mirror of
https://github.com/harness/drone.git
synced 2025-05-05 00:30:05 +08:00
4668e94027
This change adds the initial stepping stones for harness integration: - Authentication: JWT/PAT/SAT support - Authorization: ACL integration (acl currently denies requests as gitness hasn't been integrated yet) - Remote Clients for Token, User, ServiceAccount, ACL - User Integration: Syncs harness users during authentication if unknown - SA integration: syncs harness service accounts during authentication if unknown - Initial harness API: THIS WILL BE CHANGED IN THE FUTURE! - single harness subpackage (all marked with harness build flag) - harness & standalone wire + make build commands
68 lines
3.3 KiB
Go
68 lines
3.3 KiB
Go
// Copyright 2021 Harness Inc. All rights reserved.
|
|
// Use of this source code is governed by the Polyform Free Trial License
|
|
// that can be found in the LICENSE.md file for this repository.
|
|
|
|
package types
|
|
|
|
import "time"
|
|
|
|
// Config stores the system configuration.
|
|
type Config struct {
|
|
Debug bool `envconfig:"GITNESS_DEBUG"`
|
|
Trace bool `envconfig:"GITNESS_TRACE"`
|
|
|
|
// Server defines the server configuration parameters.
|
|
Server struct {
|
|
Bind string `envconfig:"GITNESS_HTTP_BIND" default:":3000"`
|
|
Proto string `envconfig:"GITNESS_HTTP_PROTO"`
|
|
Host string `envconfig:"GITNESS_HTTP_HOST"`
|
|
|
|
// Acme defines Acme configuration parameters.
|
|
Acme struct {
|
|
Enabled bool `envconfig:"GITNESS_ACME_ENABLED"`
|
|
Endpont string `envconfig:"GITNESS_ACME_ENDPOINT"`
|
|
Email bool `envconfig:"GITNESS_ACME_EMAIL"`
|
|
}
|
|
}
|
|
|
|
// Database defines the database configuration parameters.
|
|
Database struct {
|
|
Driver string `envconfig:"GITNESS_DATABASE_DRIVER" default:"sqlite3"`
|
|
Datasource string `envconfig:"GITNESS_DATABASE_DATASOURCE" default:"database.sqlite3"`
|
|
}
|
|
|
|
// Token defines token configuration parameters.
|
|
Token struct {
|
|
Expire time.Duration `envconfig:"GITNESS_TOKEN_EXPIRE" default:"720h"`
|
|
}
|
|
|
|
// Cors defines http cors parameters
|
|
Cors struct {
|
|
AllowedOrigins []string `envconfig:"GITNESS_CORS_ALLOWED_ORIGINS" default:"*"`
|
|
AllowedMethods []string `envconfig:"GITNESS_CORS_ALLOWED_METHODS" default:"GET,POST,PATCH,PUT,DELETE,OPTIONS"`
|
|
AllowedHeaders []string `envconfig:"GITNESS_CORS_ALLOWED_HEADERS" default:"Origin,Accept,Accept-Language,Authorization,Content-Type,Content-Language,X-Requested-With,X-Request-Id"` //nolint:lll // struct tags can't be multiline
|
|
ExposedHeaders []string `envconfig:"GITNESS_CORS_EXPOSED_HEADERS" default:"Link"`
|
|
AllowCredentials bool `envconfig:"GITNESS_CORS_ALLOW_CREDENTIALS" default:"true"`
|
|
MaxAge int `envconfig:"GITNESS_CORS_MAX_AGE" default:"300"`
|
|
}
|
|
|
|
// Secure defines http security parameters.
|
|
Secure struct {
|
|
AllowedHosts []string `envconfig:"GITNESS_HTTP_ALLOWED_HOSTS"`
|
|
HostsProxyHeaders []string `envconfig:"GITNESS_HTTP_PROXY_HEADERS"`
|
|
SSLRedirect bool `envconfig:"GITNESS_HTTP_SSL_REDIRECT"`
|
|
SSLTemporaryRedirect bool `envconfig:"GITNESS_HTTP_SSL_TEMPORARY_REDIRECT"`
|
|
SSLHost string `envconfig:"GITNESS_HTTP_SSL_HOST"`
|
|
SSLProxyHeaders map[string]string `envconfig:"GITNESS_HTTP_SSL_PROXY_HEADERS"`
|
|
STSSeconds int64 `envconfig:"GITNESS_HTTP_STS_SECONDS"`
|
|
STSIncludeSubdomains bool `envconfig:"GITNESS_HTTP_STS_INCLUDE_SUBDOMAINS"`
|
|
STSPreload bool `envconfig:"GITNESS_HTTP_STS_PRELOAD"`
|
|
ForceSTSHeader bool `envconfig:"GITNESS_HTTP_STS_FORCE_HEADER"`
|
|
BrowserXSSFilter bool `envconfig:"GITNESS_HTTP_BROWSER_XSS_FILTER" default:"true"`
|
|
FrameDeny bool `envconfig:"GITNESS_HTTP_FRAME_DENY" default:"true"`
|
|
ContentTypeNosniff bool `envconfig:"GITNESS_HTTP_CONTENT_TYPE_NO_SNIFF"`
|
|
ContentSecurityPolicy string `envconfig:"GITNESS_HTTP_CONTENT_SECURITY_POLICY"`
|
|
ReferrerPolicy string `envconfig:"GITNESS_HTTP_REFERRER_POLICY"`
|
|
}
|
|
}
|