set -e
NUM_TOKENS=4 # current + 4
VALID_TOKEN=3600 # in seconds
-QOS_TOKENS=($(/usr/bin/oathtool --totp --window=${NUM_TOKENS} --time-step-size=${VALID_TOKEN}s <%= totp_key %>))
+QOS_TOKENS=($(/usr/bin/oathtool --totp --window=${NUM_TOKENS} --time-step-size=${VALID_TOKEN}s -b <%= @totp_key %>))
# ${qos_tokens[3]/[-1] } = OSM.org exclusive / current
# ${qos_tokens[2]/[-2] } = tile.openstreetmap.org default
EOF
cat <<EOF >/etc/nginx/conf.d/tile_qos_cookies.map
-default 'qos_token=${QOS_TOKEN_DEFAULT}; Secure; httponly; Max-Age=${VALID_TOKEN}; Domain=openstreetmap.org; Path=/'; # Cookie Domain per RFC6265
+default 'qos_token=${QOS_TOKEN_DEFAULT}; Max-Age=${VALID_TOKEN}; Domain=openstreetmap.org; Path=/'; # Cookie Domain per RFC6265
"${QOS_TOKEN_DEFAULT}" ''; # Do not Set-Cookie. # Default
"${QOS_TOKEN_OSM}" ''; # Do not Set-Cookie. # Exclusive
EOF