Mise en place de DotEnv

Author: Mopolo

.env

@@ -0,0 +1,74 @@
+APP_ENV=test
+
+## App configuration
+DATABASE_HOST=dbtest
+DATABASE_PORT=3306
+DATABASE_NAME=web
+DATABASE_USER=afup
+DATABASE_PASSWORD=afup
+
+SECRET=ThisTokenIsNotSoSecretChangeIt
+
+GITHUB_CLIENT_ID=id
+GITHUB_CLIENT_SECRET=secret
+
+ALGOLIA_APP_ID=DVB92YWTPE
+ALGOLIA_BACKEND_API_KEY=78e71e5r5c2Rb353f5a03376gb9878779
+ALGOLIA_FRONTEND_API_KEY=74e71e5r5c2Rb353f5a03376gb9878777
+
+HOME_ALGOLIA_ENABLED=false
+
+SLACK_URL=http://yolo
+
+BLUESKY_API_IDENTIFIER=xxx
+BLUESKY_API_APP_PASSWORD=yyy
+
+MAILCHIMP_API_KEY=xxx-yyyy
+MAILCHIMP_MEMBERS_LIST=
+MAILCHIMP_SUBSCRIBERS_LIST=
+MAILCHIMP_TECHLETTER_LIST=
+MAILCHIMP_TECHLETTER_API_KEY=xxx-yyyy
+MAILCHIMP_TECHLETTER_WEBHOOK_KEY="abc"
+
+GOOGLE_MAPS_API_KEY=
+
+MEETUP_API_CONSUMER_KEY=
+MEETUP_API_CONSUMER_SECRET=
+
+TECHNO_WATCH_CALENDAR_URL=https://docs.google.com/spreadsheets/d/2cUeAk86Ov7BLYyn0Ad9ge3ecbsdboeQH64wIU9a9Zzp/export?format=csv
+TECHNO_WATCH_CALENDAR_KEY=9Yt0feebMyMrUWx
+
+SUPER_APERO_CSV_URL=../tests/behat/files/super_apero.csv
+
+GOOGLE_ANALYTICS_ENABLED=false
+GOOGLE_ANALYTICS_ID=G-CHPWDR3C1M
+
+TECHLETTER_TEST_EMAIL_ADDRESS=[email protected]
+
+SLACK_MEMBERS_LEGACY_TOKEN=aaaa-90909097
+
+SLACK_API_URL=https://slack.com/api
+SLACK_MEMBRE_TOKEN=
+
+RECAPTCHA_PUBLIC_KEY=6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI
+RECAPTCHA_PRIVATE_KEY=6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe
+
+PAYBOX_DOMAIN_SERVER=preprod-tpeweb.paybox.com
+PAYBOX_SECRET_KEY=0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF
+PAYBOX_SITE=1999888
+PAYBOX_RANG=32
+PAYBOX_IDENTIFIANT=110647233
+
+BLOG_API_KEY=123456
+
+SMTP_HOST="localhost"
+SMTP_PORT=1025
+SMTP_TLS=0
+SMTP_USERNAME=""
+SMTP_PASSWORD=""
+
+QR_CODE_SALT=""
+# https://symfony.com/doc/current/reference/configuration/framework.html#ide
+IDE_USED="phpstorm"
+
+AFUP_GLOBAL_MENU_EVENT_LABEL="Forum PHP"

.env.test

@@ -1,4 +1,6 @@
-.env
+/.env.local
+/.env.local.php
+/.env.*.local
 
 deps.lock
 .idea

.gitignore

@@ -1,4 +1,3 @@
--include .env
 default: help
 
 # Variables
@@ -51,7 +50,7 @@ init: htdocs/uploads
 ##@ Docker
 
 ### Démarrer les containers
-docker-up: .env var/logs/.docker-build data compose.override.yml
+docker-up: .env.local var/logs/.docker-build data compose.override.yml
 	$(DOCKER_COMP) up $(DOCKER_UP_OPTIONS)
 
 ### Stopper les containers
@@ -154,8 +153,8 @@ var/logs/.docker-build: compose.yml compose.override.yml $(shell find docker -ty
 	CURRENT_UID=$(CURRENT_UID) ENABLE_XDEBUG=$(ENABLE_XDEBUG) $(DOCKER_COMPOSE_BIN) build
 	touch var/logs/.docker-build
 
-.env:
-	cp .env.dist .env
+.env.local:
+	cp .env.dist .env.local
 
 compose.override.yml:
 	cp compose.override.yml-dist compose.override.yml

Makefile

@@ -1,4 +1,3 @@
 imports:
-    - { resource: config.php }
     - { resource: services.yml }
     - { resource: packages/*.yaml }

app/config/config.php

@@ -1,3 +1,3 @@
 ewz_recaptcha:
-    public_key: '%recaptcha_public_key%'
-    private_key: '%recaptcha_private_key%'
+    public_key: '%env(RECAPTCHA_PUBLIC_KEY)%'
+    private_key: '%env(RECAPTCHA_PRIVATE_KEY)%'

app/config/config.yml

@@ -4,7 +4,7 @@ framework:
         fallbacks: ["%locale%"]
         enabled: true
         default_path: "%kernel.project_dir%/../translations"
-    secret:          "%secret%"
+    secret:          "%env(SECRET)%"
     router:
         resource: "%kernel.project_dir%/config/routing.yml"
         strict_requirements: ~

app/config/packages/ewz_recaptcha.yaml

@@ -3,7 +3,7 @@ knpu_oauth2_client:
         # will create a service: knpu.oauth2.client.facebook_main
         github_main:
             type: github
-            client_id: "%github_client_id%"
-            client_secret: "%github_client_secret%"
+            client_id: "%env(GITHUB_CLIENT_ID)%"
+            client_secret: "%env(GITHUB_CLIENT_SECRET)%"
             # see below
             redirect_route: connection_github_check

app/config/packages/framework.yaml

@@ -67,7 +67,7 @@ security:
         - { path: ^/admin/(members/reporting|association/relances|talk|slackmembers/check|healthcheck), roles: ROLE_ADMIN}
         - { path: ^/member, roles: [ROLE_USER, ROLE_MEMBER_EXPIRED]}
         - { path: ^/admin/, roles: ROLE_MEMBER_EXPIRED }
-        - { path: ^/blog, allow_if: "request.getClientIp() in ['217.70.189.71', '127.0.0.1', '192.168.42.1'] or request.server.get('ALLOW_BLOG_FROM_ALL') == 1 or request.headers.get('x-afup-blog-api-key') == '%blog_api_key%'" }
+        - { path: ^/blog, allow_if: "request.getClientIp() in ['217.70.189.71', '127.0.0.1', '192.168.42.1'] or request.server.get('ALLOW_BLOG_FROM_ALL') == 1 or request.headers.get('x-afup-blog-api-key') == '%env(BLOG_API_KEY)%'" }
         - { path: ^/blog, roles: ROLE_NO_ACCESS }
         - { path: ^/(event/\w+/tickets|association)paybox-callback, roles: PUBLIC_ACCESS, ips: "%paybox_ips%" }
         - { path: ^/(event/\w+/tickets|association)paybox-callback, roles: ROLE_SUPER_ADMIN }