monacousa-portal/docker/kong/kong.yml.template

_format_version: "2.1"
_transform: true

consumers:
  - username: ANON
    keyauth_credentials:
      - key: __ANON_KEY__
  - username: SERVICE_ROLE
    keyauth_credentials:
      - key: __SERVICE_ROLE_KEY__

acls:
  - consumer: ANON
    group: anon
  - consumer: SERVICE_ROLE
    group: admin

services:
  - name: auth-verify-redirect
    url: http://portal:3000/auth/verify
    routes:
      - name: auth-verify-redirect
        strip_path: false
        paths:
          - /auth/verify
        preserve_host: false
    plugins:
      - name: cors
        config:
          origins:
            - https://portal.monacousa.org
            - http://localhost:7453
            - http://localhost:3000
          methods:
            - GET
            - POST
            - PUT
            - PATCH
            - DELETE
            - OPTIONS
          headers:
            - Accept
            - Accept-Version
            - Authorization
            - Content-Length
            - Content-Type
            - Date
            - X-Auth-Token
            - apikey
            - x-client-info
          exposed_headers:
            - Content-Length
            - Content-Range
          credentials: true
          max_age: 3600

  - name: auth-v1-open
    url: http://auth:9999/verify
    routes:
      - name: auth-v1-open
        strip_path: true
        paths:
          - /auth/v1/verify
    plugins:
      - name: cors
        config:
          origins:
            - https://portal.monacousa.org
            - http://localhost:7453
            - http://localhost:3000
          methods:
            - GET
            - POST
            - PUT
            - PATCH
            - DELETE
            - OPTIONS
          headers:
            - Accept
            - Accept-Version
            - Authorization
            - Content-Length
            - Content-Type
            - Date
            - X-Auth-Token
            - apikey
            - x-client-info
          exposed_headers:
            - Content-Length
            - Content-Range
          credentials: true
          max_age: 3600

  - name: auth-v1-open-callback
    url: http://auth:9999/callback
    routes:
      - name: auth-v1-open-callback
        strip_path: true
        paths:
          - /auth/v1/callback
    plugins:
      - name: cors
        config:
          origins:
            - https://portal.monacousa.org
            - http://localhost:7453
            - http://localhost:3000
          methods:
            - GET
            - POST
            - PUT
            - PATCH
            - DELETE
            - OPTIONS
          headers:
            - Accept
            - Accept-Version
            - Authorization
            - Content-Length
            - Content-Type
            - Date
            - X-Auth-Token
            - apikey
            - x-client-info
          exposed_headers:
            - Content-Length
            - Content-Range
          credentials: true
          max_age: 3600

  - name: auth-v1-open-authorize
    url: http://auth:9999/authorize
    routes:
      - name: auth-v1-open-authorize
        strip_path: true
        paths:
          - /auth/v1/authorize
    plugins:
      - name: cors
        config:
          origins:
            - https://portal.monacousa.org
            - http://localhost:7453
            - http://localhost:3000
          methods:
            - GET
            - POST
            - PUT
            - PATCH
            - DELETE
            - OPTIONS
          headers:
            - Accept
            - Accept-Version
            - Authorization
            - Content-Length
            - Content-Type
            - Date
            - X-Auth-Token
            - apikey
            - x-client-info
          exposed_headers:
            - Content-Length
            - Content-Range
          credentials: true
          max_age: 3600

  - name: auth-v1
    url: http://auth:9999/
    routes:
      - name: auth-v1
        strip_path: true
        paths:
          - /auth/v1/
    plugins:
      - name: cors
        config:
          origins:
            - https://portal.monacousa.org
            - http://localhost:7453
            - http://localhost:3000
          methods:
            - GET
            - POST
            - PUT
            - PATCH
            - DELETE
            - OPTIONS
          headers:
            - Accept
            - Accept-Version
            - Authorization
            - Content-Length
            - Content-Type
            - Date
            - X-Auth-Token
            - apikey
            - x-client-info
          exposed_headers:
            - Content-Length
            - Content-Range
          credentials: true
          max_age: 3600
      - name: key-auth
        config:
          hide_credentials: false
      - name: acl
        config:
          hide_groups_header: true
          allow:
            - admin
            - anon

  - name: rest-v1
    url: http://rest:3000/
    routes:
      - name: rest-v1
        strip_path: true
        paths:
          - /rest/v1/
    plugins:
      - name: cors
        config:
          origins:
            - https://portal.monacousa.org
            - http://localhost:7453
            - http://localhost:3000
          methods:
            - GET
            - POST
            - PUT
            - PATCH
            - DELETE
            - OPTIONS
          headers:
            - Accept
            - Accept-Version
            - Authorization
            - Content-Length
            - Content-Type
            - Date
            - X-Auth-Token
            - apikey
            - x-client-info
          exposed_headers:
            - Content-Length
            - Content-Range
          credentials: true
          max_age: 3600
      - name: key-auth
        config:
          hide_credentials: false
      - name: acl
        config:
          hide_groups_header: true
          allow:
            - admin
            - anon

  - name: realtime-v1-ws
    url: http://realtime:4000/socket
    routes:
      - name: realtime-v1-ws
        strip_path: true
        paths:
          - /realtime/v1/websocket
    plugins:
      - name: cors
        config:
          origins:
            - https://portal.monacousa.org
            - http://localhost:7453
            - http://localhost:3000
          methods:
            - GET
            - POST
            - PUT
            - PATCH
            - DELETE
            - OPTIONS
          headers:
            - Accept
            - Accept-Version
            - Authorization
            - Content-Length
            - Content-Type
            - Date
            - X-Auth-Token
            - apikey
            - x-client-info
          exposed_headers:
            - Content-Length
            - Content-Range
          credentials: true
          max_age: 3600
      - name: key-auth
        config:
          hide_credentials: false
      - name: acl
        config:
          hide_groups_header: true
          allow:
            - admin
            - anon

  - name: realtime-v1
    url: http://realtime:4000/
    routes:
      - name: realtime-v1
        strip_path: true
        paths:
          - /realtime/v1/
    plugins:
      - name: cors
        config:
          origins:
            - https://portal.monacousa.org
            - http://localhost:7453
            - http://localhost:3000
          methods:
            - GET
            - POST
            - PUT
            - PATCH
            - DELETE
            - OPTIONS
          headers:
            - Accept
            - Accept-Version
            - Authorization
            - Content-Length
            - Content-Type
            - Date
            - X-Auth-Token
            - apikey
            - x-client-info
          exposed_headers:
            - Content-Length
            - Content-Range
          credentials: true
          max_age: 3600
      - name: key-auth
        config:
          hide_credentials: false
      - name: acl
        config:
          hide_groups_header: true
          allow:
            - admin
            - anon

  - name: storage-v1-public
    url: http://storage:5000/object/public
    routes:
      - name: storage-v1-public
        strip_path: true
        paths:
          - /storage/v1/object/public
    plugins:
      - name: cors
        config:
          origins:
            - https://portal.monacousa.org
            - http://localhost:7453
            - http://localhost:3000
          methods:
            - GET
            - POST
            - PUT
            - PATCH
            - DELETE
            - OPTIONS
          headers:
            - Accept
            - Accept-Version
            - Authorization
            - Content-Length
            - Content-Type
            - Date
            - X-Auth-Token
            - apikey
            - x-client-info
          exposed_headers:
            - Content-Length
            - Content-Range
          credentials: true
          max_age: 3600

  - name: storage-v1
    url: http://storage:5000/
    routes:
      - name: storage-v1
        strip_path: true
        paths:
          - /storage/v1/
    plugins:
      - name: cors
        config:
          origins:
            - https://portal.monacousa.org
            - http://localhost:7453
            - http://localhost:3000
          methods:
            - GET
            - POST
            - PUT
            - PATCH
            - DELETE
            - OPTIONS
          headers:
            - Accept
            - Accept-Version
            - Authorization
            - Content-Length
            - Content-Type
            - Date
            - X-Auth-Token
            - apikey
            - x-client-info
          exposed_headers:
            - Content-Length
            - Content-Range
          credentials: true
          max_age: 3600
      - name: key-auth
        config:
          hide_credentials: false
      - name: acl
        config:
          hide_groups_header: true
          allow:
            - admin
            - anon

  - name: meta
    url: http://meta:8080/
    routes:
      - name: meta
        strip_path: true
        paths:
          - /pg/
    plugins:
      - name: key-auth
        config:
          hide_credentials: false
      - name: acl
        config:
          hide_groups_header: true
          allow:
            - admin