B0rbor4d
cc4c3fcecb
- Backend: Customer/Satellite Models, customer_id auf Server/Job/Audit - Satellite-API: heartbeat, poll (atomares Claiming), logs, result, scan-result, health-report - Auth via X-Api-Key (SHA-256 gehasht) - Job-Queue: pending/claimed/running/success/failed + Stale-Janitor - Batch-Trigger: ein Job pro Server, Satellite arbeitet sequenziell ab - Credentials bleiben lokal: nur symbolische credential_ref zentral - Neues Paket satellite/: Pull-Loop, WinRM/SSH/CAU/Scanner, PyInstaller-tauglich - Frontend: Kunden-Switcher, Satelliten-View, Polling statt WebSocket - Entfernt: WebSocket/Socket.io, Redis, zentrale Credentials, JobRunner - Docs: README/AGENTS/PROMPT auf neue Architektur aktualisiert
61 lines
1.7 KiB
Python
61 lines
1.7 KiB
Python
"""Application configuration via pydantic-settings.
|
|
|
|
All values are read from environment variables / .env file.
|
|
See .env.example for the full list.
|
|
"""
|
|
|
|
from functools import lru_cache
|
|
|
|
from pydantic_settings import BaseSettings, SettingsConfigDict
|
|
|
|
|
|
class Settings(BaseSettings):
|
|
"""Central application settings."""
|
|
|
|
model_config = SettingsConfigDict(env_file=".env", env_file_encoding="utf-8", extra="ignore")
|
|
|
|
# Core
|
|
app_env: str = "development"
|
|
app_name: str = "Insight Updater"
|
|
secret_key: str = "dev-secret-change-me-32-chars-min"
|
|
log_level: str = "INFO"
|
|
log_format: str = "json"
|
|
|
|
# JWT
|
|
jwt_algorithm: str = "RS256"
|
|
jwt_private_key_path: str = "keys/private.pem"
|
|
jwt_public_key_path: str = "keys/public.pem"
|
|
jwt_access_token_expire_minutes: int = 30
|
|
jwt_refresh_token_expire_days: int = 7
|
|
|
|
# Database
|
|
database_url: str = "sqlite+aiosqlite:///./data/app.db"
|
|
|
|
# Jobs: a claimed/running job without satellite reports for this many
|
|
# seconds is considered stale and marked failed by the janitor
|
|
job_stale_timeout: int = 3600
|
|
|
|
# LDAP (stub)
|
|
ldap_enabled: bool = False
|
|
ldap_uri: str = ""
|
|
ldap_bind_dn: str = ""
|
|
ldap_bind_password: str = ""
|
|
ldap_user_search_base: str = ""
|
|
ldap_user_filter: str = "(sAMAccountName={username})"
|
|
|
|
# CORS
|
|
cors_origins: str = "http://localhost:3000,http://localhost:8000"
|
|
|
|
@property
|
|
def cors_origin_list(self) -> list[str]:
|
|
return [o.strip() for o in self.cors_origins.split(",") if o.strip()]
|
|
|
|
@property
|
|
def is_production(self) -> bool:
|
|
return self.app_env.lower() == "production"
|
|
|
|
|
|
@lru_cache
|
|
def get_settings() -> Settings:
|
|
return Settings()
|