referral-service: add IP_SALT env variable from secrets

Signed-off-by: Jakub Sokołowski <jakub@status.im>

ansible/group_vars/referral.yml

@@ -19,6 +19,8 @@ referral_srv_eth_private_key: '{{lookup("passwordstore", "service/referral-servi
 
 # Rails secret key base
 referral_srv_secret_key_base: '{{lookup("passwordstore", "service/referral-service/"+stage+"/secret-key-base")}}'
+# The salt for the hashing of ips
+referral_srv_ip_salt: '{{lookup("passwordstore", "service/referral-service/"+stage+"/ip-salt")}}'
 
 # GeoIP API Auth
 referral_srv_geoip_account_id: '{{lookup("passwordstore", "service/referral-service/"+stage+"/geoip/account-id")}}'

ansible/roles/referral-service/README.md

@@ -13,6 +13,8 @@ referral_srv_public_protocol: 'https'
 
 # for production cookies
 referral_srv_secret_key_base: '128charLongHexadecimal'
+# for hashing of ips
+referral_srv_ip_salt: 'A-Reasonably-Long-Random-String'
 
 # For Play Store integration
 referral_srv_google_sign_in_client_id: '1234-abcd..apps.googleusercontent.com'

ansible/roles/referral-service/defaults/main.yml

@@ -6,6 +6,8 @@ referral_srv_public_protocol: 'https'
 
 # Key base for production cookies
 referral_srv_secret_key_base: ~
+# The salt for the hashing of ips
+referral_srv_ip_salt: ~
 
 # required service env variables
 referral_srv_google_sign_in_client_id: ~

ansible/roles/referral-service/templates/app.env.j2

@@ -3,6 +3,7 @@ RAILS_ENV=production
 RAILS_MAX_THREADS={{ ansible_processor_vcpus | default(2) }}
 SECRET_KEY_BASE={{ referral_srv_secret_key_base | mandatory }}
 PORT={{ referral_srv_app_port | mandatory }}
+IP_SALT={{ referral_srv_ip_salt | mandatory }}
 PIDFILE=/tmp/app.pid
 
 # OAuth settings