@govuk-pay/cli 0.0.3 → 0.0.5

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/docker-compose.erb

@@ -0,0 +1,270 @@
+version: '2.1'
+
+services:
+  <% @dbs.each do |db| %>
+    <%= db[:name] %>:
+      image: postgres:15.2
+      environment:
+        - POSTGRES_PASSWORD=mysecretpassword
+      mem_limit: 250M
+      logging:
+        driver: "json-file"
+      container_name: <%= db[:name] %>
+      healthcheck:
+        test: ["CMD-SHELL", "pg_isready"]
+        interval: 10s
+        timeout: 5s
+        retries: 5
+      volumes:
+        - ./postgres/docker-entrypoint-initdb.d:/docker-entrypoint-initdb.d
+      ports:
+        - "<%= db[:port] %>:5432"
+  <% end %>
+  <% @remote_java_apps.each do |app| %>
+    <%= app[:name] %>:
+      image: governmentdigitalservice/pay-<%= app[:name] %>:latest-master
+      <% if app[:db] %>
+      depends_on:
+        <%= app[:name] %>_db:
+          condition: service_healthy
+      <% end %>
+      env_file:
+        - services/java_app.env
+        - services/<%= app[:name] %>.env
+      environment:
+        - RUN_MIGRATION=true
+        - RUN_APP=true
+        - PORT=<%= app[:port] %>
+        - DISABLE_INTERNAL_HTTPS=true
+        <% if app[:db] %>
+        - DB_HOST=<%= app[:name] %>_db
+        - DB_USER=<%= app[:name] %>
+        - DB_PASSWORD=mysecretpassword
+        - DB_SSL_OPTION=ssl=none
+        <% end %>
+
+        <% if Config.uses_localstack([app]) %>
+        - AWS_ACCESS_KEY=mockAccessKey
+        - AWS_SECRET_ACCESS_KEY=mockSecretAccessKey
+        <% end %>
+
+        <% if app[:queues] %>
+        - AWS_SQS_REGION=eu-west-1
+        - AWS_SQS_MESSAGE_MAXIMUM_WAIT_TIME_IN_SECONDS=20
+        - AWS_SQS_NON_STANDARD_SERVICE_ENDPOINT=true
+        - AWS_SQS_ENDPOINT=http://localstack:4566
+        <%- app[:queues].each do |env_var_name, queue_name| -%>
+        - <%= env_var_name %>=http://localstack:4566/000000000000/<%= queue_name %>
+        <%- end -%>
+        <% end %>
+
+        <% if app[:sns_topics] %>
+        - AWS_SNS_NON_STANDARD_SERVICE_ENDPOINT=true
+        - AWS_SNS_ENDPOINT=http://localstack:4566
+        - AWS_SNS_REGION=eu-west-1
+        <%- app[:sns_topics].each do |env_var_name, topic_name| -%>
+        - <%= env_var_name %>_ARN=arn:aws:sns:eu-west-1:000000000000:<%= topic_name %>
+        <%- end -%>
+        <% end %>
+
+        <%- @java_apps.each do |_app| -%>
+        - <%= _app[:name].upcase + '_URL' %>=http://<%= _app[:name] %>:<%= _app[:port] %>
+        <%- end -%>
+        <%- @node_apps.each do |_app| -%>
+        - <%= _app[:name].upcase + '_URL' %>=http://localhost:<%= _app[:port] %>
+        <%- end -%>
+        <%- app.fetch(:environment_overrides, []).each do |name, value| -%>
+        - <%= name %>=<%= value %>
+        <%- end -%>
+      mem_limit: 2G
+      logging:
+        driver: "json-file"
+      ports:
+        - "<%= app[:port] %>:<%= app[:port] %>"
+        <% if app[:admin_port] %>- "<%= app[:admin_port] %>:<%= app[:admin_port] %>"<% end %>
+      container_name: <%= app[:name] %>
+  <% end %>
+  <% @local_java_apps.each do |app| %>
+    <%= app[:name] %>:
+      image: governmentdigitalservice/pay-<%= app[:name] %>:local
+      <% if app[:db] %>
+      depends_on:
+        <%= app[:name] %>_db:
+          condition: service_healthy
+      <% end %>
+      env_file:
+        - services/java_app.env
+        - services/<%= app[:name] %>.env
+      environment:
+        - RUN_MIGRATION=true
+        - RUN_APP=true
+        - PORT=<%= app[:port] %>
+        - DISABLE_INTERNAL_HTTPS=true
+        <% if app[:db] %>
+        - DB_HOST=<%= app[:name] %>_db
+        - DB_USER=<%= app[:name] %>
+        - DB_PASSWORD=mysecretpassword
+        - DB_SSL_OPTION=ssl=none
+        <% end %>
+
+        <% if Config.uses_localstack([app]) %>
+        - AWS_ACCESS_KEY=mockAccessKey
+        - AWS_SECRET_ACCESS_KEY=mockSecretAccessKey
+        <% end %>
+
+        <% if app[:queues] %>
+        - AWS_SQS_REGION=eu-west-1
+        - AWS_SQS_MESSAGE_MAXIMUM_WAIT_TIME_IN_SECONDS=20
+        - AWS_SQS_NON_STANDARD_SERVICE_ENDPOINT=true
+        - AWS_SQS_ENDPOINT=http://localstack:4566
+        <%- app[:queues].each do |env_var_name, queue_name| -%>
+        - <%= env_var_name %>=http://localstack:4566/000000000000/<%= queue_name %>
+        <%- end -%>
+        <% end %>
+
+        <% if app[:sns_topics] %>
+        - AWS_SNS_NON_STANDARD_SERVICE_ENDPOINT=true
+        - AWS_SNS_ENDPOINT=http://localstack:4566
+        - AWS_SNS_REGION=eu-west-1
+        <%- app[:sns_topics].each do |env_var_name, topic_name| -%>
+        - <%= env_var_name %>_ARN=arn:aws:sns:eu-west-1:000000000000:<%= topic_name %>
+        <%- end -%>
+        <% end %>
+
+        <%- @java_apps.each do |_app| -%>
+        - <%= _app[:name].upcase + '_URL' %>=http://<%= _app[:name] %>:<%= _app[:port] %>
+        <%- end -%>
+        <%- @node_apps.each do |_app| -%>
+        - <%= _app[:name].upcase + '_URL' %>=http://localhost:<%= _app[:port] %>
+        <%- end -%>
+        <%- app.fetch(:environment_overrides, []).each do |name, value| -%>
+        - <%= name %>=<%= value %>
+        <%- end -%>
+      working_dir: '/app'
+      mem_limit: 2G
+      user: root
+      logging:
+        driver: "json-file"
+      ports:
+          - "<%= app[:port] %>:<%= app[:port] %>"
+          <% if app[:admin_port] %>- "<%= app[:admin_port] %>:<%= app[:admin_port] %>"<% end %>
+      container_name: <%= app[:name] %>
+  <% end %>
+  <% @remote_node_apps.each do |app| %>
+    <%= app[:name] %>:
+      image: governmentdigitalservice/pay-<%= app[:name] %>:latest-master
+      <% if app[:db] %>
+      depends_on:
+        <%= app[:name] %>_db:
+          condition: service_healthy
+      <% end %>
+      env_file: services/<%= app[:name] %>.env
+      environment:
+        - SECURE_COOKIE_OFF=true
+        - NODE_ENV=${NODE_ENV:-production}
+        - RUN_APP=true
+        - DISABLE_INTERNAL_HTTPS=true
+        - PORT=<%= app[:port] %>
+        <%- @java_apps.each do |_app| -%>
+        <%- if app[:name] == 'toolbox' && _app[:name] == 'publicauth' %>
+        - PUBLIC_AUTH_URL=http://<%= _app[:name] %>:<%= _app[:port] %>
+        <%- else %>
+        - <%= _app[:name].upcase + '_URL' %>=http://<%= _app[:name] %>:<%= _app[:port] %>
+        <%- end -%>
+        <%- end -%>
+        <%- @node_apps.each do |_app| -%>
+        - <%= _app[:name].upcase + '_URL' %>=http://localhost:<%= _app[:port] %>
+        <%- end -%>
+        <%- app.fetch(:environment_overrides, []).each do |name, value| -%>
+        - <%= name %>=<%= value %>
+        <%- end -%>
+      mem_limit: 1G
+      working_dir: '/app'
+      entrypoint: 'npm start'
+      ports:
+        - "<%= app[:port] %>:<%= app[:port] %>"
+      logging:
+        driver: "json-file"
+      container_name: <%= app[:name] %>
+  <% end %>
+  <% @local_node_apps.each do |app| %>
+    <%= app[:name] %>:
+      image: governmentdigitalservice/pay-<%= app[:name] %>:local
+      <% if app[:db] %>
+      depends_on:
+        <%= app[:name] %>_db:
+          condition: service_healthy
+      <% end %>
+      env_file: services/<%= app[:name] %>.env
+      environment:
+        - SECURE_COOKIE_OFF=true
+        - RUN_APP=true
+        - DISABLE_APPMETRICS=true
+        - DISABLE_INTERNAL_HTTPS=true
+        - PORT=<%= app[:port] %>
+        <%- @java_apps.each do |_app| -%>
+        <%- if app[:name] == 'toolbox' && _app[:name] == 'publicauth' %>
+        - PUBLIC_AUTH_URL=http://<%= _app[:name] %>:<%= _app[:port] %>
+        <%- else %>
+        - <%= _app[:name].upcase + '_URL' %>=http://<%= _app[:name] %>:<%= _app[:port] %>
+        <%- end -%>
+        <%- end -%>
+        <%- @node_apps.each do |_app| -%>
+        - <%= _app[:name].upcase + '_URL' %>=http://localhost:<%= _app[:port] %>
+        <%- end -%>
+        <%- app.fetch(:environment_overrides, []).each do |name, value| -%>
+        - <%= name %>=<%= value %>
+        <%- end -%>
+      mem_limit: 1G
+      working_dir: '/app'
+      entrypoint: <%= app.fetch(:entrypoint_override_local, "npx nodemon --inspect=0.0.0.0:#{app[:debug_port]} start.js") %>
+      ports:
+        - "<%= app[:port] %>:<%= app[:port] %>"
+        - "<%= app[:debug_port] %>:<%= app[:debug_port] %>"
+      logging:
+        driver: "json-file"
+      container_name: <%= app[:name] %>
+  <% end %>
+  <% @proxies.each do |app| %>
+    <%= app[:name] %>:
+      image: governmentdigitalservice/pay-docker-nginx-proxy:latest-master
+      environment:
+        - PROXY_SERVICE_HOST=http://<%= app[:proxy_host] %>
+        - PROXY_SERVICE_PORT=<%= app[:proxy_port] %>
+        - HTTPS_LISTEN_PORT=<%= app[:port] %>
+        <%- unless app[:naxsi_md5].nil?  -%>
+        - NAXSI_RULES_URL_CSV=/etc/nginx/naxsi/locations/1/<%= app[:proxy_host] %>.rules
+        - NAXSI_RULES_MD5_CSV=<%= app[:naxsi_md5] %>
+        - CLIENT_BODY_BUFFER_SIZE=10
+        - CLIENT_MAX_BODY_SIZE=10
+        <%- end -%>
+      mem_limit: 1G
+      volumes:
+        - "./naxsi/:/etc/nginx/naxsi/locations/1"
+        - "./services/ssl/certs/<%= app[:name] %>.crt:/etc/keys/crt"
+        - "./services/ssl/keys/<%= app[:name] %>.key:/etc/keys/key"
+      ports:
+        - "<%= app[:port] %>:<%= app[:port] %>"
+      logging:
+        driver: "json-file"
+      container_name: <%= app[:name] %>
+  <% end %>
+  <% if @queue_apps.any? %>
+    localstack:
+      image: localstack/localstack:3
+      container_name: localstack
+      environment:
+        - EAGER_SERVICE_LOADING=1
+        - SERVICES=sns,sqs
+      ports:
+        - "4566:4566" # All AWS services exposed on this port
+      volumes:
+        - <%= @localstack_init_file %>:/etc/localstack/init/ready.d/init-aws.sh
+  <% end %>
+  <% if @java_apps.any? {|app| Config.uses_redis(app[:name])} %>
+    redis:
+      image: redis:latest
+      container_name: localRedis
+      ports:
+        - "6379:6379"
+  <% end %>

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/end-to-end.erb

@@ -0,0 +1,30 @@
+DB_CONNECTOR_HOST=localhost:<%= Config::get_config 'connector', :db_port %>
+DB_CONNECTOR_USER=connector
+DB_PUBLICAUTH_HOST=localhost:<%= Config::get_config 'publicauth', :db_port %>
+DB_PUBLICAUTH_USER=publicauth
+DB_ADMINUSERS_HOST=localhost:<%= Config::get_config 'adminusers', :db_port %>
+DB_ADMINUSERS_USER=adminusers
+DB_PRODUCTS_HOST=localhost:<%= Config::get_config 'products', :db_port %>
+DB_PRODUCTS_USER=products
+DB_PASSWORD=mysecretpassword
+PUBLICAPI_URL=http://localhost:<%= Config::get_config 'publicapi', :port %>
+PUBLIC_AUTH_URL=http://localhost:<%= Config::get_config 'publicauth', :port %>
+CONNECTOR_URL=http://localhost:<%= Config::get_config 'connector', :port %>
+ADMIN_USERS_URL=http://localhost:<%= Config::get_config 'adminusers', :port %>
+LEDGER_URL=http://localhost:<%= Config::get_config 'ledger', :port %>
+NOTIFICATIONS_URL=http://localhost:<%= Config::get_config 'connector', :port %>
+PRODUCTS_URL=http://localhost:<%= Config::get_config 'products', :port %>
+PRODUCTS_UI_URL=http://localhost:<%= Config::get_config 'products-ui', :port %>
+STUBS_URL=http://localhost:<%= Config::get_config 'stubs', :port %>
+SELFSERVICE_URL=http://localhost:<%= Config::get_config 'selfservice', :port %>
+FRONTEND_URL=http://localhost:<%= Config::get_config 'frontend', :port %>
+TEST_GATEWAY_ACCOUNT_ID=111
+SELFSERVICE_USERNAME=alice.111@mail.fake
+SELFSERVICE_PASSWORD=arandompassword
+SELFSERVICE_OTP_KEY_BASE32=RG5RNFK3IBUK4RWGHUOU7SSGC6FRRCZR
+DB_SETUP_FOR_SMOKE=false
+PRODUCTS_API_TOKEN=g0nBA5lNzfUalQjk4ZBDy70AikNshxz2G70dA6lg
+HTTP_ZAP_ENABLED=false
+WEB_DRIVER=CHROME
+SELENIUM_HUB_URL=http://selenium-hub:11444/wd/hub
+CHROME_DRIVER_PATH=/usr/bin/chromedriver

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/localstack/init-aws.sh

@@ -0,0 +1,70 @@
+#!/bin/sh
+
+cat > /tmp/sqs_attributes.json <<EOF
+{
+  "VisibilityTimeout": "3600",
+  "DelaySeconds": "0",
+  "ReceiveMessageWaitTimeSeconds": "0"
+}
+EOF
+
+echo "|======================================================================="
+echo "| Creating SQS queues"
+echo "|======================================================================="
+for QUEUE in \
+    connector_tasks_queue \
+    pay_capture_queue \
+    pay_event_queue \
+    payout_reconcile_queue \
+    webhooks-events-subscriber-queue
+do
+  echo "---------------------"
+  echo "Creating queue $QUEUE"
+  echo "---------------------"
+  aws sqs create-queue \
+    --queue-name "$QUEUE" \
+    --attributes file:///tmp/sqs_attributes.json \
+    --endpoint-url=http://localhost:4566 \
+    --region=eu-west-1
+  echo "---------------------"
+  echo
+done
+
+echo "|======================================================================="
+echo "| Creating SNS topics"
+echo "|======================================================================="
+for TOPIC in \
+    card-payment-dispute-events-topic \
+    card-payment-events-topic
+do
+  echo "---------------------"
+  echo "Creating topic $TOPIC"
+  echo "---------------------"
+  aws sns create-topic \
+    --name "$TOPIC" \
+    --endpoint-url=http://localhost:4566 \
+    --region=eu-west-1
+  echo "---------------------"
+  echo
+done
+
+echo "|======================================================================="
+echo "| Subscribing webhooks SQS queue to relevant SNS topics"
+echo "|======================================================================="
+for TOPIC in \
+    card-payment-dispute-events-topic \
+    card-payment-events-topic
+do
+  echo
+  echo "---------------------"
+  echo "Subscribing webhooks-events-subscriber-queue to topic $TOPIC"
+  echo "---------------------"
+  aws sns subscribe \
+    --topic-arn "arn:aws:sns:eu-west-1:000000000000:$TOPIC" \
+    --protocol sqs \
+    --notification-endpoint arn:aws:sns:eu-west-1:000000000000:webhooks-events-subscriber-queue \
+    --endpoint-url=http://localhost:4566 \
+    --region=eu-west-1
+  echo
+  echo
+done

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/naxsi/readme.md

@@ -0,0 +1 @@
+Naxsi rules will be copied here

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/postgres/docker-entrypoint-initdb.d/make_payments_databases.sql

@@ -0,0 +1,26 @@
+CREATE EXTENSION "uuid-ossp";
+CREATE EXTENSION IF NOT EXISTS pg_trgm WITH SCHEMA pg_catalog;
+
+CREATE USER connector WITH password 'mysecretpassword';
+CREATE DATABASE connector WITH owner=connector TEMPLATE postgres;
+GRANT ALL PRIVILEGES ON DATABASE connector TO connector;
+
+CREATE USER publicauth WITH password 'mysecretpassword';
+CREATE DATABASE publicauth WITH owner=publicauth TEMPLATE postgres;
+GRANT ALL PRIVILEGES ON DATABASE publicauth TO publicauth;
+
+CREATE USER adminusers WITH password 'mysecretpassword';
+CREATE DATABASE adminusers WITH owner=adminusers TEMPLATE postgres;
+GRANT ALL PRIVILEGES ON DATABASE adminusers TO adminusers;
+
+CREATE USER products WITH password 'mysecretpassword';
+CREATE DATABASE products WITH owner=products TEMPLATE postgres;
+GRANT ALL PRIVILEGES ON DATABASE products TO products;
+
+CREATE USER ledger WITH password 'mysecretpassword';
+CREATE DATABASE ledger WITH owner=ledger TEMPLATE postgres;
+GRANT ALL PRIVILEGES ON DATABASE ledger TO ledger;
+
+CREATE USER webhooks WITH password 'mysecretpassword';
+CREATE DATABASE webhooks WITH owner=webhooks TEMPLATE postgres;
+GRANT ALL PRIVILEGES ON DATABASE webhooks TO webhooks;

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/adminusers.env

@@ -0,0 +1,49 @@
+PORT=9700
+ADMIN_PORT=9701
+
+DB_HOST=adminusers_db
+DB_PORT=5432
+DB_SSL_OPTION=ssl=true
+DB_USER=adminusers
+DB_PASSWORD=mysecretpassword
+
+JPA_LOG_LEVEL=WARNING
+JPA_SQL_LOG_LEVEL=WARNING
+LOGIN_ATTEMPT_CAP=2
+
+# defines whether outbound HTTP traffic need to be routed via a proxy. Default behaviour is proxy off.
+HTTP_PROXY_ENABLED=false
+HTTP_PROXY_HOST=egress.pymnt.localdomain
+HTTP_PROXY_PORT=8080
+
+LEDGER_URL=http://ledger:10700
+
+NOTIFY_SERVICE_ID=pay-notify-service-id
+NOTIFY_SECRET=pay-notify-secret-needs-to-be-32-chars-fsghdngfhmhfkrgsfs
+NOTIFY_API_KEY=api_key-pay-notify-service-id-pay-notify-secret-needs-to-be-32-chars-fsghdngfhmhfkrgsfs
+NOTIFY_SIGN_IN_OTP_SMS_TEMPLATE_ID=pay-notify-sign-in-otp-sms-template-id
+NOTIFY_CHANGE_SIGN_IN_2FA_TO_SMS_OTP_SMS_TEMPLATE_ID=pay-notify-change-sign-in-2fa-to-sms-otp-sms-template-id
+NOTIFY_SELF_INITIATED_CREATE_USER_AND_SERVICE_OTP_SMS_TEMPLATE_ID=pay-notify-self-initiated-create-user-and-service-otp-sms-template-id
+NOTIFY_CREATE_USER_IN_RESPONSE_TO_INVITATION_TO_SERVICE_OTP_SMS_TEMPLATE_ID=pay-notify-create-user-in-response-to-invitation-to-service-otp-sms-template-id
+NOTIFY_INVITE_EMAIL_TEMPLATE_ID=pay-notify-invite-email-template-id
+NOTIFY_INVITE_USER_EMAIL_TEMPLATE_ID=pay-notify-invite-user-email-template-id
+NOTIFY_FORGOTTEN_PASSWORD_EMAIL_TEMPLATE_ID=pay-notify-forgotten-password-email-template-id
+NOTIFY_BASE_URL=http://stubs:3030/notify
+NOTIFY_INVITE_SERVICE_EMAIL_TEMPLATE_ID=pay-notify-invite-service-email-template-id
+NOTIFY_INVITE_SERVICE_USER_EXITS_EMAIL_TEMPLATE_ID=pay-notify-invite-service-user-exists-email-template-id
+NOTIFY_LIVE_ACCOUNT_CREATED_EMAIL_TEMPLATE_ID=pay-notify-live-account-created-email-template-id
+NOTIFY_DISPUTE_CREATED_EMAIL_TEMPLATE_ID=pay-notify-dispute-created-email-template-id
+NOTIFY_STRIPE_DISPUTE_CREATED_EMAIL_TEMPLATE_ID=pay-notify-dispute-created-email-template-id
+NOTIFY_STRIPE_DISPUTE_EVIDENCE_SUBMITTED_EMAIL_TEMPLATE_ID=pay-notify-dispute-evidence-submitted-template-id
+NOTIFY_STRIPE_DISPUTE_LOST_EMAIL_TEMPLATE_ID=pay-notify-stripe-dispute-lost-email-template-id
+NOTIFY_STRIPE_DISPUTE_LOST_AND_SERVICE_CHARGED_EMAIL_TEMPLATE_ID=pay-notify-stripe-dispute-lost-andservice-charged-email-template-id
+NOTIFY_STRIPE_DISPUTE_WON_EMAIL_TEMPLATE_ID=pay-notify-stripe-dispute-won-email-template-id
+NOTIFY_EMAIL_REPLY_TO_SUPPORT_ID=pay-notify-email-reply-to-support-id
+
+FORGOTTEN_PASSWORD_EXPIRY_MINUTES=90
+
+AWS_SQS_CONNECTOR_TASKS_QUEUE_URL=http://localstack:4566/000000000000/connector_tasks_queue
+
+#AWS_XRAY_DAEMON_ADDRESS=xray:2000
+
+EXPUNGE_AND_ARCHIVE_HISTORICAL_DATA_ENABLED=true

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/cardid.env

@@ -0,0 +1,2 @@
+PORT=9800
+ADMIN_PORT=9801

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/connector.env

@@ -0,0 +1,70 @@
+PORT=9300
+ADMIN_PORT=9301
+
+DB_HOST=connector_db
+DB_PORT=5432
+DB_SSL_OPTION=ssl=true
+DB_USER=connector
+DB_PASSWORD=mysecretpassword
+
+SECURE_WORLDPAY_NOTIFICATION_ENABLED=false
+SECURE_WORLDPAY_NOTIFICATION_DOMAIN=pymnt.localdomain
+
+GDS_CONNECTOR_WORLDPAY_TEST_URL=http://stubs:3030/stub/worldpay
+GDS_CONNECTOR_WORLDPAY_LIVE_URL=http://stubs:3030/stub/worldpay
+
+WORLDPAY_3DS_FLEX_DDC_TEST_URL=http://stubs:3030/stub/worldpay
+WORLDPAY_3DS_FLEX_DDC_LIVE_URL=http://stubs:3030/stub/worldpay
+
+WORLDPAY_APPLE_PAY_PAYMENT_PROCESSING_CERTIFICATE=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
+WORLDPAY_APPLE_PAY_PAYMENT_PROCESSING_PRIVATE_KEY=MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgOqukXQoQVbg1xvvq/IGLdK0UuJPbbawULTALcuw/Uz2hRANCAAQPjiA1kTEodST2wy5d5kQFrM0D5qBX9Ukry8W6D+vC7OqbMoTm/upRM1GRHeA2LaVTrwAnpGhoO0ETqYF2Nu4V
+
+GDS_CONNECTOR_SMARTPAY_TEST_URL=http://stubs:3030/stub/smartpay
+GDS_CONNECTOR_SMARTPAY_LIVE_URL=http://stubs:3030/stub/smartpay
+
+SANDBOX_ALLOWED_CIDRS=["127.0.0.1/32", "0.0.0.0/32"]
+
+SMARTPAY_ALLOWED_CIDRS=["127.0.0.1/32", "0.0.0.0/32"]
+GDS_CONNECTOR_SMARTPAY_NOTIFICATION_USER=smartpay-user
+GDS_CONNECTOR_SMARTPAY_NOTIFICATION_PASSWORD=smartpay-password
+
+STRIPE_ALLOWED_CIDRS=["127.0.0.1/32", "0.0.0.0/32"]
+STRIPE_TRANSACTION_FEE_PERCENTAGE=0.9
+STRIPE_TRANSACTION_RADAR_FEE_IN_PENCE=5
+STRIPE_TRANSACTION_THREE_DS_FEE_IN_PENCE=5
+
+JPA_LOG_LEVEL=WARNING
+JPA_SQL_LOG_LEVEL=WARNING
+
+# defines whether outbound HTTP traffic need to be routed via a proxy. Default behaviour is proxy off.
+HTTP_PROXY_ENABLED=false
+
+# If `ENABLE_OUTBOUND_PROXY=true` make sure to set the below proxy vars. Otherwise they are ignored
+HTTP_PROXY_HOST=egress.pymnt.localdomain
+HTTP_PROXY_PORT=8080
+HTTP_PROXY_SCHEME=http
+AUTH_READ_TIMEOUT_SECONDS=1
+
+NOTIFY_EMAIL_ENABLED=true
+NOTIFY_PAYMENT_RECEIPT_EMAIL_TEMPLATE_ID=email-template-id
+NOTIFY_REFUND_ISSUED_EMAIL_TEMPLATE_ID=email-refund-issued-template-id
+NOTIFY_API_KEY=api_key-pay-notify-service-id-pay-notify-secret-needs-to-be-32-chars-fsghdngfhmhfkrgsfs
+NOTIFY_BASE_URL=http://stubs:3030/notify
+
+#AWS_XRAY_DAEMON_ADDRESS=xray:2000
+AWS_XRAY_CONTEXT_MISSING=LOG_ERROR
+
+CAPTURE_PROCESS_QUEUE_SCHEDULER_THREAD_DELAY_IN_SECONDS=1
+
+EVENT_QUEUE_ENABLED=true
+AWS_SQS_PAYMENT_EVENT_QUEUE_URL=http://localstack:4566/000000000000/pay_event_queue
+AWS_SQS_PAYOUT_RECONCILE_QUEUE_URL=http://localstack:4566/000000000000/payout_reconcile_queue
+
+EMIT_PAYMENT_STATE_TRANSITION_EVENTS=true
+EMIT_PAYOUT_EVENTS=true
+
+TASK_QUEUE_ENABLED="true"
+AWS_SQS_CONNECTOR_TASKS_QUEUE_URL=http://localstack:4566/000000000000/connector_tasks_queue
+
+FRONTEND_URL=http://localhost:9000
+CARDID_URL=http://cardid:9900

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/demo-service.env

@@ -0,0 +1,10 @@
+NODE_WORKER_COUNT=1
+NODE_ENV=dev
+SESSION_ENCRYPTION_KEY=asdjhbwefbo23r23rbfik2roiwhefwbqw
+COOKIE_MAX_AGE=5400000
+
+#AWS_XRAY_DAEMON_ADDRESS=xray:2000
+DISABLE_INTERNAL_HTTPS=true
+DISABLE_SSL=true
+
+PAY_API_URL=http://publicapi:9100

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/frontend.env

@@ -0,0 +1,12 @@
+SESSION_ENCRYPTION_KEY=asdjhbwefbo23r23rbfik2roiwhefwbqw
+COOKIE_MAX_AGE=5400000
+CONNECTOR_HOST=http://connector:9300
+ANALYTICS_TRACKING_ID=testing-123
+CARDID_HOST=http://cardid:9900
+NODE_WORKER_COUNT=1
+NODE_ENV=dev
+WORLDPAY_3DS_FLEX_DDC_TEST_URL=http://stubs:3030/stub/worldpay
+WORLDPAY_3DS_FLEX_DDC_LIVE_URL=http://stubs:3030/stub/worldpay
+
+#AWS_XRAY_DAEMON_ADDRESS=xray:2000
+DISABLE_INTERNAL_HTTPS=true

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/java_app.env

@@ -0,0 +1 @@
+JAVA_OPTS=-Xms128m -Xmx1G

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/ledger.env

@@ -0,0 +1,7 @@
+PORT=10700
+ADMIN_PORT=10701
+QUEUE_MESSAGE_RECEIVER_THREAD_DELAY_IN_MILLISECONDS=1000
+
+EXPUNGE_AND_REDACT_HISTORICAL_DATA_ENABLED=true
+EXPUNGE_OR_REDACT_DATA_OLDER_THAN_DAYS=0
+EXPUNGE_NO_OF_TRANSACTIONS_PER_TASK_RUN=5

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/products-ui.env

@@ -0,0 +1,14 @@
+PORT=10100
+
+SESSION_ENCRYPTION_KEY=asdjhbwefbo23r23rbfik2roiwhefwbqw
+COOKIE_MAX_AGE=3600000
+DISABLE_INTERNAL_HTTPS=true
+
+SELFSERVICE_DASHBOARD_URL=http://localhost:9400/dashboard
+SELFSERVICE_DEMO_PAYMENT_RETURN_URL=http://localhost:9400/make-a-demo-payment/:productExternalId/go-to-transactions
+
+NODE_ENV=dev
+
+GOOGLE_RECAPTCHA_SITE_KEY=6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI
+GOOGLE_RECAPTCHA_SECRET_KEY=6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe
+GOOGLE_RECAPTCHA_USE_ENTERPRISE_VERSION=false

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/products.env

@@ -0,0 +1,25 @@
+PORT=10300
+ADMIN_PORT=10001
+
+DB_HOST=products_db
+DB_SSL_OPTION=ssl=true
+DB_USER=products
+DB_PASSWORD=mysecretpassword
+
+JPA_LOG_LEVEL=WARNING
+JPA_SQL_LOG_LEVEL=WARNING
+
+
+BASE_URL=http://localhost:10300
+PRODUCTSUI_PAY_URL=http://localhost:10400/pay
+PRODUCTSUI_CONFIRMATION_URL=http://localhost:10400/payment-complete
+PRODUCTS_FRIENDLY_BASE_URI=http://localhost:10400/redirect
+
+HTTP_PROXY_HOST=egress.pymnt.localdomain
+HTTP_PROXY_PORT=8080
+HTTP_PROXY_SCHEME=http
+AUTH_READ_TIMEOUT_SECONDS=1
+
+EXPUNGE_HISTORICAL_DATA_ENABLED=true
+EXPUNGE_DATA_OLDER_THAN_DAYS=0
+EXPUNGE_NO_OF_PAYMENTS_PER_TASK_RUN=10

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/publicapi.env

@@ -0,0 +1,13 @@
+PORT=9100
+ADMIN_PORT=9101
+CONNECTOR_URL=http://connector:9300
+PUBLIC_AUTH_URL=http://publicauth:9600/v1/api/auth
+LEDGER_URL=http://ledger:10700
+TOKEN_API_HMAC_SECRET=qwer9yuhgf
+PUBLICAPI_BASE=http://publicapi:9100
+ALLOW_HTTP_FOR_RETURN_URL=true
+#AWS_XRAY_DAEMON_ADDRESS=xray:2000
+REDIS_URL=redis:6379
+RATE_LIMITER_VALUE=75
+RATE_LIMITER_VALUE_POST=15
+RATE_LIMITER_PER_MILLIS=1000

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/publicauth.env

@@ -0,0 +1,13 @@
+PORT=9600
+ADMIN_PORT=9601
+
+DB_HOST=publicauth_db
+DB_PORT=5432
+DB_SSL_OPTION=ssl=true
+DB_USER=publicauth
+DB_PASSWORD=mysecretpassword
+
+TOKEN_DB_BCRYPT_SALT='$2a$10$IhaXo6LIBhKIWOiGpbtPOu'
+TOKEN_API_HMAC_SECRET=qwer9yuhgf
+
+#AWS_XRAY_DAEMON_ADDRESS=xray:2000

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/selfservice.env

@@ -0,0 +1,21 @@
+PORT=9400
+SESSION_ENCRYPTION_KEY=asdjhbwefbo23r23rbfik2roiwhefwbqw
+PUBLIC_AUTH_URL=http://publicauth:9600/v1/frontend/auth
+SELFSERVICE_BASE=selfservice
+PRODUCTS_URL=http://products:18000
+ADMINUSERS_URL=http://adminusers:9700
+LEDGER_URL=http://ledger:10700
+WEBHOOKS_URL=http://webhooks:10800
+PRODUCTS_API_TOKEN=g0nBA5lNzfUalQjk4ZBDy70AikNshxz2G70dA6lg
+PRODUCTS_FRIENDLY_BASE_URI=productsui/redirect
+
+LOGIN_ATTEMPT_CAP=3
+
+COOKIE_MAX_AGE=10800000
+NODE_WORKER_COUNT=1
+NODE_ENV=dev
+
+# defines whether outbound HTTP traffic need to be routed via a proxy.
+HTTP_PROXY_ENABLED=false
+
+#AWS_XRAY_DAEMON_ADDRESS=xray:2000