demarches-normaliennes/config/secrets.yml

# Be sure to restart your server when you modify this file.

# Your secret key is used for verifying the integrity of signed cookies.
# If you change this key, all old signed cookies will become invalid!

# Make sure the secret is at least 30 characters and all random,
# no regular words or you'll be exposed to dictionary attacks.
# You can use `rake secret` to generate a secure secret key.

# Make sure the secrets in this file are kept private
# if you're sharing your code publicly.
defaults: &defaults
  secret_key_base: <%= ENV["SECRET_KEY_BASE"] %>
  signing_key: <%= ENV["SIGNING_KEY"] %>
  basic_auth:
    username: <%= ENV['BASIC_AUTH_USERNAME'] %>
    password: <%= ENV['BASIC_AUTH_PASSWORD'] %>
  france_connect_particulier:
    identifier: <%= ENV['FC_PARTICULIER_ID'] %>
    secret: <%= ENV['FC_PARTICULIER_SECRET'] %>
    redirect_uri: <%= ENV['FC_PARTICULIER_REDIRECT_URI'] %>
    authorization_endpoint: <%= ENV['FC_PARTICULIER_HOST'] %>/api/v1/authorize
    token_endpoint: <%= ENV['FC_PARTICULIER_HOST'] %>/api/v1/token
    userinfo_endpoint: <%= ENV['FC_PARTICULIER_HOST'] %>/api/v1/userinfo
    logout_endpoint: <%= ENV['FC_PARTICULIER_HOST'] %>/api/v1/logout
  github:
    client_id: <%= ENV['GITHUB_CLIENT_ID'] %>
    client_secret: <%= ENV['GITHUB_CLIENT_SECRET'] %>
  mailjet:
    api_key: <%= ENV['MAILJET_API_KEY'] %>
    secret_key: <%= ENV['MAILJET_SECRET_KEY'] %>
  api_entreprise:
    key: <%= ENV['API_ENTREPRISE_KEY'] %>
    base_url: <%= ENV['API_ENTREPRISE_BASE_URL'] %>
  pipedrive:
    key: <%= ENV['PIPEDRIVE_KEY'] %>
  fog:
    openstack_tenant: <%= ENV['FOG_OPENSTACK_TENANT'] %>
    openstack_api_key: <%= ENV['FOG_OPENSTACK_API_KEY'] %>
    openstack_username: <%= ENV['FOG_OPENSTACK_USERNAME'] %>
    openstack_auth_url: <%= ENV['FOG_OPENSTACK_AUTH_URL'] %>
    openstack_region: <%= ENV['FOG_OPENSTACK_REGION'] %>
    base_url: <% ENV['FOG_BASE_URL'] %>
    directory: <%= ENV['FOG_DIRECTORY'] %>
  mailtrap:
    username: <%= ENV['MAILTRAP_USERNAME'] %>
    password: <%= ENV['MAILTRAP_PASSWORD'] %>

development:
  <<: *defaults
  secret_key_base: 05a2d479d8e412198dabd08ef0eee9d6e180f5cbb48661a35fd1cae287f0a93d40b5f1da08f06780d698bbd458a0ea97f730f83ee780de5d4e31f649a0130cf0
  signing_key: aef3153a9829fa4ba10acb02927ac855df6b92795b1ad265d654443c4b14a017

test:
  <<: *defaults
  secret_key_base: aa52abc3f3a629d04a61e9899a24c12f52b24c679cbf45f8ec0cdcc64ab9526d673adca84212882dff3911ac98e0c32ec4729ca7b3429ba18ef4dfd1bd18bc7a
  signing_key: aef3153a9829fa4ba10acb02927ac855df6b92795b1ad265d654443c4b14a017
  api_entreprise:
    key: api_entreprise_test_key
    base_url: https://entreprise.api.gouv.fr/v2
  fog:
    base_url: https://storage.apientreprise.fr
    directory: tps_dev
  pipedrive:
    key: pipedrive_test_key
  france_connect_particulier:
    identifier: france_connect_test_identifier
    secret: france_connect_test_secret
    redirect_uri: https://bidon.com/endpoint
    authorization_endpoint: https://bidon.com/endpoint
    token_endpoint: https://bidon.com/endpoint
    userinfo_endpoint: https://bidon.com/endpoint
    logout_endpoint: https://bidon.com/endpoint

# Do not keep production secrets in the repository,
# instead read values from the environment.
production:
  <<: *defaults