aa052763f6
- .env.example: полный шаблон, защита секретов - .gitignore: явное исключение .env.* и секретов - layout.tsx: XSS — заменён dangerouslySetInnerHTML на next/script для SW - ESLint: no-console error (allow warn/error), ignore scripts/ - scripts/remove-console-logs.js: очистка console.log без glob - backend/routes/modules: README с планом рефакторинга крупных файлов - SECURITY.md: гид по секретам, XSS, CORS, auth, линту - .husky/pre-commit: запуск npm run lint + прочие правки приложения и бэкенда Co-authored-by: Cursor <cursoragent@cursor.com>
68 lines
1.9 KiB
Python
68 lines
1.9 KiB
Python
"""
|
||
Конфигурация приложения КЛГ АСУ ТК.
|
||
12-factor: все настройки через ENV.
|
||
Разработчик: АО «REFLY»
|
||
"""
|
||
|
||
from pydantic_settings import BaseSettings
|
||
from typing import List
|
||
|
||
|
||
class Settings(BaseSettings):
|
||
"""Настройки приложения"""
|
||
|
||
# API
|
||
API_V1_PREFIX: str = "/api/v1"
|
||
CORS_ORIGINS: List[str] = ["http://localhost:3000", "http://localhost:8000", "http://localhost:8080"]
|
||
|
||
# Database
|
||
DATABASE_URL: str = "postgresql://klg:klg@localhost:5432/klg"
|
||
|
||
# Redis
|
||
REDIS_URL: str = "redis://localhost:6379"
|
||
|
||
# MinIO (S3-compatible storage)
|
||
MINIO_ENDPOINT: str = "localhost:9000"
|
||
MINIO_ACCESS_KEY: str = "minioadmin"
|
||
MINIO_SECRET_KEY: str = "minioadmin"
|
||
MINIO_BUCKET: str = "klg-attachments"
|
||
MINIO_SECURE: bool = False
|
||
|
||
# Auth
|
||
OIDC_ISSUER: str = "http://localhost:8180/realms/klg"
|
||
OIDC_JWKS_URL: str = "" # auto-derived from issuer if empty
|
||
ENABLE_DEV_AUTH: bool = False # ONLY for development
|
||
DEV_TOKEN: str = "dev"
|
||
|
||
# Rate limiting
|
||
RATE_LIMIT_PER_MINUTE: int = 60
|
||
|
||
# Redpanda / RisingWave — optional
|
||
ENABLE_RISINGWAVE: bool = False
|
||
ENABLE_REDPANDA: bool = False
|
||
REDPANDA_BROKERS: str = "localhost:19092"
|
||
REDPANDA_CLIENT_ID: str = "klg-backend"
|
||
RISINGWAVE_URL: str = "postgresql://root:risingwave@localhost:4566/dev"
|
||
|
||
# Inbox (COD-004)
|
||
INBOX_DATA_DIR: str = "./data"
|
||
INBOX_UPLOAD_MAX_MB: int = 50
|
||
|
||
# Multi-tenancy
|
||
ENABLE_RLS: bool = True
|
||
|
||
@property
|
||
def database_url(self) -> str:
|
||
url = self.DATABASE_URL
|
||
if "asyncpg" in url:
|
||
url = url.replace("postgresql+asyncpg://", "postgresql://")
|
||
return url
|
||
|
||
class Config:
|
||
env_file = ".env"
|
||
case_sensitive = True
|
||
extra = "ignore"
|
||
|
||
|
||
settings = Settings()
|