app-config.yaml

app:
  title: WeeboDevHub
  baseUrl: http://localhost:3000
organization:
  name: Weebo

backend:
  # Used for enabling authentication, secret is shared by all backend plugins
  # See https://backstage.io/docs/auth/service-to-service-auth for
  # information on the format
  # auth:
  #   keys:
  #     - secret: ${BACKEND_SECRET}
  baseUrl: http://localhost:7000
  listen: ':7000'
  # Uncomment the following host directive to bind to specific interfaces
  # host: 127.0.0.1
  csp:
    connect-src: [ "'self'", 'http:', 'https:' ]
    # Content-Security-Policy directives follow the Helmet format: https://helmetjs.github.io/#reference
    # Default Helmet Content-Security-Policy values can be removed by setting the key to false
    img-src: [ "'self'", 'data:', 'https:', 'https://avatars.githubusercontent.com', 'https://imgs.xkcd.com' ]
  cors:
    origin: ${FRONTEND_URL}
    methods: [ GET, HEAD, PATCH, POST, PUT, DELETE, OPTIONS ]
    credentials: true
  # This is for local development only, it is not recommended to use this in production
  # The production database configuration is stored in app-config.production.yaml
  database:
    client: better-sqlite3
    connection: ':memory:'
    # workingDirectory: /tmp # Use this to configure a working directory for the scaffolder, defaults to the OS temp-dir

integrations:
  github:
  - host: github.com
    token: ${GITHUB_TOKEN}
  gitea:
  - host: git.weebo.fr
    token: ${GITEA_TOKEN}

proxy:
  endpoints:
    '/xkcd-proxy':
      target: https://xkcd.com/
    '/argocd/api':
      target: ${ARGOCD_URL}/api/v1/
      changeOrigin: true
      # only if your argocd api has self-signed cert
      secure: true
      headers:
        Cookie:
          $env: ARGOCD_AUTH_TOKEN

sonarqube:
  instances:
  - name: default
    baseUrl: ${SONARQUBE_URL}
    apiKey: ${SONARQUBE_TOKEN}

### A typical reason to do this is to handle HTTPS and CORS for internal services.
# endpoints:
#   '/test':
#     target: 'https://example.com'
#     changeOrigin: true

# Reference documentation http://backstage.io/docs/features/techdocs/configuration
# Note: After experimenting with basic setup, use CI/CD to generate docs
# and an external cloud storage when deploying TechDocs for production use-case.
# https://backstage.io/docs/features/techdocs/how-to-guides#how-to-migrate-from-techdocs-basic-to-recommended-deployment-approach
techdocs:
  builder: 'local' # Alternatives - 'external'
  generator:
    runIn: 'docker' # Alternatives - 'local'
  publisher:
    type: 'local' # Alternatives - 'googleGcs' or 'awsS3'. Read documentation for using alternatives.

auth:
  environment: development
  # see https://backstage.io/docs/auth/ to learn about auth providers
  providers:
    # See https://backstage.io/docs/auth/guest/provider
    guest: {}
    oauth2Proxy: {}
    github:
      development:
        clientId: ${GITHUB_CLIENT_ID}
        clientSecret: ${GITHUB_CLIENT_SECRET}

scaffolder: # see https://backstage.io/docs/features/software-templates/configuration for software template options

spectralLinter:
  openApiRulesetUrl: https://raw.githubusercontent.com/batleforc/Monofolio/refs/heads/main/.spectral.yaml

catalog:
  import:
    entityFilename: catalog-info.yaml
    pullRequestBranchName: backstage-integration
  rules:
  - allow: [ Component, System, API, Resource, Location ]
  locations:
  # Weebo scope
  - type: file
    target: ../../model/location/*.yaml
  - type: file
    target: ../../model/system/*.yaml
  - type: file
    target: ../../model/user/*.yaml
    rules:
    - allow: [ User ]
  - type: file
    target: ../../model/group/weebdev.yaml
    rules:
    - allow: [ Group ]

kubernetes:
  # see https://backstage.io/docs/features/kubernetes/configuration for kubernetes configuration options
  serviceLocatorMethod:
    type: multiTenant
  clusterLocatorMethods:
  - type: 'config'
    clusters:
    - url: ${K8S_CLUSTER_URL}
      name: weebo4
      authProvider: 'serviceAccount'
      skipTLSVerify: false
      skipMetricsLookup: true
      serviceAccountToken: ${K8S_SA_TOKEN}
      caFile: ${K8S_CA_FILE}
      customResources:
      - group: 'tekton.dev'
        apiVersion: 'v1'
        plural: 'pipelineruns'
      - group: 'tekton.dev'
        apiVersion: 'v1'
        plural: 'taskruns'

# see https://backstage.io/docs/permissions/getting-started for more on the permission framework
permission:
  # setting this to `false` will disable permissions
  enabled: true