# ------------------------------------------------------------------------------
# ~/_data/private.yml
# The private.yml file is used to set private data used by several J1 apps
# and modules to configure e.g. security and/or authentication settings.
#
# Product/Info:
# https://jekyll.one
#
# Copyright (C) 2020 Juergen Adams
#
# J1 Template is licensed under the MIT License.
# See: https://github.com/jekyll-one-org/j1_template/blob/master/LICENSE
# ------------------------------------------------------------------------------
# NOTE:
#   As this file contains highly confidential data, never publish this
#   file to the public. A productive private.yml file should ALWAYS be
#   excluded from ANY source published to the public (e.g. a repo at Github).
# ------------------------------------------------------------------------------

# ==============================================================================
# GLOBAL settings
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
global:

  # used by J1 e.g. to encrypt cookies
  session_secret:                       <your-secret-string>


# ==============================================================================
# MODULE settings
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
modules:

  # J1 Webhook
  # NOTE:
  # ----------------------------------------------------------------------------
  webhook:

    comment:
      name:                             <your-config-name>
      user:                             <your-gh-user>
      repo:                             <your-gh-repo>
      server_url:                       <your-gh-webhook-url>

    secret:                             <your-gh-secret>
    payload_url:                        <your-payload-url>


# ==============================================================================
# # J1 Utility Server
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
util_srv:

  oauth:

    # GH OAuth settings used for J1 Control Center (NetlifyCMS) for the
    # external OAuth client
    # --------------------------------------------------------------------------
    comment:
      name:                           <your-config-name>
      user:                           <your-gh-user>
      user_url:                       <your-user-url>
      strategy:                       members
      members:                        all

    site_url:                         http://localhost:44444
    site_redirect_url:                http://localhost:44444/auth/github/callback
    client_scope:                     repo, user
    client_id:                        <your-client-id>
    client_secret:                    <your-client-secret>


# ==============================================================================
# MIDDLEWARE settings
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
middleware:

  # OAuth settings (J1 Auth Client)
  # ----------------------------------------------------------------------------
  oauth:

    # DISQUS credentials
    # --------------------------------------------------------------------------
    disqus:

      # J1 Auth client (mode WEB, development system)
      # ------------------------------------------------------------------------
      comment:
        name:                           <your-config-name>
        user:                           <your-gh-user>
        org:                            <your-gh-organisation>
        strategy:                       members
        members:                        all

      client_url:                       http://localhost:5000
      client_redirect_url:              http://localhost:5000/auth/disqus/callback
      client_id:                        <your-client-id>
      client_secret:                    <your-client-secret>

      # J1 Auth client (mode APP, development system)
      # ------------------------------------------------------------------------
      comment:
        name:                           <your-config-name>
        user:                           <your-gh-user>
        org:                            <your-gh-organisation>
        strategy:                       members
        members:                        all

      client_url:                       http://localhost:5000
      client_redirect_url:              http://localhost:5000/auth/disqus/callback
      client_id:                        <your-client-id>
      client_secret:                    <your-client-secret>

    # GITHUB credentials
    # --------------------------------------------------------------------------
    github:

      # J1 Auth client (mode WEB, development system)
      # ------------------------------------------------------------------------
      comment:
        name:                           <your-config-name>
        user:                           <your-gh-user>
        org:                            <your-gh-organisation>
        strategy:                       members
        members:                        all

      client_url:                       http://localhost:5000
      client_redirect_url:              http://localhost:5000/auth/github/callback
      client_id:                        <your-client-id>
      client_secret:                    <your-client-secret>

      # J1 Auth client (mode APP, development system)
      # ------------------------------------------------------------------------
      comment:
        name:                           <your-config-name>
        user:                           <your-gh-user>
        org:                            <your-gh-organisation>
        strategy:                       members
        members:                        all

      client_url:                       http://localhost:5000
      client_redirect_url:              http://localhost:5000/auth/github/callback
      client_id:                        <your-client-id>
      client_secret:                    <your-client-secret>

# ------------------------------------------------------------------------------
# END