mirror of
https://github.com/google/nomulus.git
synced 2025-07-21 18:26:12 +02:00
557984bb75
After this CL, "support" accounts (accounts that are part of the "support" G-Suite group) will the same access to the registrar console as GCP "admins". However, they don't won't have access to the GCP project itself. We could give them their own Role in the future (say SUPPORT) and give them different access than "admins", but right now we don't need it and YAGNI or something :) NOTE: we identify users by their email (they need to be logged in to a google account). I don't know if that's best practice, since I guess different google accounts might have the same email address. However, G-Suite groups' membership is by email so there's not much we can do about it if we want to use G-Suite groups. ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=220804273
71 lines
2.3 KiB
YAML
71 lines
2.3 KiB
YAML
# This is a sample production config (to be deployed in the WEB-INF directory).
|
|
# This is the same as what Google Registry runs in production, except with
|
|
# placeholders for Google-specific settings.
|
|
|
|
appEngine:
|
|
projectId: placeholder
|
|
# Set to true if running against local servers (localhost)
|
|
isLocal: false
|
|
# The "<service>-dot-" prefix is used on the project ID in this URL in order
|
|
# to get around an issue with double-wildcard SSL certs.
|
|
defaultServiceUrl: https://domain-registry-placeholder.appspot.com
|
|
backendServiceUrl: https://backend-dot-domain-registry-placeholder.appspot.com
|
|
toolsServiceUrl: https://tools-dot-domain-registry-placeholder.appspot.com
|
|
pubapiServiceUrl: https://pubapi-dot-domain-registry-placeholder.appspot.com
|
|
|
|
gSuite:
|
|
domainName: placeholder
|
|
outgoingEmailDisplayName: placeholder
|
|
outgoingEmailAddress: placeholder
|
|
adminAccountEmailAddress: placeholder
|
|
supportGroupEmailAddress: placeholder
|
|
|
|
registryPolicy:
|
|
contactAndHostRoidSuffix: placeholder
|
|
productName: placeholder
|
|
greetingServerId: placeholder
|
|
registrarChangesNotificationEmailAddresses:
|
|
- placeholder
|
|
- placeholder
|
|
defaultRegistrarWhoisServer: placeholder
|
|
tmchCaMode: PRODUCTION
|
|
tmchCrlUrl: http://crl.icann.org/tmch.crl
|
|
tmchMarksDbUrl: https://ry.marksdb.org
|
|
checkApiServletClientId: placeholder
|
|
registryAdminClientId: placeholder
|
|
whoisDisclaimer: |
|
|
multi-line
|
|
placeholder
|
|
|
|
icannReporting:
|
|
icannTransactionsReportingUploadUrl: https://ry-api.icann.org/report/registrar-transactions
|
|
icannActivityReportingUploadUrl: https://ry-api.icann.org/report/registry-functions-activity
|
|
|
|
oAuth:
|
|
allowedOauthClientIds:
|
|
- placeholder.apps.googleusercontent.com
|
|
|
|
rde:
|
|
reportUrlPrefix: https://ry-api.icann.org/report/registry-escrow-report
|
|
uploadUrl: sftp://placeholder@sftpipm2.ironmountain.com/Outbox
|
|
sshIdentityEmailAddress: placeholder
|
|
|
|
registrarConsole:
|
|
logoFilename: placeholder
|
|
supportPhoneNumber: placeholder
|
|
supportEmailAddress: placeholder
|
|
announcementsEmailAddress: placeholder
|
|
integrationEmailAddress: placeholder
|
|
technicalDocsUrl: https://drive.google.com/drive/folders/placeholder
|
|
|
|
misc:
|
|
sheetExportId: placeholder
|
|
|
|
cloudDns:
|
|
rootUrl: null
|
|
servicePath: null
|
|
|
|
keyring:
|
|
activeKeyring: KMS
|
|
kms:
|
|
projectId: placeholder
|