mirror of
https://github.com/GSA/notifications-admin.git
synced 2025-12-09 14:45:00 -05:00
229f8467c8
This changeset adds an additional environment variable to enforce usage of the correct CA certificate in case any libraries override it. Please see https://cloud.gov/docs/management/container-to-container/#addressing-certificate-validation-errors for more details. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
69 lines
2.3 KiB
YAML
69 lines
2.3 KiB
YAML
---
|
|
applications:
|
|
- name: notify-admin-((env))
|
|
buildpack: python_buildpack
|
|
stack: cflinuxfs4
|
|
instances: ((instances))
|
|
memory: ((memory))
|
|
command: ((command))
|
|
health-check-type: port
|
|
health-check-invocation-timeout: 10
|
|
routes:
|
|
- route: ((cloud_dot_gov_route))
|
|
|
|
services:
|
|
- notify-admin-redis-v70-((env))
|
|
- notify-api-csv-upload-bucket-((env))
|
|
- notify-admin-logo-upload-bucket-((env))
|
|
|
|
env:
|
|
NOTIFY_ENVIRONMENT: ((env))
|
|
NOTIFY_APP_NAME: admin
|
|
NOTIFY_LOG_LEVEL: INFO
|
|
FLASK_APP: application.py
|
|
FLASK_DEBUG: 'false'
|
|
NEW_RELIC_CONFIG_FILE: newrelic.ini
|
|
NEW_RELIC_ENVIRONMENT: ((env))
|
|
|
|
NR_ACCOUNT_ID: 3389907
|
|
NR_TRUST_KEY: 562946
|
|
NR_AGENT_ID: ((nr_agent_id))
|
|
NR_APP_ID: ((nr_app_id))
|
|
NR_BROWSER_KEY: ((NR_BROWSER_KEY))
|
|
|
|
REDIS_ENABLED: ((redis_enabled))
|
|
ADMIN_BASE_URL: https://((public_admin_route))
|
|
API_HOST_NAME: https://notify-api-((env)).apps.internal:61443
|
|
|
|
# Credentials variables
|
|
ADMIN_CLIENT_SECRET: ((ADMIN_CLIENT_SECRET))
|
|
ADMIN_CLIENT_USERNAME: ((ADMIN_CLIENT_USERNAME))
|
|
DANGEROUS_SALT: ((DANGEROUS_SALT))
|
|
SECRET_KEY: ((SECRET_KEY))
|
|
NEW_RELIC_LICENSE_KEY: ((NEW_RELIC_LICENSE_KEY))
|
|
|
|
NOTIFY_BILLING_DETAILS: '[]'
|
|
|
|
SSL_CERT_FILE: '/etc/ssl/certs/ca-certificates.crt'
|
|
REQUESTS_CA_BUNDLE: '/etc/ssl/certs/ca-certificates.crt'
|
|
NEW_RELIC_CA_BUNDLE_PATH: '/etc/ssl/certs/ca-certificates.crt'
|
|
|
|
COMMIT_HASH: ((COMMIT_HASH))
|
|
|
|
# login.gov variables
|
|
|
|
LOGIN_PEM: ((LOGIN_PEM))
|
|
LOGIN_DOT_GOV_CLIENT_ID: ((LOGIN_DOT_GOV_CLIENT_ID))
|
|
LOGIN_DOT_GOV_USER_INFO_URL: ((LOGIN_DOT_GOV_USER_INFO_URL))
|
|
LOGIN_DOT_GOV_ACCESS_TOKEN_URL: ((LOGIN_DOT_GOV_ACCESS_TOKEN_URL))
|
|
LOGIN_DOT_GOV_LOGOUT_URL: ((LOGIN_DOT_GOV_LOGOUT_URL))
|
|
LOGIN_DOT_GOV_BASE_LOGOUT_URL: ((LOGIN_DOT_GOV_BASE_LOGOUT_URL))
|
|
LOGIN_DOT_GOV_SIGNOUT_REDIRECT: ((LOGIN_DOT_GOV_SIGNOUT_REDIRECT))
|
|
LOGIN_DOT_GOV_INITIAL_SIGNIN_URL: ((LOGIN_DOT_GOV_INITIAL_SIGNIN_URL))
|
|
LOGIN_DOT_GOV_CERTS_URL: ((LOGIN_DOT_GOV_CERTS_URL))
|
|
|
|
API_PUBLIC_URL: ((API_PUBLIC_URL))
|
|
API_PUBLIC_WS_URL: ((API_PUBLIC_WS_URL))
|
|
# feature flagging
|
|
FEATURE_SOCKET_ENABLED: ((FEATURE_SOCKET_ENABLED))
|