JiriUhlir
155 lines
4.8 KiB
Python
155 lines
4.8 KiB
Python
DEPLOY_SCRIPT = "/tools/deploy-app.sh"
|
||
DELETE_APP_SCRIPT = "/tools/delete-app.sh"
|
||
BACKUP_SCRIPT = "/tools/backup-appfactory.sh"
|
||
RESTORE_SCRIPT = "/tools/restore-appfactory.sh"
|
||
GENERATE_COMPOSE_SCRIPT = "/tools/generate-apps-compose.sh"
|
||
|
||
CATALOG_FILE = "/opt/appfactory/apps/catalog.yml"
|
||
APPFACTORY_ENV = "/opt/appfactory/config/appfactory.env"
|
||
|
||
DEFAULT_BACKUP_DIR = "/opt/appfactory/backups"
|
||
DEFAULT_GITEA_ORG = "appfactory"
|
||
INTERNAL_GITEA_URL = "http://appfactory-gitea:3000"
|
||
|
||
PORTAL_PREFIX = "/portal"
|
||
AUTH_MODES = {"google", "mixed", "local"}
|
||
|
||
|
||
def read_env_value(key: str, default: str = "") -> str:
|
||
try:
|
||
with open(APPFACTORY_ENV, "r", encoding="utf-8") as f:
|
||
for line in f:
|
||
line = line.strip()
|
||
if line.startswith(f"{key}="):
|
||
return line.split("=", 1)[1].strip().strip('"')
|
||
except FileNotFoundError:
|
||
# appfactory.env nemusí existovat (např. lokální vývoj) – očekávaný stav, vrátíme default.
|
||
pass
|
||
except Exception as exc:
|
||
# Neočekávaná chyba čtení configu – nesmí být tichá.
|
||
from app.logging_config import get_logger
|
||
|
||
get_logger(__name__).warning("Čtení %s (klíč %s) selhalo: %s", APPFACTORY_ENV, key, exc)
|
||
|
||
return default
|
||
|
||
|
||
def read_env_bool(key: str, default: bool = False) -> bool:
|
||
value = read_env_value(key, "")
|
||
if value == "":
|
||
return default
|
||
|
||
return value.strip().lower() in {"1", "true", "yes", "on"}
|
||
|
||
|
||
def get_portal_public_url() -> str:
|
||
public_url = read_env_value("APPFACTORY_PORTAL_PUBLIC_URL", "").rstrip("/")
|
||
if public_url:
|
||
return public_url
|
||
|
||
domain = read_env_value("APPFACTORY_PORTAL_DOMAIN", "").strip()
|
||
if read_env_bool("APPFACTORY_ENABLE_HTTPS") and domain:
|
||
return f"https://{domain}"
|
||
|
||
return ""
|
||
|
||
|
||
def get_google_redirect_uri() -> str:
|
||
redirect_uri = read_env_value("GOOGLE_REDIRECT_URI", "").strip()
|
||
if redirect_uri:
|
||
return redirect_uri
|
||
|
||
public_url = get_portal_public_url()
|
||
if public_url:
|
||
return f"{public_url}{PORTAL_PREFIX}/auth/google/callback"
|
||
|
||
return ""
|
||
|
||
|
||
def get_gitea_public_url() -> str:
|
||
return (read_env_value("GITEA_URL", "") or read_env_value("GITEA_ROOT_URL", "")).rstrip("/")
|
||
|
||
|
||
def get_gitea_server_url() -> str:
|
||
return (
|
||
read_env_value("GITEA_SERVER_URL", "")
|
||
or read_env_value("GITEA_INTERNAL_URL", "")
|
||
or get_gitea_public_url()
|
||
or INTERNAL_GITEA_URL
|
||
).rstrip("/")
|
||
|
||
|
||
def get_gitea_admin_token() -> str:
|
||
return (
|
||
read_env_value("GITEA_ADMIN_TOKEN", "")
|
||
or read_env_value("GITEA_API_TOKEN", "")
|
||
or read_env_value("GITEA_TOKEN", "")
|
||
).strip()
|
||
|
||
|
||
def get_gitea_redirect_uri() -> str:
|
||
redirect_uri = read_env_value("GITEA_OAUTH_REDIRECT_URI", "").strip()
|
||
if redirect_uri:
|
||
return redirect_uri
|
||
|
||
public_url = get_portal_public_url()
|
||
if public_url:
|
||
return f"{public_url}{PORTAL_PREFIX}/auth/gitea/callback"
|
||
|
||
return ""
|
||
|
||
|
||
def is_gitea_oauth_button_enabled() -> bool:
|
||
return bool(
|
||
get_gitea_public_url()
|
||
and read_env_value("GITEA_OAUTH_CLIENT_ID", "")
|
||
and read_env_value("GITEA_OAUTH_CLIENT_SECRET", "")
|
||
and get_gitea_redirect_uri()
|
||
)
|
||
|
||
|
||
def get_appfactory_host(request_host: str = "") -> str:
|
||
configured_host = read_env_value("APPFACTORY_HOST", "").strip()
|
||
if configured_host:
|
||
return configured_host
|
||
|
||
public_url = get_portal_public_url()
|
||
if public_url:
|
||
return public_url.split("://", 1)[-1].split("/", 1)[0].split(":", 1)[0]
|
||
|
||
return (request_host or "").split(":", 1)[0]
|
||
|
||
|
||
def get_auth_domain_readiness() -> dict[str, bool]:
|
||
google_enabled = read_env_bool("GOOGLE_OAUTH_ENABLED")
|
||
google_client_id = read_env_value("GOOGLE_CLIENT_ID", "")
|
||
google_client_secret = read_env_value("GOOGLE_CLIENT_SECRET", "")
|
||
google_redirect_uri = get_google_redirect_uri()
|
||
|
||
return {
|
||
"portal_public_url_configured": bool(get_portal_public_url()),
|
||
"auth_mode_google": get_auth_mode() == "google",
|
||
"auth_mode_mixed": get_auth_mode() == "mixed",
|
||
"auth_mode_local": get_auth_mode() == "local",
|
||
"google_oauth_enabled": google_enabled,
|
||
"google_oauth_configured": bool(google_client_id and google_client_secret and google_redirect_uri),
|
||
"google_redirect_uri_configured": bool(google_redirect_uri),
|
||
"https_enabled": read_env_bool("APPFACTORY_ENABLE_HTTPS"),
|
||
}
|
||
|
||
|
||
def get_auth_mode() -> str:
|
||
mode = read_env_value("AUTH_MODE", "mixed").strip().lower()
|
||
if mode in AUTH_MODES:
|
||
return mode
|
||
return "mixed"
|
||
|
||
|
||
def is_google_oauth_button_enabled() -> bool:
|
||
return bool(
|
||
read_env_bool("GOOGLE_OAUTH_ENABLED")
|
||
and read_env_value("GOOGLE_CLIENT_ID", "")
|
||
and read_env_value("GOOGLE_CLIENT_SECRET", "")
|
||
and get_google_redirect_uri()
|
||
)
|