config.yml

defaults:
  app:
    # the URL at which this service will be available, without a trailing `/`
    publicUrl: !env PUBLIC_URL
    # if true, serve the /playground path
    playground: false
    # Delete expired entries in both the access token and authorization code tables
    authorizationCodeExpirationDelay: '- 10 minutes'

  monitoring:
    level: !env:optional LEVEL
    errorConfig: !env:json:optional ERROR_CONFIG

  # Server configuration
  server:
    # Port to listen for requests on
    port: !env:number PORT
    trustProxy: !env:bool TRUST_PROXY

    # The CORS allowed origins (passed to https://yarnpkg.com/en/package/cors);
    # typically this is the root URL, but in testing it may have other values.
    # The legacy root URL is special-cased.  Values beginning with `/` are
    # treated as regular expressions.  ADDITIONAL_ALLOWED_CORS_ORIGIN is used
    # to allow UI deploy previews to access a running deployment.
    allowedCORSOrigins:
      - !env TASKCLUSTER_ROOT_URL
      - !env ADDITIONAL_ALLOWED_CORS_ORIGIN

  # Configuration of access to other taskcluster components
  taskcluster:
    rootUrl: !env TASKCLUSTER_ROOT_URL
    credentials:
      clientId: !env TASKCLUSTER_CLIENT_ID
      accessToken: !env TASKCLUSTER_ACCESS_TOKEN
    temporaryCredentials:
      # Set the credentials to be valid 15 min before creation
      # (allowing for a bit of clock skew)
      startOffset:    '- 15 min'
      # Set the credential to expire after 3 days
      expiry:         '3 days'

  azure:
    accountId: !env AZURE_ACCOUNT_ID
    signingKey: !env AZURE_SIGNING_KEY
    cryptoKey: !env AZURE_CRYPTO_KEY

  # Pulse credentials
  pulse:
    username: !env PULSE_USERNAME
    password: !env PULSE_PASSWORD
    hostname: !env PULSE_HOSTNAME
    vhost: !env PULSE_VHOST

  login:
    registeredClients: !env:json REGISTERED_CLIENTS
    # This is an object containing {strategy-name: config}.  It can be empty
    # or can include any of the below:
    #
    # mozilla-auth0:
    #   domain: auth0 domain
    #   clientId: auth0 clientId
    #   clientSecret: auth0 accessToken corresponding to that ID
    #
    # github:
    #   # client id and secret for a Github OAuth2 application -- create a
    #   # fresh one on the GitHub website.
    #   clientId: !env GITHUB_CLIENT_ID
    #   clientSecret: !env GITHUB_CLIENT_SECRET
    strategies: !env:json UI_LOGIN_STRATEGIES
    # this should be a random string, and is used to create the session ID
    sessionSecret: !env SESSION_SECRET

development:
  app:
    # this assumes that taskcluster-ui's dev server is running on port 5080
    publicUrl: http://localhost:5080
    playground: true

  server:
    # taskcluster-ui's dev server assumes port 3050
    port: 3050
    trustProxy: false
    # for testing, allow any origin
    allowedCORSOrigins: [true]

  azure:
    accountId: 'jungle'
    signingKey: 'REALULTIMATEPOWER.NET'
    cryptoKey: 'CNcj2aOozdo7Pn+HEkAIixwninIwKnbYc6JPS9mNxZk='

  login:
    sessionSecret: 'keyboard cat'

test:
  app:
    publicUrl: http://localhost:5080

  azure:
    accountId: 'jungle'
    signingKey: 'REALULTIMATEPOWER.NET'
    cryptoKey: 'CNcj2aOozdo7Pn+HEkAIixwninIwKnbYc6JPS9mNxZk='

  login:
    strategies: {test: true}
    sessionSecret: 'keyboard cat'
    registeredClients:
    - clientId: test-token
      responseType: "token"
      scope: ["tags:get:*"]
      redirectUri:
      - 'https://test.example.com/cb'
      whitelisted: false
      maxExpires: '1 year'
    - clientId: test-code
      responseType: "code"
      scope: ["tags:get:*"]
      redirectUri:
        - 'https://test.example.com/cb'
      whitelisted: false
      maxExpires: '1 year'
    - clientId: test-code-whitelisted
      responseType: "code"
      scope: ["tags:get:*"]
      redirectUri:
        - 'https://test.example.com/cb'
      whitelisted: true
      maxExpires: '1 year'

  server:
    port: 63821
    trustProxy: false

production:
  pulse:
    namespace: taskcluster-web-server