han-app/codebase/backend/deployment/secrets/config.example.json

{
  "version": 1,
  "mode": "selectel",
  "runtime_dir": "/run/han-chat/secrets",
  "http": {
    "timeout_seconds": 10,
    "retries": 3,
    "max_response_bytes": 1048576
  },
  "selectel": {
    "account_id": "123456",
    "username": "han-secrets-reader",
    "project_name": "han-production",
    "region": "ru-9",
    "interface": "public",
    "password_file": "selectel-service-user-password"
  },
  "secrets": {
    "DATABASE_URL": {
      "remote": "DATABASE_URL",
      "consumers": ["api-backend", "api-migrate"],
      "max_bytes": 4096
    },
    "BITRIX_DATABASE_URL": {
      "remote": "BITRIX_DATABASE_URL",
      "consumers": ["bitrix-local-app", "bitrix-local-migrate"],
      "max_bytes": 4096
    },
    "BITRIX_SYNC_DATABASE_URL": {
      "remote": "BITRIX_SYNC_DATABASE_URL",
      "consumers": ["bitrix-sync", "bitrix-sync-migrate"],
      "max_bytes": 4096
    },
    "SMS_DATABASE_URL": {
      "remote": "SMS_DATABASE_URL",
      "consumers": ["sms-service", "sms-worker", "sms-migrate"],
      "max_bytes": 4096
    },
    "KEYCLOAK_DB_PASSWORD": {
      "remote": "KEYCLOAK_DB_PASSWORD",
      "consumers": ["keycloak"],
      "max_bytes": 1024
    },
    "KEYCLOAK_ADMIN_PASSWORD": {
      "remote": "KEYCLOAK_ADMIN_PASSWORD",
      "consumers": ["keycloak"],
      "max_bytes": 1024
    },
    "CURSOR_HMAC_SECRET": {
      "remote": "CURSOR_HMAC_SECRET",
      "consumers": ["api-backend"],
      "max_bytes": 1024
    },
    "KEYCLOAK_OTP_HMAC_KEY": {
      "remote": "KEYCLOAK_OTP_HMAC_KEY",
      "consumers": ["keycloak"],
      "max_bytes": 1024
    },
    "KEYCLOAK_OTP_MOCK_CODE": {
      "remote": "KEYCLOAK_OTP_MOCK_CODE",
      "consumers": ["keycloak"],
      "max_bytes": 1024
    },
    "KEYCLOAK_YANDEX_CAPTCHA_SERVER_KEY": {
      "remote": "KEYCLOAK_YANDEX_CAPTCHA_SERVER_KEY",
      "consumers": ["keycloak"],
      "max_bytes": 1024
    },
    "BITRIX_TOKEN_ENCRYPTION_KEY": {
      "remote": "BITRIX_TOKEN_ENCRYPTION_KEY",
      "consumers": ["api-backend", "bitrix-local-app", "bitrix-sync"],
      "max_bytes": 1024
    },
    "REDIS_API_PASSWORD": {
      "remote": "REDIS_API_PASSWORD",
      "consumers": ["redis"],
      "max_bytes": 1024
    },
    "REDIS_URL": {
      "remote": "REDIS_URL",
      "consumers": ["api-backend", "delivery-worker", "cleanup-worker"],
      "max_bytes": 4096
    },
    "REDIS_REALTIME_URL": {
      "remote": "REDIS_REALTIME_URL",
      "consumers": ["api-backend"],
      "max_bytes": 4096
    },
    "REDIS_SAFETY_PASSWORD": {
      "remote": "REDIS_SAFETY_PASSWORD",
      "consumers": ["redis"],
      "max_bytes": 1024
    },
    "MESSAGE_SAFETY_REDIS_URL": {
      "remote": "MESSAGE_SAFETY_REDIS_URL",
      "consumers": ["message-safety", "safety-recovery-worker"],
      "max_bytes": 4096
    },
    "REDIS_HEALTH_PASSWORD": {
      "remote": "REDIS_HEALTH_PASSWORD",
      "consumers": ["redis", "redis-exporter"],
      "max_bytes": 1024
    },
    "MESSAGE_SAFETY_SERVICE_TOKEN": {
      "remote": "MESSAGE_SAFETY_SERVICE_TOKEN",
      "consumers": ["api-backend", "message-safety"],
      "max_bytes": 1024
    },
    "BITRIX_LOCAL_APP_INTERNAL_TOKEN": {
      "remote": "BITRIX_LOCAL_APP_INTERNAL_TOKEN",
      "consumers": ["api-backend", "bitrix-local-app"],
      "max_bytes": 1024
    },
    "BITRIX_INTERNAL_API_TOKEN": {
      "remote": "BITRIX_LOCAL_APP_INTERNAL_TOKEN",
      "consumers": ["api-backend", "bitrix-local-app"],
      "max_bytes": 1024
    },
    "BITRIX_API_FORWARD_TOKEN": {
      "remote": "BITRIX_API_FORWARD_TOKEN",
      "consumers": ["api-backend", "bitrix-local-app"],
      "max_bytes": 1024
    },
    "BITRIX_API_INBOX_TOKEN": {
      "remote": "BITRIX_API_FORWARD_TOKEN",
      "consumers": ["api-backend", "bitrix-local-app"],
      "max_bytes": 1024
    },
    "BITRIX_SYNC_SERVICE_TOKEN": {
      "remote": "BITRIX_SYNC_SERVICE_TOKEN",
      "consumers": ["api-backend", "bitrix-sync"],
      "max_bytes": 1024
    },
    "KEYCLOAK_SETTINGS_BRIDGE_TOKEN": {
      "remote": "KEYCLOAK_SETTINGS_BRIDGE_TOKEN",
      "consumers": ["api-backend", "keycloak"],
      "max_bytes": 1024
    },
    "SMS_SERVICE_TOKEN": {
      "remote": "SMS_SERVICE_TOKEN",
      "consumers": ["sms-service", "sms-worker", "keycloak"],
      "max_bytes": 1024
    },
    "KEYCLOAK_SMS_SERVICE_TOKEN": {
      "remote": "SMS_SERVICE_TOKEN",
      "consumers": ["sms-service", "sms-worker", "keycloak"],
      "max_bytes": 1024
    },
    "IDGTL_SMS_API_KEY": {
      "remote": "IDGTL_SMS_API_KEY",
      "consumers": ["sms-service", "sms-worker"],
      "max_bytes": 1024
    },
    "IDGTL_SMS_CALLBACK_USERNAME": {
      "remote": "IDGTL_SMS_CALLBACK_USERNAME",
      "consumers": ["sms-service", "sms-worker"],
      "max_bytes": 1024
    },
    "IDGTL_SMS_CALLBACK_PASSWORD": {
      "remote": "IDGTL_SMS_CALLBACK_PASSWORD",
      "consumers": ["sms-service", "sms-worker"],
      "max_bytes": 1024
    },
    "BITRIX_CLIENT_SECRET": {
      "remote": "BITRIX_CLIENT_SECRET",
      "consumers": ["bitrix-local-app"],
      "max_bytes": 1024
    },
    "BITRIX_APPLICATION_TOKEN": {
      "remote": "BITRIX_APPLICATION_TOKEN",
      "consumers": ["bitrix-local-app"],
      "max_bytes": 1024
    },
    "SELECTEL_S3_SECRET_KEY": {
      "remote": "SELECTEL_S3_SECRET_KEY",
      "consumers": ["api-backend"],
      "max_bytes": 1024
    },
    "SELECTEL_S3_ACCESS_KEY": {
      "remote": "SELECTEL_S3_ACCESS_KEY",
      "consumers": ["api-backend"],
      "max_bytes": 1024
    },
    "OTEL_REMOTE_AUTH_HEADER": {
      "literal": "",
      "consumers": ["otel-collector"],
      "max_bytes": 4096
    }
  }
}