foundation.mozilla.org/env.default at master · MdUmar07/foundation.mozilla.org · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
# Build system environment:

PULSE_API_DOMAIN=https://network-pulse-api-production.herokuapp.com
PULSE_DOMAIN=https://www.mozillapulse.org
# Always add a protocol (ex: https://) in front of the NETWORK_SITE_URL, including for localhost
NETWORK_SITE_URL=http://localhost:8000
DOMAIN_REDIRECT_MIDDLEWARE_ENABLED=False
TARGET_DOMAINS=foundation.mozilla.org


# network-api environment:

ALLOWED_HOSTS=*
ASSET_DOMAIN=network.mofoprod.net
CONTENT_TYPE_NO_SNIFF=True
CORS_ALLOWED_ORIGINS=*
CORS_ALLOWED_ORIGIN_REGEXES=
DATABASE_URL=
DEBUG=True
VSCODE_DEBUGGER=False
DISABLE_DEBUG_TOOLBAR=True
DJANGO_SECRET_KEY=secret
LOAD_FIXTURE=False
SET_HSTS=False
SOCIAL_AUTH_GOOGLE_OAUTH2_KEY=
SOCIAL_AUTH_GOOGLE_OAUTH2_SECRET=
SOCIAL_AUTH_LOGIN_REDIRECT_URL=http://localhost:5000/soc/complete/google-oauth2/
SSL_REDIRECT=False
USE_S3=False
X_FRAME_OPTIONS=DENY
XSS_PROTECTION=True
XROBOTSTAG_ENABLED=False


# SQS config

CRM_AWS_SQS_ACCESS_KEY_ID=
CRM_AWS_SQS_SECRET_ACCESS_KEY=
CRM_AWS_SQS_REGION=
CRM_PETITION_SQS_QUEUE_URL=


# CSP config

CSP_CHILD_SRC='self' https://www.youtube.com https://www.youtube-nocookie.com
CSP_CONNECT_SRC=*
CSP_DEFAULT_SRC='none'
CSP_FONT_SRC='self' https://fonts.gstatic.com https://fonts.googleapis.com https://code.cdn.mozilla.net
CSP_FRAME_ANCESTORS='none'
CSP_FRAME_SRC='self' https://www.youtube.com  https://s3.amazonaws.com/ask-mozilla/ https://comments.mozillafoundation.org/ https://airtable.com https://docs.google.com/ https://platform.twitter.com https://public.zenkit.com https://calendar.google.com https://www.youtube-nocookie.com https://devopstypeform.typeform.com
CSP_IMG_SRC=* data:
CSP_MEDIA_SRC='self' https://s3.amazonaws.com/mofo-assets/foundation/video/
CSP_SCRIPT_SRC='self' 'unsafe-inline' https://www.google-analytics.com/analytics.js http://*.shpg.org/ https://comments.mozillafoundation.org/ https://airtable.com https://platform.twitter.com https://cdn.syndication.twimg.com https://embed.typeform.com
CSP_STYLE_SRC='self' 'unsafe-inline' https://code.cdn.mozilla.net https://fonts.googleapis.com  https://platform.twitter.com

# TEST ENVIRONMENT VALUES

PETITION_TEST_CAMPAIGN_ID=

# Localization

LOCAL_PATH_TO_L10N_REPO=

# REVIEW APPS SLACK BOT

GITHUB_TOKEN=
SLACK_WEBHOOK_RA=

# BUYER'S GUIDE Configuration
CORAL_TALK_SERVER_URL=
PNI_STATS_DB_URL=
CORAL_TALK_API_TOKEN=

# Cloudinary configuration
USE_CLOUDINARY=False
CLOUDINARY_CLOUD_NAME=
CLOUDINARY_API_KEY=
CLOUDINARY_API_SECRET=

# Sentry
SENTRY_DSN=
HEROKU_RELEASE_VERSION=
SENTRY_ENVIRONMENT=

# CDN configuration
STATIC_HOST=