constants.js

const { mapValues, orderBy } = require('lodash');
const fs = require('fs-extra');

const SECRETS_PATH = '/run/secrets/';

// Check each env var and see if it has a value in the secrets. In that case, use the
// secret value. Otherwise use the env var. Using sync fs methods for the sake of
// simplicity, since this will only run once when staring the app, sync is OK.
const secrets = (fs.existsSync(SECRETS_PATH) && fs.readdirSync(SECRETS_PATH)) || [];

const secretsEnv = mapValues(process.env, (value, key) => {
  const matchingSecrets = secrets.filter(secretFile => secretFile.startsWith(key));

  const currentSecret =
    orderBy(
      matchingSecrets,
      secret => {
        const secretVersion = parseInt(secret[secret.length - 1], 10);
        return isNaN(secretVersion) ? 0 : secretVersion;
      },
      'desc',
    )[0] || null;

  const filepath = SECRETS_PATH + currentSecret;

  if (fs.existsSync(filepath)) {
    return (fs.readFileSync(filepath, { encoding: 'utf8' }) || '').trim();
  }

  return value;
});

module.exports = {
  PG_CONNECTION_STRING: secretsEnv.PG_CONNECTION_STRING || '',
  REDIS_CONNECTION_STRING: secretsEnv.REDIS_CONNECTION_STRING || '',
  PUBLISHER_RENDER_URL: secretsEnv.PUBLISHER_RENDER_URL || 'http://localhost:5000',
  DIGITRANSIT_URL: secretsEnv.DIGITRANSIT_URL || '',
  DIGITRANSIT_APIKEY: secretsEnv.DIGITRANSIT_APIKEY || '',
  JORE_GRAPHQL_URL: secretsEnv.JORE_GRAPHQL_URL || '',
  GENERATE_API_URL: secretsEnv.GENERATE_API_URL || '',
  AZURE_FONTS_SAS_URL: secretsEnv.AZURE_FONTS_SAS_URL || '',
  AZURE_UPLOAD_CONTAINER: secretsEnv.AZURE_UPLOAD_CONTAINER || 'publisher-prod',
  AZURE_STORAGE_ACCOUNT: secretsEnv.AZURE_STORAGE_ACCOUNT || '',
  AZURE_STORAGE_KEY: secretsEnv.AZURE_STORAGE_KEY || '',
  CLIENT_SECRET: secretsEnv.CLIENT_SECRET || '',
  API_CLIENT_SECRET: secretsEnv.API_CLIENT_SECRET || '',
  DOMAINS_ALLOWED_TO_GENERATE: secretsEnv.DOMAINS_ALLOWED_TO_GENERATE || '',
  DOMAINS_ALLOWED_TO_LOGIN: secretsEnv.DOMAINS_ALLOWED_TO_LOGIN || '',
  HSL_TESTING_HSLID_USERNAME: secretsEnv.HSL_TESTING_HSLID_USERNAME || '',
  HSL_TESTING_HSLID_PASSWORD: secretsEnv.HSL_TESTING_HSLID_PASSWORD || '',
  PUBLISHER_TEST_GROUP: secretsEnv.PUBLISHER_TEST_GROUP || '',
  TESTING_REDIRECT_URI: 'http://localhost:3000/',
  TEST_PUBLISHER_SERVER_URL: secretsEnv.TEST_PUBLISHER_SERVER_URL || 'http://localhost:4000',
};