B0rbor4d
cc4c3fcecb
- Backend: Customer/Satellite Models, customer_id auf Server/Job/Audit - Satellite-API: heartbeat, poll (atomares Claiming), logs, result, scan-result, health-report - Auth via X-Api-Key (SHA-256 gehasht) - Job-Queue: pending/claimed/running/success/failed + Stale-Janitor - Batch-Trigger: ein Job pro Server, Satellite arbeitet sequenziell ab - Credentials bleiben lokal: nur symbolische credential_ref zentral - Neues Paket satellite/: Pull-Loop, WinRM/SSH/CAU/Scanner, PyInstaller-tauglich - Frontend: Kunden-Switcher, Satelliten-View, Polling statt WebSocket - Entfernt: WebSocket/Socket.io, Redis, zentrale Credentials, JobRunner - Docs: README/AGENTS/PROMPT auf neue Architektur aktualisiert
102 lines
2.6 KiB
Python
102 lines
2.6 KiB
Python
"""FastAPI application entrypoint.
|
|
|
|
Central instance of the Insight Updater hub:
|
|
- Dashboard REST API under /api (JWT auth)
|
|
- Satellite agent API under /api/satellite (X-Api-Key auth)
|
|
- /health liveness probe
|
|
"""
|
|
|
|
from contextlib import asynccontextmanager
|
|
|
|
from fastapi import FastAPI, Request
|
|
from fastapi.middleware.cors import CORSMiddleware
|
|
from fastapi.responses import JSONResponse
|
|
|
|
from app.api import api_router
|
|
from app.core.config import get_settings
|
|
from app.core.database import init_db
|
|
from app.core.exceptions import AppError
|
|
from app.core.logging import get_logger, setup_logging
|
|
|
|
settings = get_settings()
|
|
logger = get_logger(__name__)
|
|
|
|
|
|
@asynccontextmanager
|
|
async def lifespan(app: FastAPI): # type: ignore[no-untyped-def]
|
|
setup_logging()
|
|
logger.info("app.starting", env=settings.app_env)
|
|
|
|
await init_db()
|
|
await _seed_default_admin()
|
|
|
|
import asyncio
|
|
|
|
from app.services.janitor import run_janitor
|
|
|
|
janitor = asyncio.create_task(run_janitor(), name="job-janitor")
|
|
|
|
yield
|
|
|
|
janitor.cancel()
|
|
logger.info("app.stopping")
|
|
|
|
|
|
async def _seed_default_admin() -> None:
|
|
"""Create the initial admin user if no users exist (dev bootstrap).
|
|
|
|
Password comes from ADMIN_INITIAL_PASSWORD env, default 'admin' (dev only).
|
|
"""
|
|
import os
|
|
|
|
from sqlalchemy import func, select
|
|
|
|
from app.core.database import async_session_factory
|
|
from app.core.security import hash_password
|
|
from app.models.user import User
|
|
|
|
async with async_session_factory() as db:
|
|
count = await db.scalar(select(func.count(User.id)))
|
|
if count and count > 0:
|
|
return
|
|
password = os.environ.get("ADMIN_INITIAL_PASSWORD", "admin")
|
|
db.add(
|
|
User(
|
|
username="admin",
|
|
email=None,
|
|
full_name="Administrator",
|
|
password_hash=hash_password(password),
|
|
is_admin=True,
|
|
)
|
|
)
|
|
await db.commit()
|
|
logger.info("app.default_admin_created", username="admin")
|
|
|
|
|
|
app = FastAPI(
|
|
title=settings.app_name,
|
|
version="0.2.0",
|
|
lifespan=lifespan,
|
|
)
|
|
|
|
app.add_middleware(
|
|
CORSMiddleware,
|
|
allow_origins=settings.cors_origin_list,
|
|
allow_credentials=True,
|
|
allow_methods=["*"],
|
|
allow_headers=["*"],
|
|
)
|
|
|
|
|
|
@app.exception_handler(AppError)
|
|
async def app_error_handler(request: Request, exc: AppError) -> JSONResponse: # noqa: ARG001
|
|
return JSONResponse(status_code=exc.status_code, content={"detail": exc.detail})
|
|
|
|
|
|
@app.get("/health")
|
|
async def health() -> dict:
|
|
return {"status": "ok", "env": settings.app_env, "version": "0.2.0"}
|
|
|
|
|
|
app.include_router(api_router)
|