dhparampath'),
    // session
    sessionSecret: getSecret('sessionsecret'),
    imgur: {
      clientID: getSecret('imgur_clientid')
    },
    s3: {
      accessKeyId: getSecret('s3_acccessKeyId'),
      secretAccessKey: getSecret('s3_secretAccessKey')
    },
    minio: {
      accessKey: getSecret('minio_accessKey'),
      secretKey: getSecret('minio_secretKey')
    },
    azure: {
      connectionString: getSecret('azure_connectionString')
    },
    oauth2: {
      clientID: getSecret('oauth2_clientID'),
      clientSecret: getSecret('oauth2_clientSecret')
    },
    facebook: {
      clientID: getSecret('facebook_clientID'),
      clientSecret: getSecret('facebook_clientSecret')
    },
    twitter: {
      consumerKey: getSecret('twitter_consumerKey'),
      consumerSecret: getSecret('twitter_consumerSecret')
    },
    github: {
      clientID: getSecret('github_clientID'),
      clientSecret: getSecret('github_clientSecret')
    },
    gitlab: {
      clientID: getSecret('gitlab_clientID'),
      clientSecret: getSecret('gitlab_clientSecret')
    },
    mattermost: {
      clientID: getSecret('mattermost_clientID'),
      clientSecret: getSecret('mattermost_clientSecret')
    },
    dropbox: {
      clientID: getSecret('dropbox_clientID'),
      clientSecret: getSecret('dropbox_clientSecret'),
      appKey: getSecret('dropbox_appKey')
    },
    google: {
      clientID: getSecret('google_clientID'),
      clientSecret: getSecret('google_clientSecret')
    },
    ldap: {
      bindCredentials: getSecret('ldap_bindCredentials'),
      tlsca: getSecret('ldap_tlsca')
    },
    saml: {
      idpCert: getSecret('saml_idpCert')
    }
  }
}

export = dockerSecretConfig