config.yml

defaults:
  app:
    secretsTableName:             'Secrets'
    statsComponent:               'secrets'
    # Time delay before expiring secrets, in readable format, see:
    # taskcluster.fromNow, notice this should be negative!
    secretExpirationDelay:        '- 30 seconds'


  # Taskcluster configuration
  taskcluster:
    rootUrl:                      !env TASKCLUSTER_ROOT_URL

    # Taskcluster credentials for this server, allowing access to the Azure table,
    # sentry, statsum, etc.
    credentials:
      clientId:                   !env TASKCLUSTER_CLIENT_ID
      accessToken:                !env TASKCLUSTER_ACCESS_TOKEN

  azure:
    accountId:                    !env AZURE_ACCOUNT_ID
    cryptoKey:                    !env AZURE_CRYPTO_KEY
    signingKey:                   !env AZURE_SIGNING_KEY

  monitoring:
    level:                      !env:optional LEVEL
    errorConfig: !env:json:optional ERROR_CONFIG

  # Server configuration
  server:
    # Port to listen for requests on
    port:                           !env:number PORT

    # Environment 'development' or 'production'
    env:                            'development' 
    # Force SSL, not useful when runnning locally
    forceSSL:                       !env:bool FORCE_SSL

    # Trust a forwarding proxy
    trustProxy:                     false

staging:
  app:
    statsComponent: 'secrets-staging'

production:
  server:
    port:                         80
    env:                          'production'
    # We trust the proxy on heroku, as the SSL end-point provided by heroku
    # is a proxy, so we have to trust it.
    trustProxy:                   true

test:
  app:
    statsComponent:               'test-queue'
    # four days in the future, so secrets are always expired
    secretExpirationDelay:        '4 days'

  azure:
    accountId:                    'pamplemousse'
    tableName:                    'SecretsTestTable'
    cryptoKey:                    'CNcj2aOozdo7Pn+HEkAIixwninIwKnbYc6JPS9mNxZk='
    signingKey:                   'REALULTIMATEPOWER.NET'

  server:
    port:                         60415
    forceSSL:                     false