summaryrefslogtreecommitdiff
path: root/debian/etc/taler
diff options
context:
space:
mode:
authorFlorian Dold <florian@dold.me>2021-07-16 17:16:38 +0200
committerFlorian Dold <florian@dold.me>2021-07-16 17:16:38 +0200
commit5597dc6f1e8d8b73f906365618ba3922f9dd7660 (patch)
tree0f8fa93ba389f87e88115e0c4c64a906c494988a /debian/etc/taler
parent970c9eab865715b7f37d9e0a6b14e233fddcfa12 (diff)
downloadexchange-5597dc6f1e8d8b73f906365618ba3922f9dd7660.tar.gz
exchange-5597dc6f1e8d8b73f906365618ba3922f9dd7660.tar.bz2
exchange-5597dc6f1e8d8b73f906365618ba3922f9dd7660.zip
debian: new config file structure
Diffstat (limited to 'debian/etc/taler')
-rw-r--r--debian/etc/taler/auditor-service-default.conf1
-rw-r--r--debian/etc/taler/auditor-system.conf14
-rw-r--r--debian/etc/taler/exchange-business.conf48
-rw-r--r--debian/etc/taler/exchange-db.conf10
-rw-r--r--debian/etc/taler/exchange-service-default.conf3
-rw-r--r--debian/etc/taler/exchange-service-wire.conf4
-rw-r--r--debian/etc/taler/exchange-system.conf21
-rw-r--r--debian/etc/taler/exchange-wire-gateway.conf4
8 files changed, 105 insertions, 0 deletions
diff --git a/debian/etc/taler/auditor-service-default.conf b/debian/etc/taler/auditor-service-default.conf
new file mode 100644
index 000000000..d57283ea5
--- /dev/null
+++ b/debian/etc/taler/auditor-service-default.conf
@@ -0,0 +1 @@
+@INCLUDE@ /etc/taler/auditor-system.conf
diff --git a/debian/etc/taler/auditor-system.conf b/debian/etc/taler/auditor-system.conf
new file mode 100644
index 000000000..50971b2ef
--- /dev/null
+++ b/debian/etc/taler/auditor-system.conf
@@ -0,0 +1,14 @@
+[PATHS]
+
+# Move runtime data "tmp" directory to /var/lib/taler-auditor/
+# to possibly provide additional protection from unwarranted access.
+TALER_RUNTIME_DIR = /var/lib/taler-auditor/tmp/
+
+[auditor]
+# Debian package is configured to use a reverse proxy with a UNIX
+# domain socket. See nginx/apache configuration files.
+SERVE = UNIX
+UNIXPATH = /var/lib/taler-auditor/auditor.sock
+
+# Only supported database is Postgres right now.
+DATABASE = postgres
diff --git a/debian/etc/taler/exchange-business.conf b/debian/etc/taler/exchange-business.conf
new file mode 100644
index 000000000..8b97c6089
--- /dev/null
+++ b/debian/etc/taler/exchange-business.conf
@@ -0,0 +1,48 @@
+TALER_RUNTIME_DIR = /var/lib/taler-exchange/tmp/
+
+[taler]
+# Here you need to set the currency of your exchange:
+# CURRENCY = KUDOS
+
+# Here you MUST add the master public key of the offline system
+# which you can get using `taler-exchange-offline setup`.
+# This is just an example, your key will be different!
+# MASTER_PUBLIC_KEY = YE6Q6TR1EDB7FD0S68TGDZGF1P0GHJD2S0XVV8R2S62MYJ6HJ4ZG
+MASTER_PUBLIC_KEY =
+
+# For your terms of service and privacy policy, you should specify
+# an Etag that must be updated whenever there are significant
+# changes to either document. The format is up to you, what matters
+# is that the value is updated and never re-used. See the HTTP
+# specification on Etags.
+# TERMS_ETAG =
+# PRIVACY_ETAG =
+
+
+# You must specify the various denominations to be offered by your exchange
+# in sections called "coin_".
+# What follows is an example.
+
+# [coin_FOO]
+## Actual value of the coin
+#VALUE = KUDOS:1
+
+## How long will one key be used for withdrawals?
+#DURATION_WITHDRAW = 7 days
+
+## How long do users have to spend their coins?
+#DURATION_SPEND = 2 years
+
+## How long does the exchange keep the proofs around for legal disputes?
+#DURATION_LEGAL = 6 years
+
+## Fees charged. Note that for the lowest denomination, the
+## fee must precisely be the lowest denomination, or zero.
+#FEE_WITHDRAW = KUDOS:0
+#FEE_DEPOSIT = KUDOS:0
+#FEE_REFRESH = KUDOS:0
+#FEE_REFUND = KUDOS:0
+
+## How long should the RSA keys be. Do not change unless you really know
+## what you are doing (consult your local cryptographer first!).
+#RSA_KEYSIZE = 2048
diff --git a/debian/etc/taler/exchange-db.conf b/debian/etc/taler/exchange-db.conf
new file mode 100644
index 000000000..a7a727b62
--- /dev/null
+++ b/debian/etc/taler/exchange-db.conf
@@ -0,0 +1,10 @@
+# Database configuration for the Taler exchange.
+
+[exchangedb-postgres]
+
+# Typically, there should only be a single line here, of the form:
+
+# CONFIG=postgres:///DATABASE
+
+# The details of the URI depend on where the database lives and how
+# access control was configured.
diff --git a/debian/etc/taler/exchange-service-default.conf b/debian/etc/taler/exchange-service-default.conf
new file mode 100644
index 000000000..0fa198f88
--- /dev/null
+++ b/debian/etc/taler/exchange-service-default.conf
@@ -0,0 +1,3 @@
+@INCLUDE@ /etc/taler/exchange-system.conf
+@INCLUDE@ /etc/taler/exchange-db.conf
+@INCLUDE@ /etc/taler/exchange-business.conf
diff --git a/debian/etc/taler/exchange-service-wire.conf b/debian/etc/taler/exchange-service-wire.conf
new file mode 100644
index 000000000..d6dc0253c
--- /dev/null
+++ b/debian/etc/taler/exchange-service-wire.conf
@@ -0,0 +1,4 @@
+@INCLUDE@ /etc/taler/exchange-system.conf
+@INCLUDE@ /etc/taler/exchange-db.conf
+@INCLUDE@ /etc/taler/exchange-business.conf
+@INCLUDE@ /etc/taler/exchange-wire-gateway.conf
diff --git a/debian/etc/taler/exchange-system.conf b/debian/etc/taler/exchange-system.conf
new file mode 100644
index 000000000..bdf53fce7
--- /dev/null
+++ b/debian/etc/taler/exchange-system.conf
@@ -0,0 +1,21 @@
+# Configuration settings for system parameters of
+# the exchange. Should be included in all service-specific
+# configuration files for the exchange.
+#
+# Please read the taler-exchange.README.Debian for how to configure a Taler exchange.
+
+[PATHS]
+
+# Move runtime data "tmp" directory to /var/lib/taler-exchange/
+# to possibly provide additional protection from unwarranted access.
+TALER_RUNTIME_DIR = /var/lib/taler-exchange/tmp/
+
+
+[exchange]
+# Debian package is configured to use a reverse proxy with a UNIX
+# domain socket. See nginx/apache configuration files.
+SERVE = UNIX
+UNIXPATH = /var/lib/taler-exchange/exchange.sock
+
+# Only supported database is Postgres right now.
+DATABASE = postgres
diff --git a/debian/etc/taler/exchange-wire-gateway.conf b/debian/etc/taler/exchange-wire-gateway.conf
new file mode 100644
index 000000000..e5c749c88
--- /dev/null
+++ b/debian/etc/taler/exchange-wire-gateway.conf
@@ -0,0 +1,4 @@
+# This file should contain the wire account access information which is needed
+# by the Taler exchange to talk to LibEuFin to interact with the bank.
+# The file SHOULD only be readable for the "taler-exchange-wire" user,
+# as other users/services have no business talking to the bank.