|
| 1 | +import Config |
| 2 | +require Logger |
| 3 | + |
| 4 | +# config/runtime.exs is executed for all environments, including |
| 5 | +# during releases. It is executed after compilation and before the |
| 6 | +# system starts, so it is typically used to load production configuration |
| 7 | +# and secrets from environment variables or elsewhere. Do not define |
| 8 | +# any compile-time configuration in here, as it won't be applied. |
| 9 | +# The block below contains prod specific runtime configuration. |
| 10 | + |
| 11 | +# ## Using releases |
| 12 | +# |
| 13 | +# If you use `mix release`, you need to explicitly enable the server |
| 14 | +# by passing the PHX_SERVER=true when you start it: |
| 15 | +# |
| 16 | +# PHX_SERVER=true bin/oru start |
| 17 | +# |
| 18 | +# Alternatively, you can use `mix phx.gen.release` to generate a `bin/server` |
| 19 | +# script that automatically sets the env var above. |
| 20 | +if System.get_env("PHX_SERVER") do |
| 21 | + config :uro, Uro.Endpoint, server: true |
| 22 | +end |
| 23 | + |
| 24 | +config :uro, Uro.Turnstile, |
| 25 | + secret_key: |
| 26 | + System.get_env("TURNSTILE_SECRET_KEY") || |
| 27 | + Logger.warning( |
| 28 | + "Turnstile (a reCaptcha alternative) is disabled because the environment variable TURNSTILE_SECRET_KEY is not set. For more information, see https://developers.cloudflare.com/turnstile/get-started/." |
| 29 | + ) |
| 30 | + |
| 31 | +config :uro, :pow_assent, |
| 32 | + user_identities_context: Uro.UserIdentities, |
| 33 | + providers: |
| 34 | + System.get_env() |
| 35 | + |> Map.filter(fn {k, _} -> String.match?(k, ~r/^OAUTH2_.+_STRATEGY/) end) |
| 36 | + |> Enum.map(fn {key, module_name} -> |
| 37 | + key = |
| 38 | + key |
| 39 | + |> String.replace("OAUTH2_", "") |
| 40 | + |> String.replace("_STRATEGY", "") |
| 41 | + |
| 42 | + { |
| 43 | + key |
| 44 | + |> String.downcase() |
| 45 | + |> String.to_atom(), |
| 46 | + [ |
| 47 | + client_id: System.get_env("OAUTH2_#{key}_CLIENT_ID") || Logger.error("OAUTH2_#{key}_CLIENT_ID missing"), |
| 48 | + client_secret: System.get_env("OAUTH2_#{key}_SECRET") || Logger.error("OAUTH2_#{key}_SECRET missing"), |
| 49 | + strategy: Module.concat([module_name]) |
| 50 | + ] |
| 51 | + } |
| 52 | + end) |
| 53 | + |
| 54 | + |
| 55 | +if config_env() == :prod do |
| 56 | + |
| 57 | + config :uro, Uro.Mailer, |
| 58 | + adapter: Swoosh.Adapters.Sendgrid, |
| 59 | + api_key: System.get_env("SENDGRID_API_KEY", "") |
| 60 | + |
| 61 | + database_url = |
| 62 | + System.get_env("DATABASE_URL") || |
| 63 | + raise """ |
| 64 | + environment variable DATABASE_URL is missing. |
| 65 | + For example: ecto://USER:PASS@HOST/DATABASE |
| 66 | + """ |
| 67 | + |
| 68 | + maybe_ipv6 = if System.get_env("ECTO_IPV6") in ~w(true 1), do: [:inet6], else: [] |
| 69 | + config :joken, default_signer: System.get_env("JOKEN_SIGNER") || raise "Joken Signer (JOKEN_SIGNER) must be set" |
| 70 | + |
| 71 | + config :uro, Uro.Repo, |
| 72 | + # ssl: true, |
| 73 | + url: database_url, |
| 74 | + pool_size: String.to_integer(System.get_env("POOL_SIZE") || "10"), |
| 75 | + socket_options: maybe_ipv6 |
| 76 | + |
| 77 | + # The secret key base is used to sign/encrypt cookies and other secrets. |
| 78 | + # A default value is used in config/dev.exs and config/test.exs but you |
| 79 | + # want to use a different value for prod and you most likely don't want |
| 80 | + # to check this value into version control, so we use an environment |
| 81 | + # variable instead. |
| 82 | + secret_key_base = |
| 83 | + System.get_env("SECRET_KEY_BASE") || |
| 84 | + raise """ |
| 85 | + environment variable SECRET_KEY_BASE is missing. |
| 86 | + You can generate one by calling: mix phx.gen.secret |
| 87 | + """ |
| 88 | + |
| 89 | + host = System.get_env("PHX_HOST") || "vsekai.local" |
| 90 | + port = String.to_integer(System.get_env("PORT") || "4000") |
| 91 | + |
| 92 | + config :uro, :dns_cluster_query, System.get_env("DNS_CLUSTER_QUERY") |
| 93 | + |
| 94 | + config :uro, Uro.Endpoint, |
| 95 | + url: [host: host, port: 443, scheme: "https"], |
| 96 | + http: [ |
| 97 | + # Enable IPv6 and bind on all interfaces. |
| 98 | + # Set it to {0, 0, 0, 0, 0, 0, 0, 1} for local network only access. |
| 99 | + # See the documentation on https://hexdocs.pm/bandit/Bandit.html#t:options/0 |
| 100 | + # for details about using IPv6 vs IPv4 and loopback vs public addresses. |
| 101 | + ip: {0, 0, 0, 0, 0, 0, 0, 0}, |
| 102 | + port: port |
| 103 | + ], |
| 104 | + secret_key_base: secret_key_base |
| 105 | + |
| 106 | + # ## SSL Support |
| 107 | + # |
| 108 | + # To get SSL working, you will need to add the `https` key |
| 109 | + # to your endpoint configuration: |
| 110 | + # |
| 111 | + # config :oru, OruWeb.Endpoint, |
| 112 | + # https: [ |
| 113 | + # ..., |
| 114 | + # port: 443, |
| 115 | + # cipher_suite: :strong, |
| 116 | + # keyfile: System.get_env("SOME_APP_SSL_KEY_PATH"), |
| 117 | + # certfile: System.get_env("SOME_APP_SSL_CERT_PATH") |
| 118 | + # ] |
| 119 | + # |
| 120 | + # The `cipher_suite` is set to `:strong` to support only the |
| 121 | + # latest and more secure SSL ciphers. This means old browsers |
| 122 | + # and clients may not be supported. You can set it to |
| 123 | + # `:compatible` for wider support. |
| 124 | + # |
| 125 | + # `:keyfile` and `:certfile` expect an absolute path to the key |
| 126 | + # and cert in disk or a relative path inside priv, for example |
| 127 | + # "priv/ssl/server.key". For all supported SSL configuration |
| 128 | + # options, see https://hexdocs.pm/plug/Plug.SSL.html#configure/1 |
| 129 | + # |
| 130 | + # We also recommend setting `force_ssl` in your config/prod.exs, |
| 131 | + # ensuring no data is ever sent via http, always redirecting to https: |
| 132 | + # |
| 133 | + # config :oru, OruWeb.Endpoint, |
| 134 | + # force_ssl: [hsts: true] |
| 135 | + # |
| 136 | + # Check `Plug.SSL` for all available options in `force_ssl`. |
| 137 | + |
| 138 | + # ## Configuring the mailer |
| 139 | + # |
| 140 | + # In production you need to configure the mailer to use a different adapter. |
| 141 | + # Also, you may need to configure the Swoosh API client of your choice if you |
| 142 | + # are not using SMTP. Here is an example of the configuration: |
| 143 | + # |
| 144 | + # config :oru, Oru.Mailer, |
| 145 | + # adapter: Swoosh.Adapters.Mailgun, |
| 146 | + # api_key: System.get_env("MAILGUN_API_KEY"), |
| 147 | + # domain: System.get_env("MAILGUN_DOMAIN") |
| 148 | + # |
| 149 | + # For this example you need include a HTTP client required by Swoosh API client. |
| 150 | + # Swoosh supports Hackney and Finch out of the box: |
| 151 | + # |
| 152 | + # config :swoosh, :api_client, Swoosh.ApiClient.Hackney |
| 153 | + # |
| 154 | + # See https://hexdocs.pm/swoosh/Swoosh.html#module-installation for details. |
| 155 | +end |
0 commit comments