Config Subsystem - Revision history

DaveSanderman: /* Floodzilla Config Subsystem */

2020-09-08T18:46:59Z

Floodzilla Config Subsystem

DaveSanderman at 18:44, 8 September 2020

2020-09-08T18:44:19Z

DaveSanderman: Created page with "== Floodzilla Config Subsystem == The Floodzilla Config Subsystem is used to store configuration-related information across the various services. === Design === Floodzilla..."

2020-09-08T18:13:19Z

Created page with "== Floodzilla Config Subsystem == The Floodzilla Config Subsystem is used to store configuration-related information across the various services. === Design === Floodzilla..."

New page

== Floodzilla Config Subsystem ==

The Floodzilla Config Subsystem is used to store configuration-related information across the various services.

=== Design ===

Floodzilla uses Azure's [https://azure.microsoft.com/en-us/services/app-configuration/ App Configuration] system as its primary data store. Additionally, mechanisms exist for local "Developer mode" overrides of configuration.

=== Usage ===

=== Notes ===

'''Secrets''': Currently, the App Configuration store is used to store secrets, such as the SQL Server password and various secret keys for third party services like Google Auth and Facebook Login.

=== Issues ===

{{X!}} appconfig.settings.json has a secret, and is currently checked in to the private GitHub repository! When open-sourcing the project, care must be taken to not check this file into the new repository.

← Older revision		Revision as of 18:46, 8 September 2020
Line 52:		Line 52:

	{{X!}} Not all code has been updated to use this system, so existing configuration elements, including secrets, exist in the code.		{{X!}} Not all code has been updated to use this system, so existing configuration elements, including secrets, exist in the code.
		+
		+	{{X!}} The Azure configuration store name is miscapitalized. Sorry!

@@ Line 1: / Line 1: @@
 == Floodzilla Config Subsystem ==
-The Floodzilla Config Subsystem is used to store configuration-related information across the various services.
+The Floodzilla Config Subsystem (FzConfig) is used to store configuration-related information across the various services.  The implementation lives in [[FzCommon]].
 === Design ===
 Floodzilla uses Azure's [https://azure.microsoft.com/en-us/services/app-configuration/ App Configuration] system as its primary data store.  Additionally, mechanisms exist for local "Developer mode" overrides of configuration.
 === Usage ===
 === Notes ===
-'''Secrets''': Currently, the App Configuration store is used to store secrets, such as the SQL Server password and various secret keys for third party services like Google Auth and Facebook Login.
+'''Secrets''': Currently, the App Configuration store is used to store secrets, such as the SQL Server password and various secret keys for third party services like Google Auth and Facebook Login.  Although this is probably secure (Azure claims that configuration entries are encrypted), it is apparently not recommended.  Azure best practices seems to recommend Azure Key Vault, which seems to have a lot more setup and maintenance overhead.
 === Issues ===
 {{X!}} appconfig.settings.json has a secret, and is currently checked in to the private GitHub repository!  When open-sourcing the project, care must be taken to not check this file into the new repository.