Split cutter and sheetsync creds so they can be different

This also means that they can't access each others' creds,
which is good for security.
pull/100/head
Mike Lang 5 years ago
parent 32d352e2ba
commit 514a7a4d08

@ -85,9 +85,14 @@
db_replication_password:: "standby", // don't use default in production. Must not contain ' or \ as these are not escaped. db_replication_password:: "standby", // don't use default in production. Must not contain ' or \ as these are not escaped.
db_standby:: false, // set to true to have this database replicate another server db_standby:: false, // set to true to have this database replicate another server
// Path to a JSON file containing google credentials as keys // Path to a JSON file containing google credentials for cutter as keys
// 'client_id', 'client_secret' and 'refresh_token'. // 'client_id', 'client_secret' and 'refresh_token'.
google_creds:: "./google_creds.json", cutter_creds_file:: "./google_creds.json",
// Path to a JSON file containing google credentials for sheetsync as keys
// 'client_id', 'client_secret' and 'refresh_token'.
// May be the same as cutter_creds_file.
sheetsync_creds_file:: "./google_creds.json",
// The URL to write to the sheet for edit links, with {} being replaced by the id // The URL to write to the sheet for edit links, with {} being replaced by the id
edit_url:: "http://thrimbletrimmer.codegunner.com/?id={}", edit_url:: "http://thrimbletrimmer.codegunner.com/?id={}",
@ -168,18 +173,19 @@
[if $.enabled.cutter then "cutter"]: { [if $.enabled.cutter then "cutter"]: {
image: "quay.io/ekimekim/wubloader-cutter:%s" % $.image_tag, image: "quay.io/ekimekim/wubloader-cutter:%s" % $.image_tag,
// Args for the cutter: DB and google creds // Args for the cutter: DB and creds
command: [ command: [
"--base-dir", "/mnt", "--base-dir", "/mnt",
"--backdoor-port", std.toString($.backdoor_port), "--backdoor-port", std.toString($.backdoor_port),
$.db_connect, $.db_connect,
"/etc/wubloader-google-creds.json", "/etc/wubloader-creds.json",
], ],
volumes: [ volumes: [
// Mount the segments directory at /mnt // Mount the segments directory at /mnt
"%s:/mnt" % $.segments_path, "%s:/mnt" % $.segments_path,
] + [
// Mount the creds file into /etc // Mount the creds file into /etc
"%s:/etc/wubloader-google-creds.json" % $.google_creds, "%s:/etc/wubloader-creds.json" % $.cutter_creds_file,
], ],
// If the application crashes, restart it. // If the application crashes, restart it.
restart: "on-failure", restart: "on-failure",
@ -212,14 +218,14 @@
command: [ command: [
"--backdoor-port", std.toString($.backdoor_port), "--backdoor-port", std.toString($.backdoor_port),
$.db_connect, $.db_connect,
"/etc/wubloader-google-creds.json", "/etc/wubloader-creds.json",
$.edit_url, $.edit_url,
$.bustime_start, $.bustime_start,
$.sheet_id, $.sheet_id,
] + $.worksheets, ] + $.worksheets,
volumes: [ volumes: [
// Mount the creds file into /etc // Mount the creds file into /etc
"%s:/etc/wubloader-google-creds.json" % $.google_creds, "%s:/etc/wubloader-creds.json" % $.sheetsync_creds_file,
], ],
// If the application crashes, restart it. // If the application crashes, restart it.
restart: "on-failure", restart: "on-failure",

Loading…
Cancel
Save