Merge pull request #782 from automatisch/docs/docker-installation

docs: Docker installation

packages/backend/.env-example

@@ -11,6 +11,7 @@ POSTGRES_USERNAME=automatish_development_user
 POSTGRES_PASSWORD=
 POSTGRES_ENABLE_SSL=false
 ENCRYPTION_KEY=sample-encryption-key
+WEBHOOK_SECRET_KEY=sample-webhook-key
 APP_SECRET_KEY=sample-app-secret-key
 REDIS_PORT=6379
 REDIS_HOST=127.0.0.1

packages/backend/src/apps/typeform/auth/verify-webhook.ts

@@ -11,7 +11,7 @@ const verifyWebhook = async ($: IGlobalVariable) => {
 
 const verifySignature = function (receivedSignature: string, payload: string) {
   const hash = crypto
-    .createHmac('sha256', appConfig.appSecretKey)
+    .createHmac('sha256', appConfig.webhookSecretKey)
     .update(payload)
     .digest('base64');
   return receivedSignature === `sha256=${hash}`;

packages/backend/src/apps/typeform/triggers/new-entry/index.ts

@@ -72,7 +72,7 @@ export default defineTrigger({
     const subscriptionPayload = {
       enabled: true,
       url: $.webhookUrl,
-      secret: appConfig.appSecretKey,
+      secret: appConfig.webhookSecretKey,
     };
 
     await $.http.put(

packages/backend/src/config/app.ts

@@ -18,6 +18,7 @@ type AppConfig = {
   postgresEnableSsl: boolean;
   baseUrl: string;
   encryptionKey: string;
+  webhookSecretKey: string;
   appSecretKey: string;
   serveWebAppSeparately: boolean;
   redisHost: string;
@@ -63,6 +64,7 @@ const appConfig: AppConfig = {
   postgresPassword: process.env.POSTGRES_PASSWORD,
   postgresEnableSsl: process.env.POSTGRES_ENABLE_SSL === 'true',
   encryptionKey: process.env.ENCRYPTION_KEY || '',
+  webhookSecretKey: process.env.WEBHOOK_SECRET_KEY || '',
   appSecretKey: process.env.APP_SECRET_KEY || '',
   serveWebAppSeparately,
   redisHost: process.env.REDIS_HOST || '127.0.0.1',
@@ -70,8 +72,7 @@ const appConfig: AppConfig = {
   redisUsername: process.env.REDIS_USERNAME,
   redisPassword: process.env.REDIS_PASSWORD,
   redisTls: process.env.REDIS_TLS === 'true',
-  enableBullMQDashboard:
-    process.env.ENABLE_BULLMQ_DASHBOARD === 'true',
+  enableBullMQDashboard: process.env.ENABLE_BULLMQ_DASHBOARD === 'true',
   bullMQDashboardUsername: process.env.BULLMQ_DASHBOARD_USERNAME,
   bullMQDashboardPassword: process.env.BULLMQ_DASHBOARD_PASSWORD,
   baseUrl,
@@ -84,4 +85,8 @@ if (!appConfig.encryptionKey) {
   throw new Error('ENCRYPTION_KEY environment variable needs to be set!');
 }
 
+if (!appConfig.webhookSecretKey) {
+  throw new Error('WEBHOOK_SECRET_KEY environment variable needs to be set!');
+}
+
 export default appConfig;