access-config.xml

<?xml version="1.0" encoding="UTF-8"?>
<config>
    <!-- Configuration for Github webhooks sync feature  -->
    <git-config>
        <!-- github secret key can be stored here or as a environment variable. (prefered)  -->
        <private-key/>
        <private-key-variable>GIT_PRIV_TOKEN</private-key-variable>
        <!-- github token for rate limiting. can be stored here or as a environment variable. (prefered) 
        CW: it seems to me this is the secret key from the webhook!-->
        <gitToken>eb1b9628ad0eed7050a7d679ef0c35dde2165ee9</gitToken>
        <gitToken-variable/>
        <!-- Branch to sync, if empty assumes master -->
        <github-branch/>
        <!-- Collection in eXistdb to sync app to. example: /db/apps/tcadrt -->
        <exist-collection>/db/apps/tls-app</exist-collection>
        <!-- App root in git repository. example: srophe-app -->
        <repo-name>tls-app</repo-name>
    </git-config>
    <!-- Configuration for recaptcha options -->
    <recaptcha>
        <!-- recpatcha secret key can be stored here or as a environment variable. (prefered)  -->
        <recaptcha-site-key/>
        <recaptcha-secret-key/>
        <recaptcha-secret-key-variable>secret</recaptcha-secret-key-variable>
    </recaptcha>
    <email>
        <smtp/>
        <contact listID="places">
            <to>cwittern@gmail.com</to>
        </contact>
        <contact>
            <to>cwittern@gmail.com</to>
        </contact>
    </email>
    <google_analytics>var _gaq=[['_setAccount',''],['_trackPageview']];
        (function(d,t){var g=d.createElement(t),s=d.getElementsByTagName(t)[0];
        g.src=('https:'==location.protocol?'//ssl':'//www')+'.google-analytics.com/ga.js';
        s.parentNode.insertBefore(g,s)}(document,'script'));</google_analytics>
    <restrictions execute-query="yes" guest="yes">
        <!-- 
            Disallow access to certain collections. When using this,
            you always (!) want to deny access to the eXide collection as
            well.
        -->
        <!--deny collection="/db/apps/eXide"/-->
    </restrictions>   
</config>