ChRIS store backend production services secret configuration files

Abstract

This page describes the configuration files required by the production deployment of the ChRIS store backend services. Those files can contain secret variables such as API keys and authentication passwords as well as other configuration variables.

Currently required files

• .chris_store.env
• .chris_store_db.env
• .swift_service.env

Those files should be copied within a secrets folder created under the appropriate path inside the source of the repo, like:

git clone https://github.com/FNNDSC/ChRIS_store
cd ChRIS_store
mkdir swarm/prod/secrets

Secret configuration file options

.chris_store.env

DJANGO_SETTINGS_MODULE=config.settings.production
DJANGO_ALLOWED_HOSTS=*
DJANGO_SECRET_KEY="key1"
DJANGO_CORS_ALLOW_ALL_ORIGINS=true
DJANGO_CORS_ALLOWED_ORIGINS=https://babymri.org
DJANGO_SECURE_PROXY_SSL_HEADER=
DJANGO_USE_X_FORWARDED_HOST=false
DJANGO_DB_MIGRATE=on
SWIFT_CONTAINER_NAME=store_users

.chris_store_db.env

POSTGRES_DB=chris_store
POSTGRES_USER=chris
POSTGRES_PASSWORD=password1

.swift_service.env

SWIFT_USERNAME=chris:chris1234
SWIFT_KEY=testing

Reverse Proxy Settings

If the app is behind a reverse-proxy to enable HTTPS upgrade, in .chris_store.env set

DJANGO_SECURE_PROXY_SSL_HEADER=HTTP_X_FORWARDED_PROTO,https
DJANGO_USE_X_FORWARDED_HOST=true