-
Notifications
You must be signed in to change notification settings - Fork 153
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
4 changed files
with
11 additions
and
99 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,86 +1 @@ | ||
| # Pulse endpoints. If you need to do local integration testing between the foundation | ||
| # site and the pulse services, use the internal docker host syntax, e.g: | ||
| # | ||
| # PULSE_API_DOMAIN=http://host.docker.internal:8080 | ||
| # | ||
| # Note that for this to work, host.docker.internal should have a loopback entry in | ||
| # your etc/hosts file. Docker Desktop should have added this when it got installed, | ||
| # but if the line is not there, you'll need to manually add it. | ||
| # | ||
| PULSE_API_DOMAIN=https://network-pulse-api-production.herokuapp.com | ||
| PULSE_DOMAIN=https://www.mozillapulse.org | ||
|
|
||
| # Always add a protocol (ex: https://) in front of the NETWORK_SITE_URL, including for localhost | ||
| NETWORK_SITE_URL=http://localhost:8000 | ||
| WAGTAILADMIN_BASE_URL=http://localhost:8000 | ||
| DOMAIN_REDIRECT_MIDDLEWARE_ENABLED=False | ||
| TARGET_DOMAINS=foundation.mozilla.org | ||
|
|
||
| # network-api environment: | ||
| ALLOWED_HOSTS=* | ||
| # APP_ENVIRONMENT is used to prepend [S] or [RA] to page tab title & change favicon color, | ||
| # choices are "Review" and "Staging" and are set in Heroku. | ||
| APP_ENVIRONMENT= | ||
| ASSET_DOMAIN=network.mofoprod.net | ||
| CONTENT_TYPE_NO_SNIFF=True | ||
| CORS_ALLOWED_ORIGINS=* | ||
| CORS_ALLOWED_ORIGIN_REGEXES= | ||
| DATABASE_URL=postgresql://foundation@postgres:5432/wagtail | ||
| DEBUG=True | ||
| DEBUG_TOOLBAR_ENABLED=False | ||
| VSCODE_DEBUGGER=False | ||
| DJANGO_SECRET_KEY=secret | ||
| LOAD_FIXTURE=False | ||
| SET_HSTS=False | ||
| SOCIAL_AUTH_GOOGLE_OAUTH2_KEY= | ||
| SOCIAL_AUTH_GOOGLE_OAUTH2_SECRET= | ||
| SOCIAL_AUTH_LOGIN_REDIRECT_URL=http://localhost:5000/soc/complete/google-oauth2/ | ||
| SSL_REDIRECT=False | ||
| USE_S3=False | ||
| X_FRAME_OPTIONS=DENY | ||
| XSS_PROTECTION=True | ||
| XROBOTSTAG_ENABLED=False | ||
|
|
||
| # Basket config: | ||
|
|
||
| # See the Basket client docs https://basket-client.readthedocs.io/en/latest/install.html | ||
| BASKET_URL=https://basket-dev.allizom.org | ||
|
|
||
|
|
||
| # CSP config | ||
| CSP_CHILD_SRC=" 'self' https://www.youtube.com https://www.youtube-nocookie.com " | ||
| CSP_CONNECT_SRC=" * " | ||
| CSP_DEFAULT_SRC=" 'none' " | ||
| CSP_FONT_SRC=" 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://code.cdn.mozilla.net https://static.fundraiseup.com/fonts/ https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/" | ||
| CSP_FRAME_ANCESTORS=" 'self' " | ||
| CSP_FRAME_SRC=" 'self' https://www.youtube.com https://comments.mozillafoundation.org/ https://airtable.com https://docs.google.com/ https://platform.twitter.com https://public.zenkit.com https://calendar.google.com https://www.youtube-nocookie.com https://form.typeform.com https://js.tito.io https://datawrapper.dwcdn.net https://www.google.com/recaptcha/" | ||
| CSP_IMG_SRC=" * data: " | ||
| CSP_MEDIA_SRC=" 'self' data: https://s3.amazonaws.com/mofo-assets/foundation/video/ " | ||
| CSP_SCRIPT_SRC=" 'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js http://*.shpg.org/ https://comments.mozillafoundation.org/ https://airtable.com https://platform.twitter.com https://cdn.syndication.twimg.com https://embed.typeform.com https://js.tito.io https://js-plugins.tito.io/gtm.js https://tagmanager.google.com *.googletagmanager.com https://*.fundraiseup.com https://mozillafoundation.tfaforms.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-eval'" | ||
| CSP_STYLE_SRC=" 'self' 'unsafe-inline' https://code.cdn.mozilla.net https://fonts.googleapis.com https://platform.twitter.com https://js.tito.io https://tagmanager.google.com https://mozillafoundation.tfaforms.net https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css" | ||
| CSP_INCLUDE_NONCE_IN=script-src | ||
|
|
||
| # Security config | ||
| SECURE_CROSS_ORIGIN_OPENER_POLICY = " 'same-origin-allow-popups' " | ||
|
|
||
| # Petition test campaign id for Salesforce Sandbox | ||
| PETITION_TEST_CAMPAIGN_ID=7017i000000bIgTAAU | ||
|
|
||
| # Localization | ||
| LOCAL_PATH_TO_L10N_REPO= | ||
|
|
||
| # REVIEW APPS SLACK BOT | ||
| GITHUB_TOKEN= | ||
| SLACK_WEBHOOK_RA= | ||
|
|
||
| # BUYER'S GUIDE Configuration | ||
| PNI_STATS_DB_URL= | ||
| USE_COMMENTO= | ||
|
|
||
| # Sentry | ||
| SENTRY_DSN= | ||
| HEROKU_RELEASE_VERSION= | ||
| SENTRY_ENVIRONMENT= | ||
|
|
||
| # CDN configuration | ||
| STATIC_HOST= | ||
| https://raw.githubusercontent.com/MozillaFoundation/foundation.mozilla.org/f9f1af7c7fe0517a714f778556c6d1a0e423791e/env.default |