.secrets

# Secret environment variables used by services
#
# The values below are obviously not secrets and
# SHOULD BE OVERRIDDEN in production. They are placed here,
# in a separate file from config vars, to highlight that fact.

# URL used by `overseer` to connect to the `manager`
# to update job and worker status.
# A secret because it includes authentication credentials
MANAGER_URL=http://admin:admin@manager:8000

# Secrets used in the `manager`'s Django app
DJANGO_GOOGLE_API_KEY=
DJANGO_POSTHOG_KEY=
DJANGO_SECRET_KEY=not-a-secret
DJANGO_SENDGRID_API_KEY=not-a-secret
DJANGO_SENTRY_DSN=
DJANGO_STRIPE_LIVE_SECRET_KEY=sk_live_xxxx
DJANGO_DJSTRIPE_WEBHOOK_SECRET=whsec_xxxx
DJANGO_USERFLOW_API_KEY=
DJANGO_USERFLOW_TOKEN=

# Password set in the `database` image
POSTGRES_PASSWORD=password

# URL used by `manager` and `scheduler` services to connect
# to the `database` service
# A secret because it includes authentication credentials
DATABASE_URL=postgres://stencila:password@database:5432/hub


# Password set in the `cache` image
REDIS_PASSWORD=password

# URL used by `manager` and `worker` services to connect
# to the `cache` service
# A secret because it includes authentication credentials
CACHE_URL=redis://stencila:password@cache:6379/0


# Password set in the `broker` image
RABBITMQ_DEFAULT_PASS=password

# URL used by `manager` and others services to connect
# to the `broker` service
# A secret because it includes authentication credentials
# Uses the default `stencila` vhost.
BROKER_URL=amqp://stencila:password@broker:5672/stencila


# Access key and secret for the `steward` to access cloud storage e.g. S3, GCS
STEWARD_ACCESS_KEY=access_key
STEWARD_ACCESS_SECRET=access_secret


# Credentials for `worker` service to access external APIs
CROSSREF_DEPOSIT_CREDENTIALS=username:password
DOCKER_REGISTRY_CREDENTIALS=username:password
GITHUB_API_CREDENTIALS=client_id:client_secret
STENCILA_API_TOKEN=token