feat: Set up encryption key env var

theopensystemslab · Jan 25, 2024 · 3593095 · 3593095
1 parent 47bf539
commit 3593095
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 0 deletions.
diff --git a/.env.example b/.env.example
@@ -5,6 +5,7 @@
 # API
 API_PORT=7002
 API_URL_EXT=http://localhost:${API_PORT}
+ENCRYPTION_KEY=👻
 
 # JWT_SECRET must be at least 32 characters
 JWT_SECRET=👻

diff --git a/docker-compose.yml b/docker-compose.yml
@@ -142,6 +142,7 @@ services:
       ORDNANCE_SURVEY_API_KEY: ${ORDNANCE_SURVEY_API_KEY}
       MINIO_PORT: ${MINIO_PORT}
       CORS_ALLOWLIST: ${EDITOR_URL_EXT}
+      ENCRYPTION_KEY: ${ENCRYPTION_KEY}
       # Local authority config
       # Lambeth
       GOV_UK_PAY_TOKEN_LAMBETH: ${GOV_UK_PAY_TOKEN_LAMBETH}

diff --git a/infrastructure/application/Pulumi.production.yaml b/infrastructure/application/Pulumi.production.yaml
@@ -6,6 +6,8 @@ config:
   application:bops-api-token:
     secure: AAABALRtSjQMRjERtkHs6WBOI7MBMw4bFOuHO8qLLPe9Pfg8Nlbp61XalZA1pmXsRt/T+59fGcdqbKA5WRkOZVibhFo=
   application:cloudflare-zone-id: a9b9933f28e786ec4cfd4bb596f5a519
+  application:encryption-token:
+    secure: AAABAPhLlb8bwYKCvJW3vOnM8e9yEx7wW/EUWJQWsF2nEej7Zs0/zIm5hoJq1ltDZ6D4YU1WmAxyrgh1vSQTatJNl55q56gNWwrpZTZamg/9IH5nPo+PzOrkWxBErzC+
   application:file-api-key:
     secure: AAABAGyTfLujGho+V0tEhFXQRET5FjYK6txyaFTB3gY/VaKzq8yNlocJTAM5nt8mBhF6T+AeQD2GxW63
   application:file-api-key-nexus:

diff --git a/infrastructure/application/Pulumi.staging.yaml b/infrastructure/application/Pulumi.staging.yaml
@@ -7,6 +7,8 @@ config:
     secure: AAABAJx2KnnFeuEmwRB5VyE790TeYxiKmWFuVXVY8Lb7+HDNRYND8Pfd9d61zjwPzi9Jf2ZlT0OH++1MXYafhdQO28Y=
   application:cloudflare-zone-id:
     secure: AAABAPZz/bzFCZEZd+jzPpYP4HXAOLYQmLGf2YLQE2YPfMBUtDC83KCo2l2DJ4AL4OKL+jFFx8wrrJc6DDwXJQ==
+  application:encryption-token:
+    secure: AAABAHgpGq29S4PSqVz8QRkZdj3CrlCHWfp+qXZ0adpb1u/o1YWtvmn3Z0+XLO0gItZlRS6NbLvlCa4wk96Ia1oCcdOkv4jrVG05WOBSmRprqYwa7FWWXvegMS6HhiXV
   application:file-api-key:
     secure: AAABAN0LjLOgxCkr5ZqQLn6FkZPcrPlvNG4fbNZ02W2qC1VVYVee/3aToZQuXuokVwnIPNbbe2w=
   application:file-api-key-nexus:

diff --git a/infrastructure/application/index.ts b/infrastructure/application/index.ts
@@ -381,6 +381,10 @@ export = async () => {
             name: "ORDNANCE_SURVEY_API_KEY",
             value: config.requireSecret("ordnance-survey-api-key"),
           },
+          {
+            name: "ENCRYPTION_KEY",
+            value: config.requireSecret("encryption-key"),
+          },
           generateCORSAllowList(CUSTOM_DOMAINS, DOMAIN),
           ...generateTeamSecrets(config, env),
         ],