Configure doorkeeper keys for dev instances

openstreetmap · Nov 27, 2023 · 1859ef7 · 1859ef7
1 parent 0ba4525
commit 1859ef7
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/cookbooks/dev/recipes/default.rb b/cookbooks/dev/recipes/default.rb
@@ -386,6 +386,12 @@
         mode "755"
       end
 
+      openssl_rsa_private_key "#{site_directory}/doorkeeper.key" do
+        owner "root"
+        group "root"
+        mode "0400"
+      end
+
       rails_port site_name do
         directory rails_directory
         user "apis"
@@ -402,6 +408,7 @@
         csp_enforce true
         run_migrations true
         trace_use_job_queue true
+        doorkeeper_signing_key lazy { File.read("#{site_directory}/doorkeeper.key") }
       end
 
       template "#{rails_directory}/config/initializers/setup.rb" do