Initial commit
This commit is contained in:
Yaser
157
config/initializers/barong.rb
Normal file
157
config/initializers/barong.rb
Normal file
@@ -0,0 +1,157 @@
|
||||
# frozen_string_literal: true
|
||||
|
||||
|
||||
# 1/ check if ENV key exist then validate and set
|
||||
# 2/ if no check in credentials then validate and set
|
||||
# 3/ if no generate display warning, raise error in production, and set
|
||||
|
||||
require 'barong/app'
|
||||
require 'barong/keystore'
|
||||
require 'barong/string'
|
||||
|
||||
private_key_path = ENV['JWT_PRIVATE_KEY_PATH']
|
||||
|
||||
if !private_key_path.nil?
|
||||
pkey = Barong::KeyStore.open!(private_key_path)
|
||||
Rails.logger.error('Loading private key from: ' + private_key_path)
|
||||
|
||||
elsif Rails.application.credentials.has?(:private_key)
|
||||
pkey = Barong::KeyStore.read!(Rails.application.credentials.private_key)
|
||||
Rails.logger.info('Loading private key from credentials.yml.enc')
|
||||
|
||||
elsif !Rails.env.production?
|
||||
# Generates private key
|
||||
key = Barong::KeyStore.generate
|
||||
pkey = key.to_pem
|
||||
pub_key = key.public_key.to_pem
|
||||
|
||||
# Save private/public keys
|
||||
Barong::KeyStore.save!(pkey, 'config/rsa-key')
|
||||
Barong::KeyStore.save!(pub_key, 'config/rsa-key.pub')
|
||||
|
||||
Rails.logger.warn('Warning !! Generating private key')
|
||||
else
|
||||
raise 'Private key not found or invalid'
|
||||
end
|
||||
|
||||
kstore = Barong::KeyStore.new(pkey)
|
||||
|
||||
# Define default value for secret_key_base in test and development mode
|
||||
ENV['SECRET_KEY_BASE'] = '' unless Rails.env.production?
|
||||
|
||||
Barong::App.define do |config|
|
||||
# General configuration ---------------------------------------------
|
||||
# https://www.openware.com/sdk/docs/barong/configuration.html#general-configuration
|
||||
config.set(:app_name, 'Fibitex')
|
||||
config.set(:domain, 'fibitex.com')
|
||||
config.set(:uid_prefix, 'ID', regex: /^[A-z]{2,6}$/)
|
||||
config.set(:session_name, '_dalan_session')
|
||||
config.set(:session_expire_time, '1800', type: :integer)
|
||||
config.set(:kyc_provider, 'kycaid', values: %w[kycaid local])
|
||||
config.set(:required_docs_expire, 'false', type: :bool)
|
||||
config.set(:doc_num_limit, '10', type: :integer)
|
||||
config.set(:geoip_lang, 'en', values: %w[en de es fr ja ru])
|
||||
config.set(:csrf_protection, 'true', type: :bool)
|
||||
config.set(:apikey_nonce_lifetime, '50000', type: :integer)
|
||||
config.set(:gateway, 'cloudflare', values: %w[akamai cloudflare])
|
||||
config.set(:jwt_expire_time, '3600', type: :integer)
|
||||
config.set(:profile_double_verification, 'false', type: :bool)
|
||||
config.set(:crc32_salt, '')
|
||||
config.set(:api_data_masking_enabled, 'true', type: :bool)
|
||||
config.set(:first_registration_superadmin, 'true', type: :bool)
|
||||
config.set(:mgn_api_keys_user, 'false', type: :bool)
|
||||
config.set(:mgn_api_keys_sa, 'false', type: :bool)
|
||||
|
||||
|
||||
# Password configuration -----------------------------------------------
|
||||
# https://www.openware.com/sdk/docs/barong/configuration.html#password-configuration
|
||||
config.set(:password_regexp, '^(?=.*[[:lower:]])(?=.*[[:upper:]])(?=.*[[:digit:]])(?=.*[[:graph:]]).{8,80}$', type: :regexp)
|
||||
config.set(:password_min_entropy, '14', type: :integer)
|
||||
config.set(:password_use_dictionary, 'true', type: :bool)
|
||||
|
||||
# CAPTCHA configuration ---------------------------------------------
|
||||
# https://www.openware.com/sdk/docs/barong/configuration.html#captcha-configuration
|
||||
config.set(:captcha, 'none', values: %w[none recaptcha geetest])
|
||||
config.set(:geetest_id, '')
|
||||
config.set(:geetest_key, '')
|
||||
config.set(:recaptcha_site_key, '')
|
||||
config.set(:recaptcha_secret_key, '')
|
||||
|
||||
# Dependencies configuration (vault, redis, rabbitmq) ---------------
|
||||
# https://www.openware.com/sdk/docs/barong/configuration.html#dependencies-configuration-vault-redis-rabbitmq
|
||||
config.set(:event_api_rabbitmq_host, 'localhost')
|
||||
config.set(:event_api_rabbitmq_port, '5672')
|
||||
config.set(:event_api_rabbitmq_username, 'guest')
|
||||
config.set(:event_api_rabbitmq_password, 'guest')
|
||||
config.set(:vault_address, 'http://localhost:8200')
|
||||
config.set(:vault_token, '')
|
||||
config.set(:redis_cluster, 'false', type: :bool)
|
||||
config.set(:redis_url, 'redis://localhost:6379/1')
|
||||
config.set(:redis_password, '')
|
||||
config.set(:vault_app_name, 'barong')
|
||||
|
||||
# CORS configuration -----------------------------------------------
|
||||
# https://www.openware.com/sdk/docs/barong/configuration.html#api-cors-configuration
|
||||
config.set(:api_cors_origins, '*')
|
||||
config.set(:api_cors_max_age, '3600')
|
||||
config.set(:api_cors_allow_credentials, 'false', type: :bool)
|
||||
|
||||
# Config files configuration ----------------------------------------
|
||||
# https://www.openware.com/sdk/docs/barong/configuration.html#config-files-configuration
|
||||
config.set(:config, 'config/barong.yml', type: :path)
|
||||
config.set(:maxminddb_path, 'geolite/GeoLite2-Country.mmdb', type: :path)
|
||||
config.set(:seeds_file, Rails.root.join('config', 'seeds.yml'), type: :path)
|
||||
config.set(:authz_rules_file, Rails.root.join('config', 'authz_rules.yml'), type: :path)
|
||||
|
||||
# SMTP configuration ------------------------------------------------
|
||||
# https://github.com/openware/barong/blob/master/docs/general/env_configuration.md#smtp-configuration
|
||||
config.set(:sender_email, 'noreply@barong.io')
|
||||
config.set(:sender_name, 'Barong')
|
||||
config.set(:smtp_password, '')
|
||||
config.set(:smtp_port, 1025)
|
||||
config.set(:smtp_host, 'localhost')
|
||||
config.set(:smtp_user, '')
|
||||
config.set(:smtp_logo_link, 'https://storage.cloud.google.com/public_peatio/logo.png')
|
||||
config.set(:default_language, 'en')
|
||||
config.set(:smtp_domain, 'test.com')
|
||||
config.set(:smtp_enable_starttls_auto, 'true', type: :bool)
|
||||
config.set(:smtp_openssl_verify_mode, 'peer')
|
||||
config.set(:smtp_auth, 'plain')
|
||||
|
||||
# KYCAID ------------------------------------------------------------
|
||||
config.set(:kycaid_authorization_token, '')
|
||||
config.set(:kycaid_sandbox_mode, 'true', type: :bool)
|
||||
config.set(:kycaid_api_endpoint, 'https://api.kycaid.com/')
|
||||
|
||||
# Auth0 configuration -----------------------------------------------
|
||||
config.set(:auth0_domain, '')
|
||||
config.set(:auth0_client_id, '')
|
||||
|
||||
# jibit configuration ----------------------------------------
|
||||
config.set(:jibit_api_url, '')
|
||||
config.set(:jibit_api_key, '')
|
||||
config.set(:jibit_api_secret, '')
|
||||
end
|
||||
|
||||
# KYCAID configuring
|
||||
KYCAID.configure do |config|
|
||||
config.authorization_token = Barong::App.config.kycaid_authorization_token
|
||||
config.sandbox_mode = Barong::App.config.kycaid_sandbox_mode
|
||||
config.api_endpoint = Barong::App.config.kycaid_api_endpoint
|
||||
end
|
||||
|
||||
ActionMailer::Base.smtp_settings = {
|
||||
address: Barong::App.config.smtp_host,
|
||||
port: Barong::App.config.smtp_port,
|
||||
user_name: Barong::App.config.smtp_user,
|
||||
authentication: Barong::App.config.smtp_auth,
|
||||
domain: Barong::App.config.smtp_domain,
|
||||
enable_starttls_auto: Barong::App.config.smtp_enable_starttls_auto,
|
||||
openssl_verify_mode: Barong::App.config.smtp_openssl_verify_mode,
|
||||
password: Barong::App.config.smtp_password
|
||||
}
|
||||
|
||||
Barong::GeoIP.lang = Barong::App.config.geoip_lang
|
||||
|
||||
Rails.application.config.x.keystore = kstore
|
||||
Barong::App.config.keystore = kstore
|
||||
Reference in New Issue
Block a user