summaryrefslogtreecommitdiff
path: root/provider_base/services/mx.json
blob: 7e3f20baa93c007929d6efc2d806cfeda4fd19c0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
{
  "stunnel": {
    "couch_client": "= stunnel_client(nodes_like_me[:services => :couchdb], global.services[:couchdb].couch.port)"
  },
  "haproxy": {
    "servers": "= haproxy_servers(nodes_like_me[:services => :couchdb], stunnel.couch_client)"
  },
  "couchdb_leap_mx_user": {
    "username": "= global.services[:couchdb].couch.users[:leap_mx].username",
    "password": "= secret :couch_leap_mx_password",
    "salt": "= hex_secret :couch_leap_mx_password_salt, 128"
  },
  "mx_nodes": "= nodes['services' => 'mx']['environment' => '!local'].field('ip_address')",
  "x509": {
    "use": true,
    "ca_cert": "= file :ca_cert, :missing => 'provider CA. Run `leap cert ca`'",
    "client_ca_cert": "= file :client_ca_cert, :missing => 'Certificate Authority. Run `leap cert ca`'",
    "client_ca_key": "= file :client_ca_key, :missing => 'Certificate Authority. Run `leap cert ca`'",
    "commercial_cert": "= file [:commercial_cert, domain.full_suffix]",
    "commercial_key": "= file [:commercial_key, domain.full_suffix]",
    "commercial_ca_cert": "= try_file :commercial_ca_cert"
  },
  "service_type": "user_service"
}