ansible-taler-exchange

Ansible playbook to deploy a production Taler Exchange
Log | Files | Refs | README | LICENSE

exchange-business.conf.j2 (2639B)


      1 # Configuration for business-level aspects of the exchange.
      2 
      3 [exchange]
      4 
      5 # Currency of this exchange.
      6 CURRENCY = {{ currency }}
      7 CURRENCY_ROUND_UNIT = {{ currency_round_unit }}
      8 TINY_AMOUNT = {{ currency_round_unit }}
      9 
     10 # Here you MUST add the master public key of the offline system
     11 # which you can get using `taler-exchange-offline setup`.
     12 MASTER_PUBLIC_KEY = {{ exchange_master_pub }}
     13 
     14 # Publicly visible base URL of the exchange.
     15 # BASE_URL = https://example.com/
     16 BASE_URL = {{ exchange_base_url }}
     17 
     18 # Where to find accepting shops?
     19 SHOPPING_URL = {{ exchange_shopping_url }}
     20 
     21 AML_SPA_DIALECT = {{ exchange_spa_dialect }}
     22 
     23 # Attribute encryption key for storing attributes encrypted
     24 # in the database. Should be a high-entropy nonce.
     25 ATTRIBUTE_ENCRYPTION_KEY = {{ exchange_attribute_encryption_key }}
     26 
     27 # For your terms of service and privacy policy, you should specify
     28 # an Etag that must be updated whenever there are significant
     29 # changes to either document.  The format is up to you, what matters
     30 # is that the value is updated and never re-used. See the HTTP
     31 # specification on Etags.
     32 TERMS_ETAG = {{ exchange_terms_etag }}
     33 PRIVACY_ETAG = {{ exchange_pp_etag }}
     34 
     35 {% if deployment_kind == "gls" %}
     36 BANK_COMPLIANCE_LANGUAGE = gls
     37 {% endif %}
     38 
     39 
     40 # Bank accounts used by the exchange should be specified here:
     41 [exchange-account-primary]
     42 
     43 ENABLE_CREDIT = YES
     44 ENABLE_DEBIT = YES
     45 
     46 # Account identifier in the form of an RFC-8905 payto:// URI.
     47 # For SEPA, looks like payto://sepa/$IBAN?receiver-name=$NAME
     48 # Make sure to URL-encode spaces in $NAME!
     49 PAYTO_URI = {{ exchange_bank_account_payto }}
     50 
     51 WIRE_METHOD = iban
     52 
     53 {% if sanction_list is defined %}
     54 [exchange-sanctionscheck]
     55 RATER_COMMAND = /usr/bin/robocop /var/lib/taler-exchange/{{ sanction_list }}
     56 
     57 # Name where we store the sanctions check offset.
     58 MIN_ROW_FILENAME = ${HOME}/.cache/sanctionscheck-offset.bin
     59 {% endif %}
     60 
     61 # Credentials to access the account are in a separate
     62 # config file with restricted permissions.
     63 @inline-secret@ exchange-accountcredentials-primary ../secrets/exchange-accountcredentials-primary.secret.conf
     64 
     65 {% if deployment_kind == "tops" %}
     66 # Credentials to access KYC providers are in separate
     67 # config files with restricted permissions. Only the tops deployment
     68 # uses KYCAID, and only exchange_tops places these files.
     69 @inline-secret@ kyc-provider-kycaid-individual ../secrets/exchange-kyc-provider-individual.secret.conf
     70 @inline-secret@ kyc-provider-kycaid-business ../secrets/exchange-kyc-provider-business.secret.conf
     71 {% endif %}
     72 
     73 {% if reserve_closing_delay is defined %}
     74 [exchangedb]
     75 IDLE_RESERVE_EXPIRATION_TIME = {{ reserve_closing_delay }}
     76 {% endif %}