mirror of
https://github.com/IT4Change/gradido.git
synced 2026-02-06 09:56:05 +00:00
356 lines
12 KiB
TypeScript
356 lines
12 KiB
TypeScript
// eslint-disable-next-line import/no-unresolved
|
|
import {
|
|
COMMUNITY_NAME,
|
|
COMMUNITY_URL,
|
|
COMMUNITY_DESCRIPTION,
|
|
COMMUNITY_SUPPORT_MAIL,
|
|
DB_HOST,
|
|
DB_PASSWORD,
|
|
DB_PORT,
|
|
DB_USER,
|
|
DB_VERSION,
|
|
DB_DATABASE,
|
|
DECAY_START_TIME,
|
|
GDT_API_URL,
|
|
GDT_ACTIVE,
|
|
GMS_ACTIVE,
|
|
GRAPHIQL,
|
|
HUMHUB_ACTIVE,
|
|
LOG4JS_CONFIG,
|
|
LOGIN_APP_SECRET,
|
|
LOGIN_SERVER_KEY,
|
|
LOG_LEVEL,
|
|
NODE_ENV,
|
|
PRODUCTION,
|
|
TYPEORM_LOGGING_RELATIVE_PATH,
|
|
} from '@config/commonSchema'
|
|
import Joi from 'joi'
|
|
|
|
export const schema = Joi.object({
|
|
COMMUNITY_NAME,
|
|
COMMUNITY_URL,
|
|
COMMUNITY_DESCRIPTION,
|
|
COMMUNITY_SUPPORT_MAIL,
|
|
DB_HOST,
|
|
DB_PASSWORD,
|
|
DB_PORT,
|
|
DB_USER,
|
|
DB_VERSION,
|
|
DB_DATABASE,
|
|
DECAY_START_TIME,
|
|
GDT_API_URL,
|
|
GDT_ACTIVE,
|
|
GMS_ACTIVE,
|
|
GRAPHIQL,
|
|
HUMHUB_ACTIVE,
|
|
LOG4JS_CONFIG,
|
|
LOGIN_APP_SECRET,
|
|
LOGIN_SERVER_KEY,
|
|
LOG_LEVEL,
|
|
NODE_ENV,
|
|
PRODUCTION,
|
|
TYPEORM_LOGGING_RELATIVE_PATH,
|
|
|
|
COMMUNITY_REDEEM_URL: Joi.string()
|
|
.uri({ scheme: ['http', 'https'] })
|
|
.description('The url for redeeming link transactions, must start with frontend base url')
|
|
.default('http://0.0.0.0/redeem/')
|
|
.custom((value: string, helpers: Joi.CustomHelpers<string>): string | Joi.ErrorReport => {
|
|
// eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-member-access
|
|
if (!value.startsWith(helpers.state.ancestors[0].COMMUNITY_URL)) {
|
|
return helpers.error('string.pattern.base', { value, communityUrl: COMMUNITY_URL })
|
|
}
|
|
return value
|
|
})
|
|
.required(),
|
|
|
|
COMMUNITY_REDEEM_CONTRIBUTION_URL: Joi.string()
|
|
.uri({ scheme: ['http', 'https'] })
|
|
.custom((value: string, helpers: Joi.CustomHelpers<string>): string | Joi.ErrorReport => {
|
|
// eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-member-access
|
|
if (!value.startsWith(helpers.state.ancestors[0].COMMUNITY_URL)) {
|
|
return helpers.error('string.pattern.base', { value, communityUrl: COMMUNITY_URL })
|
|
}
|
|
return value
|
|
})
|
|
.description(
|
|
'The url for redeeming contribution link transactions, must start with frontend base url.',
|
|
)
|
|
.default('http://0.0.0.0/redeem/CL-')
|
|
.required(),
|
|
|
|
DLT_CONNECTOR: Joi.boolean()
|
|
.description('Flag to indicate if DLT-Connector is used. (Still in development)')
|
|
.default(false)
|
|
.required(),
|
|
|
|
DLT_CONNECTOR_URL: Joi.string()
|
|
.uri({ scheme: ['http', 'https'] })
|
|
.default('http://localhost:6010')
|
|
.when('DLT_CONNECTOR', { is: true, then: Joi.required() })
|
|
.description('The URL for GDT API endpoint'),
|
|
|
|
EMAIL: Joi.boolean()
|
|
.default(false)
|
|
.description('Enable or disable email functionality')
|
|
.required(),
|
|
|
|
EMAIL_TEST_MODUS: Joi.boolean()
|
|
.default(false)
|
|
.description('When enabled, all emails are sended to EMAIL_TEST_RECEIVER')
|
|
.optional(),
|
|
|
|
EMAIL_TEST_RECEIVER: Joi.string()
|
|
.email()
|
|
.default('stage1@gradido.net')
|
|
.when('EMAIL_TEST_MODUS', { is: true, then: Joi.required() })
|
|
.description('Email address used in test mode'),
|
|
|
|
EMAIL_USERNAME: Joi.alternatives().conditional(Joi.ref('EMAIL'), {
|
|
is: true,
|
|
then: Joi.alternatives().conditional(Joi.ref('NODE_ENV'), {
|
|
is: 'development',
|
|
then: Joi.string()
|
|
.allow('')
|
|
.description('Username for SMTP authentication (optional in development)'),
|
|
otherwise: Joi.string()
|
|
.pattern(/^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/)
|
|
.description('Valid SMTP username required in production')
|
|
.required(),
|
|
}),
|
|
otherwise: Joi.string().allow('').optional(),
|
|
}),
|
|
|
|
EMAIL_SENDER: Joi.string()
|
|
.email()
|
|
.when('EMAIL', { is: true, then: Joi.required() })
|
|
.default('info@gradido.net')
|
|
.description('Email address used as sender'),
|
|
|
|
EMAIL_PASSWORD: Joi.alternatives().conditional(Joi.ref('EMAIL'), {
|
|
is: true,
|
|
then: Joi.alternatives().conditional(Joi.ref('NODE_ENV'), {
|
|
is: 'development',
|
|
then: Joi.string()
|
|
.allow('')
|
|
.description('Password for SMTP authentication (optional in development)'),
|
|
otherwise: Joi.string()
|
|
.min(8)
|
|
.pattern(/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&#]).{8,}$/)
|
|
.description(
|
|
'Password must be at least 8 characters long, include uppercase and lowercase letters, a number, and a special character',
|
|
)
|
|
.required(),
|
|
}),
|
|
otherwise: Joi.string().allow('').optional(),
|
|
}),
|
|
|
|
EMAIL_SMTP_HOST: Joi.string()
|
|
.hostname()
|
|
.when('EMAIL', { is: true, then: Joi.required() })
|
|
.default('mailserver')
|
|
.description('SMTP server hostname'),
|
|
|
|
EMAIL_SMTP_PORT: Joi.number()
|
|
.integer()
|
|
.positive()
|
|
.when('EMAIL', { is: true, then: Joi.required() })
|
|
.default(1025)
|
|
.description('SMTP server port'),
|
|
|
|
EMAIL_TLS: Joi.boolean().default(true).description('Enable or disable TLS for SMTP').optional(),
|
|
|
|
EMAIL_LINK_VERIFICATION: Joi.string()
|
|
.uri({ scheme: ['http', 'https'] })
|
|
.custom((value: string, helpers: Joi.CustomHelpers<string>): string | Joi.ErrorReport => {
|
|
// eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-member-access
|
|
if (!value.startsWith(helpers.state.ancestors[0].COMMUNITY_URL)) {
|
|
return helpers.error('string.pattern.base', { value, communityUrl: COMMUNITY_URL })
|
|
}
|
|
return value
|
|
})
|
|
.description('Email Verification link for activate Email.')
|
|
.required(),
|
|
|
|
EMAIL_LINK_SETPASSWORD: Joi.string()
|
|
.uri({ scheme: ['http', 'https'] })
|
|
.custom((value: string, helpers: Joi.CustomHelpers<string>): string | Joi.ErrorReport => {
|
|
// eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-member-access
|
|
if (!value.startsWith(helpers.state.ancestors[0].COMMUNITY_URL)) {
|
|
return helpers.error('string.pattern.base', { value, communityUrl: COMMUNITY_URL })
|
|
}
|
|
return value
|
|
})
|
|
.description('Email Verification link for set initial Password.')
|
|
.required(),
|
|
|
|
EMAIL_LINK_FORGOTPASSWORD: Joi.string()
|
|
.uri({ scheme: ['http', 'https'] })
|
|
.custom((value: string, helpers: Joi.CustomHelpers<string>): string | Joi.ErrorReport => {
|
|
// eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-member-access
|
|
if (!value.startsWith(helpers.state.ancestors[0].COMMUNITY_URL)) {
|
|
return helpers.error('string.pattern.base', { value, communityUrl: COMMUNITY_URL })
|
|
}
|
|
return value
|
|
})
|
|
.description('Email Verification link for set new Password, when old Password was forgotten.')
|
|
.required(),
|
|
|
|
EMAIL_LINK_OVERVIEW: Joi.string()
|
|
.uri({ scheme: ['http', 'https'] })
|
|
.custom((value: string, helpers: Joi.CustomHelpers<string>): string | Joi.ErrorReport => {
|
|
// eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-member-access
|
|
if (!value.startsWith(helpers.state.ancestors[0].COMMUNITY_URL)) {
|
|
return helpers.error('string.pattern.base', { value, communityUrl: COMMUNITY_URL })
|
|
}
|
|
return value
|
|
})
|
|
.description('Link to Wallet Overview')
|
|
.required(),
|
|
|
|
EMAIL_CODE_VALID_TIME: Joi.number()
|
|
.integer()
|
|
.positive()
|
|
.max(43200) // max at 30 days
|
|
.default(1440)
|
|
.description('Time in minutes a code is valid')
|
|
.required(),
|
|
|
|
EMAIL_CODE_REQUEST_TIME: Joi.number()
|
|
.integer()
|
|
.positive()
|
|
.max(43200) // max at 30 days
|
|
.default(10)
|
|
.description('Time in minutes before a new code can be requested')
|
|
.required(),
|
|
|
|
FEDERATION_BACKEND_SEND_ON_API: Joi.string()
|
|
.pattern(/^\d+_\d+$/)
|
|
.default('1_0')
|
|
.description('API Version of sending requests to another communities, e.g., "1_0"')
|
|
.required(),
|
|
|
|
FEDERATION_VALIDATE_COMMUNITY_TIMER: Joi.number()
|
|
.integer()
|
|
.min(1000)
|
|
.default(60000)
|
|
.description('Timer interval in milliseconds for community validation')
|
|
.required(),
|
|
|
|
FEDERATION_XCOM_SENDCOINS_ENABLED: Joi.boolean()
|
|
.default(false)
|
|
.description('Enable or disable the federation send coins feature')
|
|
.optional(),
|
|
|
|
FEDERATION_XCOM_RECEIVER_COMMUNITY_UUID: Joi.string()
|
|
.uuid()
|
|
.default('56a55482-909e-46a4-bfa2-cd025e894ebc')
|
|
.description(
|
|
'UUID of the receiver community for federation cross-community transactions if the receiver is unknown',
|
|
)
|
|
.required(),
|
|
|
|
FEDERATION_XCOM_MAXREPEAT_REVERTSENDCOINS: Joi.number()
|
|
.integer()
|
|
.min(0)
|
|
.default(3)
|
|
.description('Maximum number of retries for reverting send coins transactions')
|
|
.required(),
|
|
|
|
GMS_CREATE_USER_THROW_ERRORS: Joi.boolean()
|
|
.default(false)
|
|
.when('GMS_ACTIVE', { is: true, then: Joi.required(), otherwise: Joi.optional() })
|
|
.description('Whether errors should be thrown when creating users in GMS'),
|
|
|
|
GMS_API_URL: Joi.string()
|
|
.uri({ scheme: ['http', 'https'] })
|
|
.when('GMS_ACTIVE', { is: true, then: Joi.required(), otherwise: Joi.optional() })
|
|
.default('http://localhost:4044/')
|
|
.description('The API URL for the GMS service'),
|
|
|
|
GMS_DASHBOARD_URL: Joi.string()
|
|
.uri({ scheme: ['http', 'https'] })
|
|
.when('GMS_ACTIVE', { is: true, then: Joi.required(), otherwise: Joi.optional() })
|
|
.default('http://localhost:8080/')
|
|
.description('The URL for the GMS dashboard'),
|
|
|
|
GMS_WEBHOOK_SECRET: Joi.string()
|
|
.min(1)
|
|
.default('secret')
|
|
.when('GMS_ACTIVE', { is: true, then: Joi.required(), otherwise: Joi.optional() })
|
|
.description('The secret postfix for the GMS webhook endpoint'),
|
|
|
|
HUMHUB_API_URL: Joi.string()
|
|
.uri({ scheme: ['http', 'https'] })
|
|
.when('HUMHUB_ACTIVE', { is: true, then: Joi.required(), otherwise: Joi.optional() })
|
|
.description('The API URL for HumHub integration'),
|
|
|
|
HUMHUB_JWT_KEY: Joi.string()
|
|
.min(1)
|
|
.when('HUMHUB_ACTIVE', {
|
|
is: true,
|
|
then: Joi.required(),
|
|
otherwise: Joi.string().allow('').optional(),
|
|
})
|
|
.description('JWT key for HumHub integration, must be the same as configured in humhub'),
|
|
|
|
PORT: Joi.number()
|
|
.integer()
|
|
.min(1024)
|
|
.max(49151)
|
|
.description('Port for hosting backend, default: 4000')
|
|
.default(4000)
|
|
.required(),
|
|
|
|
KLICKTIPP: Joi.boolean()
|
|
.default(false)
|
|
.description("Indicates whether Klicktipp integration is enabled, 'true' or 'false'"),
|
|
|
|
KLICKTTIPP_API_URL: Joi.string()
|
|
.uri({ scheme: ['https'] }) // Sicherstellen, dass es eine gültige HTTPS-URL ist
|
|
.default('https://api.klicktipp.com')
|
|
.description("The API URL for Klicktipp, must be a valid URL starting with 'https'"),
|
|
|
|
KLICKTIPP_USER: Joi.string().default('gradido_test').description('The username for Klicktipp'),
|
|
|
|
KLICKTIPP_PASSWORD: Joi.string()
|
|
.min(6)
|
|
.default('secret321')
|
|
.description('The password for Klicktipp, should be at least 6 characters'),
|
|
|
|
KLICKTIPP_APIKEY_DE: Joi.string()
|
|
.default('SomeFakeKeyDE')
|
|
.description('The API key for Klicktipp (German version)'),
|
|
|
|
KLICKTIPP_APIKEY_EN: Joi.string()
|
|
.default('SomeFakeKeyEN')
|
|
.description('The API key for Klicktipp (English version)'),
|
|
|
|
USE_CRYPTO_WORKER: Joi.boolean()
|
|
.default(false)
|
|
.description(
|
|
'Flag to enable or disable password encryption in separate thread, should be enabled if possible',
|
|
),
|
|
|
|
// TODO: check format
|
|
JWT_SECRET: Joi.string()
|
|
.default('secret123')
|
|
.description('jwt secret for jwt tokens used for login')
|
|
.required(),
|
|
|
|
JWT_EXPIRES_IN: Joi.alternatives()
|
|
.try(
|
|
Joi.string()
|
|
.pattern(/^\d+[smhdw]$/) // Time specification such as “10m”, “1h”, “2d”, etc.
|
|
.description('Expiration time for JWT login token, in format like "10m", "1h", "1d"')
|
|
.default('10m'),
|
|
Joi.number()
|
|
.positive() // positive number to accept seconds
|
|
.description('Expiration time for JWT login token in seconds'),
|
|
)
|
|
.required()
|
|
.description('Time for JWT token to expire, auto logout'),
|
|
|
|
WEBHOOK_ELOPAGE_SECRET: Joi.string().description("isn't really used any more").optional(),
|
|
})
|