[taler-ansible-taler-exchange] branch master updated: use templates for kycaid secrets

[gnunet]

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository ansible-taler-exchange.

The following commit(s) were added to refs/heads/master by this push:
     new ddabadf  use templates for kycaid secrets
ddabadf is described below

commit ddabadfe0284ea02936fd55561fca4ef1ebe0f58
Author: Christian Grothoff <christian@grothoff.org>
AuthorDate: Sat Nov 23 22:10:37 2024 +0100

    use templates for kycaid secrets
---
 playbooks/setup.yml                                     |  4 ++++
 playbooks/test-secrets.yml                              |  3 +++
 roles/exchange/tasks/main.yml                           |  8 ++++++++
 .../secrets/exchange-kyc-providers.conf.j2              | 17 +++++++++++++++++
 4 files changed, 32 insertions(+)

diff --git a/playbooks/setup.yml b/playbooks/setup.yml
index e7fd3c8..2869b07 100644
--- a/playbooks/setup.yml
+++ b/playbooks/setup.yml
@@ -41,3 +41,7 @@
     EXCHANGE_OPERATOR_LEGAL_NAME="Taler Exchange Operator Legal Name"
 # Where to send people after they passed KYC.
     KYC_THANK_YOU_URL = https://taler-ops.ch/thank-you-kyc
+# Template to use for identification of individuals with KYCAID
+    KYCAID_TEMPLATE_INDIVIDUAL = tmpl_xxx
+# Template to use for identification of businesses with KYCAID
+    KYCAID_TEMPLATE_BUSINESS = tmpl_xxx
diff --git a/playbooks/test-secrets.yml b/playbooks/test-secrets.yml
index ff5ccea..d6a5309 100644
--- a/playbooks/test-secrets.yml
+++ b/playbooks/test-secrets.yml
@@ -11,3 +11,6 @@ LIBEUFIN_NEXUS_EBICS_SYSTEM_ID = PFC00664
 
 # Authorization token for the telesign SMS service
 SMS_CHALLENGER_TELESIGN_AUTH_TOKEN = my-auth-token
+
+# KYCaid access token
+EXCHANGE_KYCAID_ACCESS_TOKEN = FIXME
diff --git a/roles/exchange/tasks/main.yml b/roles/exchange/tasks/main.yml
index 161d7a2..8337061 100644
--- a/roles/exchange/tasks/main.yml
+++ b/roles/exchange/tasks/main.yml
@@ -36,6 +36,14 @@
     group: root
     mode: 0400
 
+- name: Place taler-exchange external KYC provider configuration
+  ansible.builtin.template:
+    src: 
templates/etc/taler-exchange/secrets/exchange-kyc-providers.secret.conf.j2
+    dest: "/etc/taler-exchange/secrets/exchange-kyc-providers.secret.conf"
+    owner: taler-exchange-httpd
+    group: root
+    mode: 0400
+
 - name: Setup Taler Exchange database
   shell:
     cmd: taler-exchange-dbconfig -c /etc/taler-exchange/taler-exchange.conf
diff --git 
a/roles/exchange/templates/etc/taler-exchange/secrets/exchange-kyc-providers.conf.j2
 
b/roles/exchange/templates/etc/taler-exchange/secrets/exchange-kyc-providers.conf.j2
new file mode 100644
index 0000000..de967bf
--- /dev/null
+++ 
b/roles/exchange/templates/etc/taler-exchange/secrets/exchange-kyc-providers.conf.j2
@@ -0,0 +1,17 @@
+[kyc-provider-kycaid-individual]
+LOGIC = kycaid
+KYC_KYCAID_VALIDITY = forever
+KYC_KYCAID_AUTH_TOKEN = {{ EXCHANGE_KYCAID_ACCESS_TOKEN }}
+# FIXME: correct converter?
+KYC_KYCAID_CONVERTER_HELPER = taler-exchange-kyc-kycaid-converter.sh
+KYC_KYCAID_FORM_ID = {{ KYCAID_TEMPLATE_INDIVIDUAL }}
+KYC_KYCAID_POST_URL = {{ KYC_THANK_YOU_URL }}
+
+[kyc-provider-kycaid-business]
+LOGIC = kycaid
+KYC_KYCAID_VALIDITY = forever
+KYC_KYCAID_AUTH_TOKEN = {{ EXCHANGE_KYCAID_ACCESS_TOKEN }}
+# FIXME: correct converter? business should differ!
+KYC_KYCAID_CONVERTER_HELPER = taler-exchange-kyc-kycaid-converter.sh
+KYC_KYCAID_FORM_ID = {{ KYCAID_TEMPLATE_INDIVIDUAL }}
+KYC_KYCAID_POST_URL = {{ KYC_THANK_YOU_URL }}

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.