1 # Example, relatively minimal, configuration that passes validation (see `io.dropwizard.cli.CheckCommand`) 2 # 3 # `unset` values will need to be set to work properly. 4 # Most other values are technically valid for a local/demonstration environment, but are probably not production-ready. 5 6 logging: 7 level: INFO 8 appenders: 9 - type: console 10 threshold: ALL 11 timeZone: UTC 12 target: stdout 13 - type: logstashtcpsocket 14 destination: example.com:10516 15 apiKey: secret://datadog.apiKey 16 environment: staging 17 18 metrics: 19 reporters: 20 - type: signal-datadog 21 frequency: 10 seconds 22 tags: 23 - "env:staging" 24 - "service:chat" 25 udpTransport: 26 statsdHost: localhost 27 port: 8125 28 excludesAttributes: 29 - m1_rate 30 - m5_rate 31 - m15_rate 32 - mean_rate 33 - stddev 34 useRegexFilters: true 35 excludes: 36 - ^.+\.total$ 37 - ^.+\.request\.filtering$ 38 - ^.+\.response\.filtering$ 39 - ^executor\..+$ 40 - ^lettuce\..+$ 41 reportOnStop: true 42 43 adminEventLoggingConfiguration: 44 credentials: | 45 { 46 "key": "value" 47 } 48 projectId: some-project-id 49 logName: some-log-name 50 51 grpcPort: 8080 52 53 stripe: 54 apiKey: secret://stripe.apiKey 55 idempotencyKeyGenerator: secret://stripe.idempotencyKeyGenerator 56 boostDescription: > 57 Example 58 supportedCurrenciesByPaymentMethod: 59 CARD: 60 - usd 61 - eur 62 SEPA_DEBIT: 63 - eur 64 65 66 braintree: 67 merchantId: unset 68 publicKey: unset 69 privateKey: secret://braintree.privateKey 70 environment: unset 71 graphqlUrl: unset 72 merchantAccounts: 73 # ISO 4217 currency code and its corresponding sub-merchant account 74 'xts': unset 75 supportedCurrenciesByPaymentMethod: 76 PAYPAL: 77 - usd 78 79 dynamoDbClientConfiguration: 80 region: us-west-2 # AWS Region 81 82 dynamoDbTables: 83 accounts: 84 tableName: Example_Accounts 85 phoneNumberTableName: Example_Accounts_PhoneNumbers 86 phoneNumberIdentifierTableName: Example_Accounts_PhoneNumberIdentifiers 87 usernamesTableName: Example_Accounts_Usernames 88 backups: 89 tableName: Example_Backups 90 backupMedia: 91 tableName: Example_BackupMedia 92 clientReleases: 93 tableName: Example_ClientReleases 94 deletedAccounts: 95 tableName: Example_DeletedAccounts 96 deletedAccountsLock: 97 tableName: Example_DeletedAccountsLock 98 issuedReceipts: 99 tableName: Example_IssuedReceipts 100 expiration: P30D # Duration of time until rows expire 101 generator: abcdefg12345678= # random base64-encoded binary sequence 102 ecKeys: 103 tableName: Example_Keys 104 ecSignedPreKeys: 105 tableName: Example_EC_Signed_Pre_Keys 106 pqKeys: 107 tableName: Example_PQ_Keys 108 pqLastResortKeys: 109 tableName: Example_PQ_Last_Resort_Keys 110 messages: 111 tableName: Example_Messages 112 expiration: P30D # Duration of time until rows expire 113 phoneNumberIdentifiers: 114 tableName: Example_PhoneNumberIdentifiers 115 profiles: 116 tableName: Example_Profiles 117 pushChallenge: 118 tableName: Example_PushChallenge 119 redeemedReceipts: 120 tableName: Example_RedeemedReceipts 121 expiration: P30D # Duration of time until rows expire 122 registrationRecovery: 123 tableName: Example_RegistrationRecovery 124 expiration: P300D # Duration of time until rows expire 125 remoteConfig: 126 tableName: Example_RemoteConfig 127 reportMessage: 128 tableName: Example_ReportMessage 129 subscriptions: 130 tableName: Example_Subscriptions 131 verificationSessions: 132 tableName: Example_VerificationSessions 133 134 cacheCluster: # Redis server configuration for cache cluster 135 configurationUri: redis://redis.example.com:6379/ 136 137 clientPresenceCluster: # Redis server configuration for client presence cluster 138 configurationUri: redis://redis.example.com:6379/ 139 140 pubsub: # Redis server configuration for pubsub cluster 141 uri: redis://redis.example.com:6379/ 142 143 pushSchedulerCluster: # Redis server configuration for push scheduler cluster 144 configurationUri: redis://redis.example.com:6379/ 145 146 rateLimitersCluster: # Redis server configuration for rate limiters cluster 147 configurationUri: redis://redis.example.com:6379/ 148 149 directoryV2: 150 client: # Configuration for interfacing with Contact Discovery Service v2 cluster 151 userAuthenticationTokenSharedSecret: secret://directoryV2.client.userAuthenticationTokenSharedSecret 152 userIdTokenSharedSecret: secret://directoryV2.client.userIdTokenSharedSecret 153 154 svr2: 155 uri: svr2.example.com 156 userAuthenticationTokenSharedSecret: secret://svr2.userAuthenticationTokenSharedSecret 157 userIdTokenSharedSecret: secret://svr2.userIdTokenSharedSecret 158 svrCaCertificates: 159 - | 160 -----BEGIN CERTIFICATE----- 161 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 162 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 163 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 164 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 165 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 166 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 167 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 168 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 169 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 170 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 171 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 172 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 173 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 174 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 175 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 176 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 177 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 178 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 179 AAAAAAAAAAAAAAAAAAAA 180 -----END CERTIFICATE----- 181 182 svr3: 183 uri: svr3.example.com 184 userAuthenticationTokenSharedSecret: secret://svr3.userAuthenticationTokenSharedSecret 185 userIdTokenSharedSecret: secret://svr3.userIdTokenSharedSecret 186 svrCaCertificates: 187 - | 188 -----BEGIN CERTIFICATE----- 189 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 190 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 191 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 192 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 193 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 194 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 195 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 196 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 197 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 198 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 199 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 200 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 201 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 202 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 203 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 204 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 205 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 206 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 207 AAAAAAAAAAAAAAAAAAAA 208 -----END CERTIFICATE----- 209 210 211 messageCache: # Redis server configuration for message store cache 212 persistDelayMinutes: 1 213 cluster: 214 configurationUri: redis://redis.example.com:6379/ 215 216 metricsCluster: 217 configurationUri: redis://redis.example.com:6379/ 218 219 awsAttachments: # AWS S3 configuration 220 accessKey: secret://awsAttachments.accessKey 221 accessSecret: secret://awsAttachments.accessSecret 222 bucket: aws-attachments 223 region: us-west-2 224 225 gcpAttachments: # GCP Storage configuration 226 domain: example.com 227 email: user@example.cocm 228 maxSizeInBytes: 1024 229 pathPrefix: 230 rsaSigningKey: secret://gcpAttachments.rsaSigningKey 231 232 tus: 233 uploadUri: https://example.org/upload 234 userAuthenticationTokenSharedSecret: secret://tus.userAuthenticationTokenSharedSecret 235 236 apn: # Apple Push Notifications configuration 237 sandbox: true 238 bundleId: com.example.textsecuregcm 239 keyId: secret://apn.keyId 240 teamId: secret://apn.teamId 241 signingKey: secret://apn.signingKey 242 243 fcm: # FCM configuration 244 credentials: secret://fcm.credentials 245 246 cdn: 247 accessKey: secret://cdn.accessKey 248 accessSecret: secret://cdn.accessSecret 249 bucket: cdn # S3 Bucket name 250 region: us-west-2 # AWS region 251 252 clientCdn: 253 attachmentUrls: 254 2: https://cdn2.example.com/attachments/ 255 caCertificates: 256 - | 257 -----BEGIN CERTIFICATE----- 258 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 259 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 260 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 261 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 262 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 263 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 264 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 265 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 266 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 267 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 268 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 269 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 270 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 271 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 272 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 273 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 274 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 275 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 276 AAAAAAAAAAAAAAAAAAAA 277 -----END CERTIFICATE----- 278 279 dogstatsd: 280 environment: dev 281 282 unidentifiedDelivery: 283 certificate: secret://unidentifiedDelivery.certificate 284 privateKey: secret://unidentifiedDelivery.privateKey 285 expiresDays: 7 286 287 recaptcha: 288 projectPath: projects/example 289 credentialConfigurationJson: "{ }" # service account configuration for backend authentication 290 291 hCaptcha: 292 apiKey: secret://hCaptcha.apiKey 293 294 shortCode: 295 baseUrl: https://example.com/shortcodes/ 296 297 storageService: 298 uri: storage.example.com 299 userAuthenticationTokenSharedSecret: secret://storageService.userAuthenticationTokenSharedSecret 300 storageCaCertificates: 301 - | 302 -----BEGIN CERTIFICATE----- 303 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 304 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 305 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 306 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 307 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 308 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 309 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 310 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 311 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 312 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 313 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 314 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 315 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 316 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 317 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 318 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 319 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 320 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 321 AAAAAAAAAAAAAAAAAAAA 322 -----END CERTIFICATE----- 323 324 zkConfig: 325 serverPublic: ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 326 serverSecret: secret://zkConfig.serverSecret 327 328 callingZkConfig: 329 serverSecret: secret://callingZkConfig.serverSecret 330 331 backupsZkConfig: 332 serverSecret: secret://backupsZkConfig.serverSecret 333 334 appConfig: 335 application: example 336 environment: example 337 configuration: example 338 339 remoteConfig: 340 authorizedUsers: 341 - # 1st authorized user 342 - # 2nd authorized user 343 - # ... 344 - # Nth authorized user 345 requiredHostedDomain: example.com 346 audiences: 347 - # 1st audience 348 - # 2nd audience 349 - # ... 350 - # Nth audience 351 globalConfig: # keys and values that are given to clients on GET /v1/config 352 EXAMPLE_KEY: VALUE 353 354 paymentsService: 355 userAuthenticationTokenSharedSecret: secret://paymentsService.userAuthenticationTokenSharedSecret 356 fixerApiKey: secret://paymentsService.fixerApiKey 357 coinMarketCapApiKey: secret://paymentsService.coinMarketCapApiKey 358 coinMarketCapCurrencyIds: 359 MOB: 7878 360 paymentCurrencies: 361 # list of symbols for supported currencies 362 - MOB 363 364 artService: 365 userAuthenticationTokenSharedSecret: secret://artService.userAuthenticationTokenSharedSecret 366 userAuthenticationTokenUserIdSecret: secret://artService.userAuthenticationTokenUserIdSecret 367 368 badges: 369 badges: 370 - id: TEST 371 category: other 372 sprites: # exactly 6 373 - sprite-1.png 374 - sprite-2.png 375 - sprite-3.png 376 - sprite-4.png 377 - sprite-5.png 378 - sprite-6.png 379 svg: example.svg 380 svgs: 381 - light: example-light.svg 382 dark: example-dark.svg 383 badgeIdsEnabledForAll: 384 - TEST 385 receiptLevels: 386 '1': TEST 387 388 subscription: # configuration for Stripe subscriptions 389 badgeGracePeriod: P15D 390 levels: 391 500: 392 badge: EXAMPLE 393 prices: 394 # list of ISO 4217 currency codes and amounts for the given badge level 395 xts: 396 amount: '10' 397 processorIds: 398 STRIPE: price_example # stripe Price ID 399 BRAINTREE: plan_example # braintree Plan ID 400 401 oneTimeDonations: 402 sepaMaximumEuros: '10000' 403 boost: 404 level: 1 405 expiration: P90D 406 badge: EXAMPLE 407 gift: 408 level: 10 409 expiration: P90D 410 badge: EXAMPLE 411 currencies: 412 # ISO 4217 currency codes and amounts in those currencies 413 xts: 414 minimum: '0.5' 415 gift: '2' 416 boosts: 417 - '1' 418 - '2' 419 - '4' 420 - '8' 421 - '20' 422 - '40' 423 424 registrationService: 425 host: registration.example.com 426 port: 443 427 credentialConfigurationJson: | 428 { 429 "example": "example" 430 } 431 identityTokenAudience: https://registration.example.com 432 registrationCaCertificate: | # Registration service TLS certificate trust root 433 -----BEGIN CERTIFICATE----- 434 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 435 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 436 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 437 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 438 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 439 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 440 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 441 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 442 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 443 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 444 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 445 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 446 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 447 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 448 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 449 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 450 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 451 ABCDEFGHIJKLMNOPQRSTUVWXYZ/0123456789+abcdefghijklmnopqrstuvwxyz 452 AAAAAAAAAAAAAAAAAAAA 453 -----END CERTIFICATE----- 454 455 turn: 456 secret: secret://turn.secret 457 458 commandStopListener: 459 path: /example/path 460 461 linkDevice: 462 secret: secret://linkDevice.secret