kych

OAuth 2.0 API for Swiyu to enable Taler integration of Swiyu for KYC (experimental)
Log | Files | Refs | Submodules | README | LICENSE

application.yml (2386B)

      1 # Additional Spring Boot configuration for the SWIYU Generic Verifier, read
      2 # after the application.yml inside the jar and therefore overriding it.
      3 #
      4 # Most settings are better made in /etc/swiyu-verifier/swiyu-verifier.env,
      5 # which this file deliberately does not duplicate: anything expressed as an
      6 # environment variable there wins over the defaults in the jar as well.  What
      7 # is pinned here are the few things that must not silently change with an
      8 # upstream default, plus anything that cannot be an environment variable.
      9 
     10 spring:
     11   config:
     12     # The signing key is a multi-line PEM document, which a systemd
     13     # EnvironmentFile cannot carry: it holds one line per variable, and an
     14     # escaped "\n" in it reaches the JVM as two characters rather than a
     15     # newline, which fails with "No PEM key found".  So the key lives in a
     16     # YAML file of its own, where a block scalar expresses it directly, and is
     17     # imported here.  "optional:" so that the service still starts and says
     18     # what is missing when that file has not been created yet.
     19     #
     20     # Copy /usr/share/swiyu-verifier/signing-key.yml.example to this path.
     21     import:
     22       - "optional:file:/etc/swiyu-verifier/secrets/signing-key.yml"
     23 
     24   # The verifier owns its schema and migrates it itself on every start, which
     25   # is what makes an upgrade of this package a restart and nothing more.
     26   # "validate" means Hibernate checks the schema that Flyway produced and
     27   # refuses to start on a mismatch -- never set this to "create" or
     28   # "create-drop", which would silently drop every verification in the
     29   # database.
     30   flyway:
     31     enabled: true
     32   jpa:
     33     hibernate:
     34       ddl-auto: validate
     35 
     36   # No docker compose in a package installation; the database is the one
     37   # swiyu-verifier-dbconfig created.
     38   docker:
     39     compose:
     40       enabled: false
     41 
     42 application:
     43   # Read from /etc, not from the classpath, so that the verifier's name and
     44   # logo as shown in the wallet can be edited without rebuilding the jar.
     45   client-metadata-file: "file:/etc/swiyu-verifier/client_metadata.json"
     46 
     47 management:
     48   endpoints:
     49     web:
     50       exposure:
     51         # /actuator/health is what a reverse proxy or monitoring can poll.
     52         # Note that /actuator/env echoes a filtered part of the configuration,
     53         # so keep the whole /actuator tree unreachable from outside the host.
     54         include: health, info, prometheus