891e17972c
- deps: авторизация через app.services.security (JWT/OIDC), без oidc fallback - main: AUTH_DEPENDENCY для роутеров, RequestLoggerMiddleware, убран on_event(startup) - attachments: защита path traversal, проверка владельца/authority - docker-compose: SECRET_KEY обязателен, отдельная БД keycloak-db - middleware: ужесточён CSP (без unsafe-eval в prod, без api.openai.com) - api-client: токен только в памяти, без sessionStorage - cert_applications: _next_number с SELECT FOR UPDATE - Удалён lib/api.ts, импорты на @/lib/api/api-client - docs ERROR_HANDLING: aircraftApi.list(), middleware __init__.py Co-authored-by: Cursor <cursoragent@cursor.com>
69 lines
1.9 KiB
Python
69 lines
1.9 KiB
Python
"""
|
||
Конфигурация приложения КЛГ АСУ ТК.
|
||
12-factor: все настройки через ENV.
|
||
Разработчик: АО «REFLY»
|
||
"""
|
||
|
||
from pydantic_settings import BaseSettings
|
||
from typing import List
|
||
|
||
|
||
class Settings(BaseSettings):
|
||
"""Настройки приложения"""
|
||
|
||
# API
|
||
API_V1_PREFIX: str = "/api/v1"
|
||
CORS_ORIGINS: List[str] = ["http://localhost:3000", "http://localhost:8000", "http://localhost:8080"]
|
||
|
||
# Database
|
||
DATABASE_URL: str = "postgresql://klg:klg@localhost:5432/klg"
|
||
|
||
# Redis
|
||
REDIS_URL: str = "redis://localhost:6379"
|
||
|
||
# MinIO (S3-compatible storage)
|
||
MINIO_ENDPOINT: str = "localhost:9000"
|
||
MINIO_ACCESS_KEY: str = "minioadmin"
|
||
MINIO_SECRET_KEY: str = "minioadmin"
|
||
MINIO_BUCKET: str = "klg-attachments"
|
||
MINIO_SECURE: bool = False
|
||
|
||
# Auth
|
||
OIDC_ISSUER: str = "http://localhost:8180/realms/klg"
|
||
OIDC_JWKS_URL: str = "" # auto-derived from issuer if empty
|
||
OIDC_AUDIENCE: str = "account"
|
||
ENABLE_DEV_AUTH: bool = False # ONLY for development
|
||
DEV_TOKEN: str = "dev"
|
||
|
||
# Rate limiting
|
||
RATE_LIMIT_PER_MINUTE: int = 60
|
||
|
||
# Redpanda / RisingWave — optional
|
||
ENABLE_RISINGWAVE: bool = False
|
||
ENABLE_REDPANDA: bool = False
|
||
REDPANDA_BROKERS: str = "localhost:19092"
|
||
REDPANDA_CLIENT_ID: str = "klg-backend"
|
||
RISINGWAVE_URL: str = "postgresql://root:risingwave@localhost:4566/dev"
|
||
|
||
# Inbox (COD-004)
|
||
INBOX_DATA_DIR: str = "./data"
|
||
INBOX_UPLOAD_MAX_MB: int = 50
|
||
|
||
# Multi-tenancy
|
||
ENABLE_RLS: bool = True
|
||
|
||
@property
|
||
def database_url(self) -> str:
|
||
url = self.DATABASE_URL
|
||
if "asyncpg" in url:
|
||
url = url.replace("postgresql+asyncpg://", "postgresql://")
|
||
return url
|
||
|
||
class Config:
|
||
env_file = ".env"
|
||
case_sensitive = True
|
||
extra = "ignore"
|
||
|
||
|
||
settings = Settings()
|