app.yml

# Template setup of the GVC, roughly corresponding to a Heroku app
kind: gvc
name: {{APP_NAME}}
spec:
  # For using templates for test apps, put ENV values here, stored in git repo.
  # Production apps will have values configured manually after app creation.
  env:
    - name: DATABASE_URL
      # Password does not matter because host postgres.{{APP_NAME}}.cpln.local can only be accessed
      # locally within CPLN GVC, and postgres running on a CPLN workload is something only for a
      # test app that lacks persistence.
      value: 'postgres://the_user:the_password@postgres.{{APP_NAME}}.cpln.local:5432/{{APP_NAME}}'
    - name: RAILS_ENV
      value: production
    - name: NODE_ENV
      value: production
    - name: RAILS_SERVE_STATIC_FILES
      value: 'true'
    - name: REDIS_URL
      # No password for GVC local Redis. See comment above for postgres.
      value: 'redis://redis.{{APP_NAME}}.cpln.local:6379'
    - name: SECRET_KEY_BASE
      # For test apps, a placeholder value is fine. For production apps, this should be
      # set to a secure random value using: openssl rand -hex 64
      # Production apps should configure this manually after app creation via a secret.
      value: 'placeholder_secret_key_base_for_test_apps_only'
    # Pro Node renderer settings. The renderer process runs in the same
    # container as Rails (see .controlplane/Dockerfile CMD).
    - name: RENDERER_PORT
      value: '3800'
    - name: RENDERER_LOG_LEVEL
      value: info
    - name: RENDERER_WORKERS_COUNT
      value: '2'
    - name: RENDERER_URL
      value: http://localhost:3800
    # RENDERER_PASSWORD and REACT_ON_RAILS_PRO_LICENSE must be created in the
    # Control Plane Secret named by {{APP_SECRETS}} before deploy. cpflow
    # resolves {{APP_SECRETS}} to `{APP_PREFIX}-secrets` — which means review
    # apps all share one `qa-react-webpack-rails-tutorial-secrets` (thanks to
    # match_if_app_name_starts_with: true on the qa template).
    - name: RENDERER_PASSWORD
      value: cpln://secret/{{APP_SECRETS}}.RENDERER_PASSWORD
    - name: REACT_ON_RAILS_PRO_LICENSE
      value: cpln://secret/{{APP_SECRETS}}.REACT_ON_RAILS_PRO_LICENSE
  # Part of standard configuration
  staticPlacement:
    locationLinks:
      - {{APP_LOCATION_LINK}}

---
# Identity is needed to access secrets
kind: identity
name: {{APP_IDENTITY}}