332d9eea19
* remove the kill-switch: auto-apply toggle is the single on/off; manual
'Bewerben' button now only gated by apply reachability; circuit breaker
stays but only gates auto-apply (manual bypasses, so a user can retry)
* Berlin-timezone date filter (de_dt) formats timestamps as DD.MM.YYYY HH:MM
everywhere; storage stays UTC
* Wohnungen: live 'entdeckt vor X' on every flat + 'nächste Aktualisierung in Xs'
countdown in the header, driven by /static/app.js; HTMX polls body every 30s
* drop the Fehler tab entirely; failed applications now carry a
'Fehler-Report herunterladen (ZIP)' link -> /bewerbungen/{id}/report.zip
bundles application.json, flat.json, profile_snapshot.json, forensics.json,
step_log.txt, page.html, console/errors/network JSONs, and decoded
screenshots/*.jpg for AI-assisted debugging
* trim the 'sensibel' blurb from the Profil tab
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
65 lines
2.9 KiB
Python
65 lines
2.9 KiB
Python
import secrets
|
|
import sys
|
|
from os import getenv
|
|
from pathlib import Path
|
|
|
|
from dotenv import load_dotenv
|
|
|
|
load_dotenv()
|
|
|
|
|
|
def _required(key: str) -> str:
|
|
val = getenv(key)
|
|
if not val:
|
|
print(f"missing required env var: {key}", file=sys.stderr)
|
|
sys.exit(1)
|
|
return val
|
|
|
|
|
|
# --- Admin bootstrap ----------------------------------------------------------
|
|
# On first boot the web service seeds this user as an admin in the database.
|
|
# Afterwards the user record in SQLite is authoritative: changing the hash in
|
|
# env does NOT rotate the DB password — use the /einstellungen UI.
|
|
AUTH_USERNAME: str = _required("AUTH_USERNAME")
|
|
AUTH_PASSWORD_HASH: str = _required("AUTH_PASSWORD_HASH")
|
|
|
|
# --- Session cookie -----------------------------------------------------------
|
|
SESSION_SECRET: str = getenv("SESSION_SECRET") or secrets.token_urlsafe(48)
|
|
SESSION_COOKIE_NAME: str = "lazyflat_session"
|
|
SESSION_MAX_AGE_SECONDS: int = int(getenv("SESSION_MAX_AGE_SECONDS", str(60 * 60 * 24 * 7)))
|
|
COOKIE_SECURE: bool = getenv("COOKIE_SECURE", "true").lower() in ("true", "1", "yes", "on")
|
|
|
|
# --- Internal service auth ----------------------------------------------------
|
|
INTERNAL_API_KEY: str = _required("INTERNAL_API_KEY")
|
|
|
|
# --- Apply service ------------------------------------------------------------
|
|
APPLY_URL: str = getenv("APPLY_URL", "http://apply:8000")
|
|
APPLY_TIMEOUT: int = int(getenv("APPLY_TIMEOUT", "600"))
|
|
APPLY_FAILURE_THRESHOLD: int = int(getenv("APPLY_FAILURE_THRESHOLD", "3"))
|
|
|
|
# --- Alert service knob (mirrored so web can predict the next scrape) ---------
|
|
ALERT_SCRAPE_INTERVAL_SECONDS: int = int(getenv("ALERT_SCRAPE_INTERVAL_SECONDS", getenv("SLEEP_INTERVALL", "60")))
|
|
|
|
# --- Storage ------------------------------------------------------------------
|
|
DATA_DIR: Path = Path(getenv("DATA_DIR", "/data"))
|
|
DATA_DIR.mkdir(parents=True, exist_ok=True)
|
|
DB_PATH: Path = DATA_DIR / "lazyflat.sqlite"
|
|
|
|
# Retention (errors / audit / application forensics). Default 14 days.
|
|
RETENTION_DAYS: int = int(getenv("RETENTION_DAYS", "14"))
|
|
RETENTION_RUN_INTERVAL_SECONDS: int = int(getenv("RETENTION_RUN_INTERVAL_SECONDS", str(60 * 60)))
|
|
|
|
# --- Rate limiting ------------------------------------------------------------
|
|
LOGIN_RATE_LIMIT: int = int(getenv("LOGIN_RATE_LIMIT", "5"))
|
|
LOGIN_RATE_WINDOW_SECONDS: int = int(getenv("LOGIN_RATE_WINDOW_SECONDS", "900"))
|
|
|
|
# --- Email (system-wide SMTP for notifications) -------------------------------
|
|
SMTP_HOST: str = getenv("SMTP_HOST", "")
|
|
SMTP_PORT: int = int(getenv("SMTP_PORT", "587"))
|
|
SMTP_USERNAME: str = getenv("SMTP_USERNAME", "")
|
|
SMTP_PASSWORD: str = getenv("SMTP_PASSWORD", "")
|
|
SMTP_FROM: str = getenv("SMTP_FROM", "lazyflat@localhost")
|
|
SMTP_STARTTLS: bool = getenv("SMTP_STARTTLS", "true").lower() in ("true", "1", "yes", "on")
|
|
|
|
# --- App URL (used to build links in notifications) ---------------------------
|
|
PUBLIC_URL: str = getenv("PUBLIC_URL", "https://flat.lab.moritz.run")
|