app-config.yaml

app:
  title: Janus IDP Backstage Showcase
  baseUrl: http://localhost:3000
  branding:
    fullLogo: ${BASE64_EMBEDDED_FULL_LOGO}
    iconLogo: ${BASE64_EMBEDDED_ICON_LOGO}
    fullLogoWidth: ${FULL_LOGO_WIDTH}
    theme:
      light:
        primaryColor: ${PRIMARY_LIGHT_COLOR}
        headerColor1: ${HEADER_LIGHT_COLOR_1}
        headerColor2: ${HEADER_LIGHT_COLOR_2}
        navigationIndicatorColor: ${NAV_INDICATOR_LIGHT_COLOR}
      dark:
        primaryColor: ${PRIMARY_DARK_COLOR}
        headerColor1: ${HEADER_DARK_COLOR_1}
        headerColor2: ${HEADER_DARK_COLOR_2}
        navigationIndicatorColor: ${NAV_INDICATOR_DARK_COLOR}

organization:
  name: ${ORGANIZATION_NAME}

backend:
  # Required for authentication. This secret is shared by all backend plugins.
  # In development mode a temporary secret is automatically created.
  # See https://backstage.io/docs/auth/service-to-service-auth for
  # information on the format
  # auth:
  #   keys:
  #     - secret: ${BACKEND_AUTH_SECRET}
  baseUrl: http://localhost:7007
  listen:
    port: 7007
    # Uncomment the following host directive to bind to specific interfaces
    # host: 127.0.0.1
  csp:
    # Content-Security-Policy directives follow the Helmet format: https://helmetjs.github.io/#reference
    # Default Helmet Content-Security-Policy values can be removed by setting the key to false
    connect-src:
      - "'self'"
      - 'http:'
      - 'https:'
    # Plugin: Jira
    img-src:
      # "'self'" and 'data' are from the backstage default but must be set since img-src is overwritten
      - "'self'"
      - 'data:'
      # Allow your Jira instance for @roadiehq/backstage-plugin-jira
      - ${JIRA_URL}
  cors:
    origin: http://localhost:3000
    methods: [GET, HEAD, PATCH, POST, PUT, DELETE]
    credentials: true
  # This is for local development only, it is not recommended to use this in production
  # The production database configuration is stored in app-config.production.yaml
  database:
    client: better-sqlite3
    connection: ':memory:'
  # workingDirectory: /tmp # Use this to configure a working directory for the scaffolder, defaults to the OS temp-dir

proxy:
  endpoints:
    # Plugin: Quay
    '/quay/api':
      target: https://quay.io/
      headers:
        X-Requested-With: 'XMLHttpRequest'
        # Uncomment the following line to access a private Quay Repository using a token
        # Authorization: 'Bearer <YOUR TOKEN>'
      changeOrigin: true
      secure: true

    # Plugin: SonarQube
    '/sonarqube':
      # if not using sonarqube, assign SONARQUBE_URL to https://sonarcloud.io
      # target: https://sonarcloud.io/api
      target: ${SONARQUBE_URL}/api
      allowedMethods: ['GET']
      auth: ${SONARQUBE_TOKEN}

    # Plugin: Jenkins
    '/jenkins/api':
      target: ${JENKINS_URL}
      headers:
        Authorization: ${JENKINS_TOKEN}

    # Plugin: Jira
    '/jira/api':
      target: ${JIRA_URL}
      headers:
        Authorization: ${JIRA_TOKEN}
        Accept: 'application/json'
        Content-Type: 'application/json'
        X-Atlassian-Token: 'no-check'
        User-Agent: ${JIRA_USER_AGENT}

    # Plugin: ACR
    '/acr/api':
      target: ${ACR_URL}
      changeOrigin: true
      headers:
        # If you use Bearer Token for authorization, please replace the 'Basic' with 'Bearer' in the following line.
        Authorization: 'Bearer ${ACR_AUTH_TOKEN}'
      # Change to "false" in case of using self hosted artifactory instance with a self-signed certificate
      secure: true

    # Plugin: Jfrog Artifactory
    '/jfrog-artifactory/api':
      target: ${ARTIFACTORY_URL}
      headers:
        Authorization: Bearer ${ARTIFACTORY_TOKEN}
      # Change to "false" in case of using self hosted artifactory instance with a self-signed certificate
      secure: ${ARTIFACTORY_SECURE}

    # Plugin: PagerDuty
    '/pagerduty':
      target: https://api.pagerduty.com
      headers:
        Authorization: Token token=${PAGERDUTY_TOKEN}

    # Plugin: Dynatrace
    '/dynatrace':
      target: ${DYNATRACE_API_URL}
      headers:
        # This API access token requires entities.read and problems.read permissions
        # For more info on how to generate this token: https://www.dynatrace.com/support/help/dynatrace-api/basics/dynatrace-api-authentication
        Authorization: 'Api-Token ${DYNATRACE_ACCESS_TOKEN}'

    # Plugin: Nexus Repository Manager
    '/nexus-repository-manager':
      target: ${NEXUS_REPOSITORY_MANAGER_URL}
      headers:
        X-Requested-With: 'XMLHttpRequest'
        # Uncomment the following line to access a private Nexus Repository Manager using a token
        # Authorization: 'Bearer <NEXUS_REPOSITORY_MANAGER_TOKEN>'
      changeOrigin: true
      # Change to "false" in case of using self hosted Nexus Repository Manager instance with a self-signed certificate
      secure: ${NEXUS_REPOSITORY_MANAGER_SECURE}

scaffolder:
  {}
  # see https://backstage.io/docs/features/software-templates/configuration for software template options

catalog:
  import:
    entityFilename: catalog-info.yaml
    pullRequestBranchName: backstage-integration
  rules:
    - allow: [Component, System, Group, Resource, Location, Template, API]
  locations:
    - type: url
      target: https://github.com/janus-idp/backstage-showcase/blob/main/catalog-entities/all.yaml

    - type: url
      target: https://github.com/redhat-developer/red-hat-developer-hub-software-templates/blob/main/templates.yaml

# Plugin: PagerDuty
pagerduty:
  # uncomment the following, and provide a URL to override the default URL used for events
  # eventsBaseUrl: <PagerDuty Event URL>

# Plugin: Lighthouse
lighthouse:
  baseUrl: ${LIGHTHOUSE_BASEURL}

# Plugin: Dynatrace
dynatrace:
  baseUrl: ${DYNATRACE_URL}

# Plugin: Permission
permission:
  enabled: ${PERMISSION_ENABLED}

dynamicPlugins:
  rootDirectory: dynamic-plugins-root