1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
|
{
"webapp": {
"admins": [],
"forbidden_usernames": [
"admin", "admins", "administrator", "administrators", "arin-admin",
"certmaster", "contact", "email", "help", "help-desk", "help-ticket",
"help-tickets", "help_desk", "help_ticket", "help_tickets", "helpdesk",
"helpticket", "helptickets", "info", "mail", "maildrop", "noreply",
"owner", "owners", "postmaster", "reply", "robot", "ssladmin", "staff",
"support", "tech-support", "tech_support", "techsupport", "ticket",
"tickets", "vmail", "www-data"],
"domain": "= provider.domain",
"modules": ["user", "billing", "help"],
"couchdb_port": "= couchdb_port",
"couchdb_webapp_user": "= global.services[:couchdb].couch.users[:webapp]",
"couchdb_admin_user": "= global.services[:couchdb].couch.users[:admin]",
"customization_dir": "= file_path 'webapp'",
"client_certificates": "= provider.ca.client_certificates",
"allow_limited_certs": "= provider.service.allow_limited_bandwidth",
"allow_unlimited_certs": "= provider.service.allow_unlimited_bandwidth",
"allow_anonymous_certs": "= provider.service.allow_anonymous",
"allow_registration": "= provider.service.allow_registration",
"invite_required": "= provider.enrollment_policy == 'invite'",
"default_service_level": "= provider.service.default_service_level",
"service_levels": "= service_levels()",
"secret_token": "= secret :webapp_secret_token",
"api_version": 1,
"secure": false,
"client_version": "= provider.client_version",
"nagios_test_user": {
"username": "nagios_test",
"password": "= secret :nagios_test_password"
},
"engines": [
"support"
],
"locales": "= provider.languages",
"default_locale": "= provider.default_language",
"api_tokens": {
"monitor": "= secret :api_monitor_auth_token",
"allowed_ips": "= host_ips(nodes_like_me)"
}
},
"stunnel": {
"clients": {
"couch_client": "= stunnel_client(nodes_like_me[:services => :couchdb], global.services[:couchdb].couch.port)"
}
},
"definition_files": {
"provider": "= file :provider_json_template",
"eip_service": "= file [:eip_service_json_template, 'v'+webapp.api_version.to_s]",
"soledad_service": "= file [:soledad_service_json_template, 'v'+webapp.api_version.to_s]",
"smtp_service": "= file [:smtp_service_json_template, 'v'+webapp.api_version.to_s]"
},
"service_type": "public_service",
"api": {
"domain": "= 'api.' + webapp.domain",
"version": 1,
"port": 4430,
"ca_cert_uri": "= 'https://' + webapp.domain + '/ca.crt'",
"uri": "= %(https://#{api.domain}:#{api.port}/#{api.version})"
},
"nickserver": {
"domain": "= 'nicknym.' + domain.full_suffix",
"couchdb_nickserver_user": {
"username": "= global.services[:couchdb].couch.users[:nickserver].username",
"password": "= secret :couch_nickserver_password",
"salt": "= hex_secret :couch_nickserver_password_salt, 128"
},
"port": 6425
},
"dns": {
"aliases": "= [domain.full, webapp.domain, api.domain, nickserver.domain]"
},
"x509": {
"use": true,
"use_commercial": true,
"ca_cert": "= file :ca_cert, :missing => 'provider CA. Run `leap cert ca`'",
"client_ca_cert": "= file :client_ca_cert, :missing => 'Certificate Authority. Run `leap cert ca`.'",
"client_ca_key": "= file :client_ca_key, :missing => 'Certificate Authority. Run `leap cert ca`.'"
},
"firewall": {
"webapp": {
"from": "*",
"to": "= ip_address",
"port": "= [api.port, 443, 80, nickserver.port]"
}
}
}
|
