status-im
/
infra-referral-service
mirror of https://github.com/status-im/infra-referral-service.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

referral-service: add IP_SALT env variable from secrets 

Signed-off-by: Jakub Sokołowski <jakub@status.im>
This commit is contained in:
Jakub Sokołowski 2020-09-30 11:32:17 +02:00
parent fe71cf861a
commit c092cd2529
No known key found for this signature in database
GPG Key ID: 4EF064D0E6D63020
4 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ansible/group_vars/referral.yml
View File

@ -19,6 +19,8 @@ referral_srv_eth_private_key: '{{lookup("passwordstore", "service/referral-servi
# Rails secret key base # Rails secret key base
referral_srv_secret_key_base: '{{lookup("passwordstore", "service/referral-service/"+stage+"/secret-key-base")}}' referral_srv_secret_key_base: '{{lookup("passwordstore", "service/referral-service/"+stage+"/secret-key-base")}}'
# The salt for the hashing of ips
referral_srv_ip_salt: '{{lookup("passwordstore", "service/referral-service/"+stage+"/ip-salt")}}'
# GeoIP API Auth # GeoIP API Auth
referral_srv_geoip_account_id: '{{lookup("passwordstore", "service/referral-service/"+stage+"/geoip/account-id")}}' referral_srv_geoip_account_id: '{{lookup("passwordstore", "service/referral-service/"+stage+"/geoip/account-id")}}'

2
ansible/roles/referral-service/README.md
View File

@ -13,6 +13,8 @@ referral_srv_public_protocol: 'https'
# for production cookies # for production cookies
referral_srv_secret_key_base: '128charLongHexadecimal' referral_srv_secret_key_base: '128charLongHexadecimal'
# for hashing of ips
referral_srv_ip_salt: 'A-Reasonably-Long-Random-String'
# For Play Store integration # For Play Store integration
referral_srv_google_sign_in_client_id: '1234-abcd..apps.googleusercontent.com' referral_srv_google_sign_in_client_id: '1234-abcd..apps.googleusercontent.com'

2
ansible/roles/referral-service/defaults/main.yml
View File

@ -6,6 +6,8 @@ referral_srv_public_protocol: 'https'
# Key base for production cookies # Key base for production cookies
referral_srv_secret_key_base: ~ referral_srv_secret_key_base: ~
# The salt for the hashing of ips
referral_srv_ip_salt: ~
# required service env variables # required service env variables
referral_srv_google_sign_in_client_id: ~ referral_srv_google_sign_in_client_id: ~

1
ansible/roles/referral-service/templates/app.env.j2
View File

@ -3,6 +3,7 @@ RAILS_ENV=production
RAILS_MAX_THREADS={{ ansible_processor_vcpus | default(2) }} RAILS_MAX_THREADS={{ ansible_processor_vcpus | default(2) }}
SECRET_KEY_BASE={{ referral_srv_secret_key_base | mandatory }} SECRET_KEY_BASE={{ referral_srv_secret_key_base | mandatory }}
PORT={{ referral_srv_app_port | mandatory }} PORT={{ referral_srv_app_port | mandatory }}
IP_SALT={{ referral_srv_ip_salt | mandatory }}
PIDFILE=/tmp/app.pid PIDFILE=/tmp/app.pid
# OAuth settings # OAuth settings