From: Tom Hughes <tom@compton.nu>
Date: Mon, 27 Nov 2023 22:41:25 +0000 (+0000)
Subject: Configure doorkeeper keys for dev instances
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/1859ef73b97959019cfa27cfa446f1900f52ff3f

Configure doorkeeper keys for dev instances
---

diff --git a/cookbooks/dev/recipes/default.rb b/cookbooks/dev/recipes/default.rb
index 3a708a018..8a6fd665d 100644
--- a/cookbooks/dev/recipes/default.rb
+++ b/cookbooks/dev/recipes/default.rb
@@ -386,6 +386,12 @@ if node[:postgresql][:clusters][:"15/main"]
         mode "755"
       end
 
+      openssl_rsa_private_key "#{site_directory}/doorkeeper.key" do
+        owner "root"
+        group "root"
+        mode "0400"
+      end
+
       rails_port site_name do
         directory rails_directory
         user "apis"
@@ -402,6 +408,7 @@ if node[:postgresql][:clusters][:"15/main"]
         csp_enforce true
         run_migrations true
         trace_use_job_queue true
+        doorkeeper_signing_key lazy { File.read("#{site_directory}/doorkeeper.key") }
       end
 
       template "#{rails_directory}/config/initializers/setup.rb" do