-
Notifications
You must be signed in to change notification settings - Fork 59
/
manifest.yml.example
51 lines (50 loc) · 1.89 KB
/
manifest.yml.example
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
# See `Deploy via Cloud.gov` section in README.md for instructions on using this file
# https://docs.cloudfoundry.org/devguide/deploy-apps/manifest.html
applications:
- name: heimdall2 # Rename for your deployment
memory: 512m
disk_quota: 2g
instances: 1
stack: cflinuxfs3
timeout: 120
command: |
export DATABASE_HOST=$( echo $VCAP_SERVICES | jq -r '.system_env_json.VCAP_SERVICES["aws-rds"][].credentials.host') && \
export DATABASE_NAME=$( echo $VCAP_SERVICES | jq -r '.system_env_json.VCAP_SERVICES["aws-rds"][].credentials.db_name') && \
export DATABASE_PASSWORD=$( echo $VCAP_SERVICES | jq -r '.system_env_json.VCAP_SERVICES["aws-rds"][].credentials.password') && \
export DATABASE_PORT=$( echo $VCAP_SERVICES | jq -r '.system_env_json.VCAP_SERVICES["aws-rds"][].credentials.port') && \
export DATABASE_USERNAME=$( echo $VCAP_SERVICES | jq -r '.system_env_json.VCAP_SERVICES["aws-rds"][].credentials.username') && \
export JWT_SECRET=$(node -p "crypto.randomBytes(64).toString('hex')") && \
/usr/local/bin/cmd.sh
docker:
image: mitre/heimdall2:release-latest
services:
- heimdall2-db # Rename for your deployment
env:
NODE_ENV: production
ADMIN_PASSWORD: ChangeMe@123
# See /apps/backend/.env-example or https://github.com/mitre/heimdall2/wiki/Environment-Variables-Configuration for the full list and use of the following
#GITHUB_CLIENTID:
#GITHUB_CLIENTSECRET:
#GITLAB_CLIENTID:
#GITLAB_CLIENTSECRET:
#GOOGLE_CLIENTID:
#GOOGLE_CLIENTSECRET:
#OKTA_DOMAIN:
#OKTA_CLIENTID:
#OKTA_CLIENTSECRET:
#OIDC_NAME:
#OIDC_ISSUER:
#OIDC_AUTHORIZATION_URL:
#OIDC_TOKEN_URL:
#OIDC_USER_INFO_URL:
#OIDC_CLIENTID:
#OIDC_CLIENT_SECRET:
LDAP_ENABLED: false
#LDAP_HOST:
#LDAP_PORT:
#LDAP_BINDDN:
#LDAP_PASSWORD:
#LDAP_SEARCHBASE:
#LDAP_SEARCHFILTER:
#LDAP_NAMEFIELD:
#LDAP_MAILFIELD: