mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-28 02:18:50 +00:00
26d8f7eab3
Why: * JumpCloud directory sync was requested from customers. JumpCloud only offers the ability to use it's API with an admin level access token that is tied to a specific user within a given JumpCloud account. This would require Firezone customers to give an access token with much more permissions that needed for our directory sync. To avoid this, we've decide to use WorkOS to provide SCIM support between JumpCloud and WorkOS, which will allow Firezone to then easily and safely retrieve JumpCloud directory info from WorkOS. --------- Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
222 lines
8.1 KiB
Elixir
222 lines
8.1 KiB
Elixir
import Config
|
|
|
|
if config_env() == :prod do
|
|
import Domain.Config, only: [compile_config!: 1]
|
|
|
|
###############################
|
|
##### Domain ##################
|
|
###############################
|
|
|
|
config :domain, Domain.Repo,
|
|
database: compile_config!(:database_name),
|
|
username: compile_config!(:database_user),
|
|
hostname: compile_config!(:database_host),
|
|
port: compile_config!(:database_port),
|
|
password: compile_config!(:database_password),
|
|
pool_size: compile_config!(:database_pool_size),
|
|
ssl: compile_config!(:database_ssl_enabled),
|
|
ssl_opts: compile_config!(:database_ssl_opts),
|
|
parameters: compile_config!(:database_parameters)
|
|
|
|
config :domain, Domain.Tokens,
|
|
key_base: compile_config!(:tokens_key_base),
|
|
salt: compile_config!(:tokens_salt)
|
|
|
|
config :domain, Domain.Gateways,
|
|
gateway_ipv4_masquerade: compile_config!(:gateway_ipv4_masquerade),
|
|
gateway_ipv6_masquerade: compile_config!(:gateway_ipv6_masquerade)
|
|
|
|
config :domain, Domain.Auth.Adapters.GoogleWorkspace.APIClient,
|
|
finch_transport_opts: compile_config!(:http_client_ssl_opts)
|
|
|
|
config :domain, Domain.Billing.Stripe.APIClient,
|
|
endpoint: "https://api.stripe.com",
|
|
finch_transport_opts: []
|
|
|
|
config :domain, Domain.Billing,
|
|
enabled: compile_config!(:billing_enabled),
|
|
secret_key: compile_config!(:stripe_secret_key),
|
|
webhook_signing_secret: compile_config!(:stripe_webhook_signing_secret),
|
|
default_price_id: compile_config!(:stripe_default_price_id)
|
|
|
|
config :domain, platform_adapter: compile_config!(:platform_adapter)
|
|
|
|
if platform_adapter = compile_config!(:platform_adapter) do
|
|
config :domain, platform_adapter, compile_config!(:platform_adapter_config)
|
|
end
|
|
|
|
config :domain, Domain.Cluster,
|
|
adapter: compile_config!(:erlang_cluster_adapter),
|
|
adapter_config: compile_config!(:erlang_cluster_adapter_config)
|
|
|
|
config :domain, Domain.Instrumentation,
|
|
client_logs_enabled: compile_config!(:instrumentation_client_logs_enabled),
|
|
client_logs_bucket: compile_config!(:instrumentation_client_logs_bucket)
|
|
|
|
config :domain, Domain.Analytics,
|
|
mixpanel_token: compile_config!(:mixpanel_token),
|
|
hubspot_workspace_id: compile_config!(:hubspot_workspace_id)
|
|
|
|
config :domain, :enabled_features,
|
|
idp_sync: compile_config!(:feature_idp_sync_enabled),
|
|
sign_up: compile_config!(:feature_sign_up_enabled),
|
|
flow_activities: compile_config!(:feature_flow_activities_enabled),
|
|
self_hosted_relays: compile_config!(:feature_self_hosted_relays_enabled),
|
|
policy_conditions: compile_config!(:feature_policy_conditions_enabled),
|
|
multi_site_resources: compile_config!(:feature_multi_site_resources_enabled),
|
|
rest_api: compile_config!(:feature_rest_api_enabled)
|
|
|
|
config :domain, sign_up_whitelisted_domains: compile_config!(:sign_up_whitelisted_domains)
|
|
|
|
config :domain, docker_registry: compile_config!(:docker_registry)
|
|
|
|
config :domain, outbound_email_adapter_configured?: !!compile_config!(:outbound_email_adapter)
|
|
|
|
# Enable background jobs only on dedicated nodes
|
|
config :domain, Domain.Tokens.Jobs.DeleteExpiredTokens,
|
|
enabled: compile_config!(:background_jobs_enabled)
|
|
|
|
config :domain, Domain.Billing.Jobs.CheckAccountLimits,
|
|
enabled: compile_config!(:background_jobs_enabled)
|
|
|
|
config :domain, Domain.Auth.Adapters.GoogleWorkspace.Jobs.RefreshAccessTokens,
|
|
enabled: compile_config!(:background_jobs_enabled)
|
|
|
|
config :domain, Domain.Auth.Adapters.GoogleWorkspace.Jobs.SyncDirectory,
|
|
enabled: compile_config!(:background_jobs_enabled)
|
|
|
|
config :domain, Domain.Auth.Adapters.MicrosoftEntra.Jobs.RefreshAccessTokens,
|
|
enabled: compile_config!(:background_jobs_enabled)
|
|
|
|
config :domain, Domain.Auth.Adapters.MicrosoftEntra.Jobs.SyncDirectory,
|
|
enabled: compile_config!(:background_jobs_enabled)
|
|
|
|
config :domain, Domain.Auth.Adapters.Okta.Jobs.RefreshAccessTokens,
|
|
enabled: compile_config!(:background_jobs_enabled)
|
|
|
|
config :domain, Domain.Auth.Adapters.Okta.Jobs.SyncDirectory,
|
|
enabled: compile_config!(:background_jobs_enabled)
|
|
|
|
if external_url = compile_config!(:external_url) do
|
|
%{
|
|
scheme: external_url_scheme,
|
|
host: external_url_host,
|
|
port: external_url_port,
|
|
path: external_url_path
|
|
} = URI.parse(external_url)
|
|
|
|
###############################
|
|
##### Web #####################
|
|
###############################
|
|
|
|
config :web, Web.Endpoint,
|
|
http: [
|
|
ip: compile_config!(:phoenix_listen_address).address,
|
|
port: compile_config!(:phoenix_http_web_port),
|
|
protocol_options: compile_config!(:phoenix_http_protocol_options)
|
|
],
|
|
url: [
|
|
scheme: external_url_scheme,
|
|
host: external_url_host,
|
|
port: external_url_port,
|
|
path: external_url_path
|
|
],
|
|
secret_key_base: compile_config!(:secret_key_base),
|
|
check_origin: [
|
|
"#{external_url_scheme}://#{external_url_host}:#{external_url_port}",
|
|
"#{external_url_scheme}://*.#{external_url_host}:#{external_url_port}",
|
|
"#{external_url_scheme}://#{external_url_host}",
|
|
"#{external_url_scheme}://*.#{external_url_host}"
|
|
],
|
|
live_view: [
|
|
signing_salt: compile_config!(:live_view_signing_salt)
|
|
]
|
|
|
|
config :web,
|
|
external_trusted_proxies: compile_config!(:phoenix_external_trusted_proxies),
|
|
private_clients: compile_config!(:phoenix_private_clients)
|
|
|
|
config :web,
|
|
cookie_secure: compile_config!(:phoenix_secure_cookies),
|
|
cookie_signing_salt: compile_config!(:cookie_signing_salt),
|
|
cookie_encryption_salt: compile_config!(:cookie_encryption_salt)
|
|
|
|
config :web, api_url_override: compile_config!(:api_url_override)
|
|
|
|
###############################
|
|
##### API #####################
|
|
###############################
|
|
|
|
config :api, API.Endpoint,
|
|
http: [
|
|
ip: compile_config!(:phoenix_listen_address).address,
|
|
port: compile_config!(:phoenix_http_api_port),
|
|
protocol_options: compile_config!(:phoenix_http_protocol_options)
|
|
],
|
|
url: [
|
|
scheme: external_url_scheme,
|
|
host: external_url_host,
|
|
port: external_url_port,
|
|
path: external_url_path
|
|
],
|
|
secret_key_base: compile_config!(:secret_key_base)
|
|
|
|
config :api,
|
|
cookie_secure: compile_config!(:phoenix_secure_cookies),
|
|
cookie_signing_salt: compile_config!(:cookie_signing_salt),
|
|
cookie_encryption_salt: compile_config!(:cookie_encryption_salt)
|
|
|
|
config :api,
|
|
external_trusted_proxies: compile_config!(:phoenix_external_trusted_proxies),
|
|
private_clients: compile_config!(:phoenix_private_clients)
|
|
end
|
|
|
|
###############################
|
|
##### Third-party configs #####
|
|
###############################
|
|
|
|
if logger_formatter = compile_config!(:logger_formatter) do
|
|
logger_formatter_opts =
|
|
compile_config!(:logger_formatter_opts) ++
|
|
[metadata: {:all_except, [:socket, :conn, :otel_trace_flags]}]
|
|
|
|
config :logger, :default_handler, formatter: {logger_formatter, logger_formatter_opts}
|
|
end
|
|
|
|
if System.get_env("OTLP_ENDPOINT") do
|
|
config :opentelemetry, resource_detectors: [:otel_resource_env_var, :otel_resource_app_env]
|
|
|
|
config :opentelemetry,
|
|
span_processor: :batch,
|
|
traces_exporter: :otlp
|
|
|
|
config :opentelemetry_exporter,
|
|
otlp_protocol: :http_protobuf,
|
|
otlp_traces_protocol: :http_protobuf,
|
|
otlp_endpoint: System.get_env("OTLP_ENDPOINT")
|
|
end
|
|
|
|
config :domain, Domain.Telemetry, metrics_reporter: compile_config!(:telemetry_metrics_reporter)
|
|
|
|
if telemetry_metrics_reporter = compile_config!(:telemetry_metrics_reporter) do
|
|
config :domain, telemetry_metrics_reporter, compile_config!(:telemetry_metrics_reporter_opts)
|
|
end
|
|
|
|
config :domain,
|
|
http_client_ssl_opts: compile_config!(:http_client_ssl_opts)
|
|
|
|
config :openid_connect,
|
|
finch_transport_opts: compile_config!(:http_client_ssl_opts)
|
|
|
|
config :web,
|
|
Web.Mailer,
|
|
[
|
|
adapter: compile_config!(:outbound_email_adapter),
|
|
from_email: compile_config!(:outbound_email_from)
|
|
] ++ compile_config!(:outbound_email_adapter_opts)
|
|
|
|
config :workos, WorkOS.Client,
|
|
api_key: compile_config!(:workos_api_key),
|
|
client_id: compile_config!(:workos_client_id)
|
|
end
|