[taler-exchange] branch master updated: debian: adopt new accountcredentials config structure

[gnunet]

This is an automated email from the git hooks/post-receive script.

dold pushed a commit to branch master
in repository exchange.

The following commit(s) were added to refs/heads/master by this push:
     new 95df47ae debian: adopt new accountcredentials config structure
95df47ae is described below

commit 95df47ae4e2b858b298a9c99af9df2f9884f8e40
Author: Florian Dold <florian@dold.me>
AuthorDate: Wed Aug 4 13:31:25 2021 +0200

    debian: adopt new accountcredentials config structure
---
 .../taler/conf.d/exchange-business.conf             | 12 ++++++++++++
 .../secrets/exchange-accountcredentials.secret.conf | 17 +++++++++++++++++
 .../taler/secrets/exchange-accounts.secret.conf     | 21 ---------------------
 3 files changed, 29 insertions(+), 21 deletions(-)

diff --git a/debian/etc-taler-exchange/taler/conf.d/exchange-business.conf 
b/debian/etc-taler-exchange/taler/conf.d/exchange-business.conf
index 3fae902e..4a6b16df 100644
--- a/debian/etc-taler-exchange/taler/conf.d/exchange-business.conf
+++ b/debian/etc-taler-exchange/taler/conf.d/exchange-business.conf
@@ -19,3 +19,15 @@ BASE_URL =
 # specification on Etags.
 # TERMS_ETAG =
 # PRIVACY_ETAG =
+
+
+# Bank accounts used by the exchange should be specified here:
+[exchange-accounts-1]
+
+enable_credit = yes
+enable_debit = yes
+payto_uri =
+
+# Credentials to access the account are in a separate
+# config file with restricted permissions.
+@inline-secret@ exchange-accountcredentials-1 
../exchange-accountcredentials.secret.conf
diff --git 
a/debian/etc-taler-exchange/taler/secrets/exchange-accountcredentials.secret.conf
 
b/debian/etc-taler-exchange/taler/secrets/exchange-accountcredentials.secret.conf
new file mode 100644
index 00000000..8c8d1432
--- /dev/null
+++ 
b/debian/etc-taler-exchange/taler/secrets/exchange-accountcredentials.secret.conf
@@ -0,0 +1,17 @@
+# This file contains the secret credentials
+# to access the Taler Wire Gateway API (usually
+# provided by LibEuFin) for the exchange accounts.
+#
+# Each exchange-account-* section should have a matching
+# exchange-accountcredentials-* section here.
+#
+# Each of those sections must be imported via @inline-secret@,
+# usually in conf.d/exchange-business.conf.
+
+[exchange-accountcredentials-1]
+
+wire_gateway_auth_method = basic
+password =
+username =
+wire_gateway_url =
+
diff --git 
a/debian/etc-taler-exchange/taler/secrets/exchange-accounts.secret.conf 
b/debian/etc-taler-exchange/taler/secrets/exchange-accounts.secret.conf
deleted file mode 100644
index 7b6c649f..00000000
--- a/debian/etc-taler-exchange/taler/secrets/exchange-accounts.secret.conf
+++ /dev/null
@@ -1,21 +0,0 @@
-# This file should contain the wire account access information which is needed
-# by the Taler exchange to talk to LibEuFin to interact with the bank.
-# The file SHOULD only be readable for the "taler-exchange-wire" user,
-# as other users/services have no business talking to the bank.
-
-
-[exchange-account-1]
-enable_credit = yes
-
-enable_debit = yes
-
-wire_gateway_auth_method = basic
-
-password =
-
-username =
-
-wire_gateway_url =
-
-payto_uri =
-

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.