ed36e39e29
- Move template loading after class definition to avoid NameError - Initialize TEMPLATE_IMAGES, TEMPLATES_CONFIG, and CONTAINER_TEMPLATES after Config class - Use simple loop instead of calling static methods during class init - Prevents 'Config is not defined' errors during import This fixes the circular dependency issue where _build_container_templates() was trying to reference Config.TEMPLATE_IMAGES while the class was still being defined. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
217 lines
7.4 KiB
Python
217 lines
7.4 KiB
Python
import os
|
|
import json
|
|
from pathlib import Path
|
|
from dotenv import load_dotenv
|
|
|
|
load_dotenv()
|
|
|
|
class Config:
|
|
# ========================================
|
|
# Sicherheit
|
|
# ========================================
|
|
SECRET_KEY = os.getenv('SECRET_KEY', 'dev-secret-key-change-in-production')
|
|
|
|
# JWT-Konfiguration
|
|
JWT_SECRET_KEY = os.getenv('JWT_SECRET_KEY', SECRET_KEY)
|
|
JWT_ACCESS_TOKEN_EXPIRES = int(os.getenv('JWT_ACCESS_TOKEN_EXPIRES', 3600)) # 1 Stunde
|
|
JWT_TOKEN_LOCATION = ['headers']
|
|
JWT_HEADER_NAME = 'Authorization'
|
|
JWT_HEADER_TYPE = 'Bearer'
|
|
|
|
# CORS-Konfiguration
|
|
CORS_ORIGINS = os.getenv('CORS_ORIGINS', 'http://localhost:3000').split(',')
|
|
|
|
# Session-Sicherheit
|
|
SESSION_COOKIE_SECURE = os.getenv('BASE_DOMAIN', 'localhost') != 'localhost'
|
|
SESSION_COOKIE_HTTPONLY = True
|
|
SESSION_COOKIE_SAMESITE = 'Lax'
|
|
PERMANENT_SESSION_LIFETIME = 3600 # 1 Stunde
|
|
|
|
# ========================================
|
|
# Datenbank
|
|
# ========================================
|
|
SQLALCHEMY_DATABASE_URI = os.getenv(
|
|
'DATABASE_URL',
|
|
'sqlite:////app/data/users.db' # 4 slashes: sqlite:// + /app/data/users.db
|
|
)
|
|
SQLALCHEMY_TRACK_MODIFICATIONS = False
|
|
|
|
# ========================================
|
|
# Docker-Konfiguration - DYNAMISCHES TEMPLATE-SYSTEM
|
|
# ========================================
|
|
DOCKER_SOCKET = os.getenv('DOCKER_SOCKET', 'unix://var/run/docker.sock')
|
|
|
|
# LEGACY: Wird noch für alte spawn_container() verwendet
|
|
USER_TEMPLATE_IMAGE = os.getenv('USER_TEMPLATE_IMAGE', 'user-template-01:latest')
|
|
|
|
# ========================================
|
|
# Dynamisches Template-Loading
|
|
# ========================================
|
|
|
|
@staticmethod
|
|
def _extract_type_from_image(image_name: str) -> str:
|
|
"""
|
|
Extrahiert Container-Typ aus Image-Namen
|
|
|
|
Examples:
|
|
'user-template-01:latest' → 'template-01'
|
|
'user-template-next:latest' → 'template-next'
|
|
'custom-nginx:v1.0' → 'custom-nginx'
|
|
"""
|
|
# Entferne Tag (:latest, :v1.0, etc.)
|
|
base_name = image_name.split(':')[0]
|
|
|
|
# Entferne 'user-' Prefix falls vorhanden
|
|
if base_name.startswith('user-'):
|
|
base_name = base_name[5:] # 'user-template-01' → 'template-01'
|
|
|
|
return base_name
|
|
|
|
@staticmethod
|
|
def _load_template_images() -> list:
|
|
"""Lädt Template-Image-Liste aus USER_TEMPLATE_IMAGES (semikolon-getrennt)"""
|
|
raw_images = os.getenv('USER_TEMPLATE_IMAGES', '')
|
|
if not raw_images:
|
|
# Fallback für Kompatibilität
|
|
return ['user-template-01:latest']
|
|
|
|
return [img.strip() for img in raw_images.split(';') if img.strip()]
|
|
|
|
@staticmethod
|
|
def _load_templates_config() -> dict:
|
|
"""Lädt Template-Konfiguration aus templates.json"""
|
|
config_path = Path(__file__).parent / 'templates.json'
|
|
|
|
if not config_path.exists():
|
|
return {}
|
|
|
|
try:
|
|
with open(config_path, 'r', encoding='utf-8') as f:
|
|
data = json.load(f)
|
|
|
|
# Konvertiere Array zu Dictionary (key=type)
|
|
return {
|
|
template['type']: template
|
|
for template in data.get('templates', [])
|
|
}
|
|
except (json.JSONDecodeError, KeyError) as e:
|
|
import sys
|
|
print(f"[CONFIG] Warnung: Fehler beim Laden von templates.json: {e}", file=sys.stderr)
|
|
return {}
|
|
|
|
# Temp-Variablen für Template-Loading (werden nach Klasse verarbeitet)
|
|
TEMPLATE_IMAGES = None
|
|
TEMPLATES_CONFIG = None
|
|
CONTAINER_TEMPLATES = None
|
|
|
|
# ========================================
|
|
# Traefik/Domain-Konfiguration
|
|
# ========================================
|
|
BASE_DOMAIN = os.getenv('BASE_DOMAIN', 'localhost')
|
|
SPAWNER_SUBDOMAIN = os.getenv('SPAWNER_SUBDOMAIN', 'spawner')
|
|
TRAEFIK_NETWORK = os.getenv('TRAEFIK_NETWORK', 'web')
|
|
TRAEFIK_CERTRESOLVER = os.getenv('TRAEFIK_CERTRESOLVER', 'lets-encrypt')
|
|
TRAEFIK_ENTRYPOINT = os.getenv('TRAEFIK_ENTRYPOINT', 'websecure')
|
|
|
|
# Vollständige Spawner-URL
|
|
SPAWNER_URL = f"{SPAWNER_SUBDOMAIN}.{BASE_DOMAIN}"
|
|
|
|
# ========================================
|
|
# Application-Settings
|
|
# ========================================
|
|
# HTTPS automatisch für Nicht-Localhost
|
|
PREFERRED_URL_SCHEME = 'https' if BASE_DOMAIN != 'localhost' else 'http'
|
|
|
|
# Spawner-Port (nur für Debugging wichtig)
|
|
SPAWNER_PORT = int(os.getenv('SPAWNER_PORT', 5000))
|
|
|
|
# ========================================
|
|
# Optionale Einstellungen
|
|
# ========================================
|
|
# Logging
|
|
LOG_LEVEL = os.getenv('LOG_LEVEL', 'INFO')
|
|
LOG_FILE = os.getenv('LOG_FILE', '/app/logs/spawner.log')
|
|
|
|
# Container-Limits (für container_manager.py)
|
|
DEFAULT_MEMORY_LIMIT = os.getenv('DEFAULT_MEMORY_LIMIT', '512m')
|
|
DEFAULT_CPU_QUOTA = int(os.getenv('DEFAULT_CPU_QUOTA', 50000)) # 0.5 CPU
|
|
|
|
# Container-Cleanup
|
|
CONTAINER_IDLE_TIMEOUT = int(os.getenv('CONTAINER_IDLE_TIMEOUT', 3600)) # 1h in Sekunden
|
|
|
|
# ========================================
|
|
# SMTP / Email-Konfiguration
|
|
# ========================================
|
|
SMTP_HOST = os.getenv('SMTP_HOST', 'localhost')
|
|
SMTP_PORT = int(os.getenv('SMTP_PORT', 587))
|
|
SMTP_USER = os.getenv('SMTP_USER', '')
|
|
SMTP_PASSWORD = os.getenv('SMTP_PASSWORD', '')
|
|
SMTP_FROM = os.getenv('SMTP_FROM', 'noreply@localhost')
|
|
SMTP_USE_TLS = os.getenv('SMTP_USE_TLS', 'true').lower() == 'true'
|
|
|
|
# Frontend-URL fuer Email-Links
|
|
FRONTEND_URL = os.getenv(
|
|
'FRONTEND_URL',
|
|
f"{PREFERRED_URL_SCHEME}://{SPAWNER_SUBDOMAIN}.{BASE_DOMAIN}"
|
|
)
|
|
|
|
# ========================================
|
|
# Magic Link Passwordless Auth
|
|
# ========================================
|
|
MAGIC_LINK_TOKEN_EXPIRY = int(os.getenv('MAGIC_LINK_TOKEN_EXPIRY', 900)) # 15 Minuten
|
|
MAGIC_LINK_RATE_LIMIT = int(os.getenv('MAGIC_LINK_RATE_LIMIT', 3)) # Max 3 pro Stunde
|
|
|
|
|
|
class DevelopmentConfig(Config):
|
|
"""Konfiguration für Entwicklung"""
|
|
DEBUG = True
|
|
TESTING = False
|
|
|
|
|
|
class ProductionConfig(Config):
|
|
"""Konfiguration für Produktion"""
|
|
DEBUG = False
|
|
TESTING = False
|
|
|
|
# Strikte Session-Sicherheit
|
|
SESSION_COOKIE_SECURE = True
|
|
|
|
# Optional: PostgreSQL statt SQLite
|
|
# SQLALCHEMY_DATABASE_URI = os.getenv(
|
|
# 'DATABASE_URL',
|
|
# 'postgresql://spawner:password@postgres:5432/spawner'
|
|
# )
|
|
|
|
|
|
class TestingConfig(Config):
|
|
"""Konfiguration für Tests"""
|
|
TESTING = True
|
|
SQLALCHEMY_DATABASE_URI = 'sqlite:///:memory:'
|
|
WTF_CSRF_ENABLED = False
|
|
|
|
|
|
# Initialisiere Templates NACH Klassendefini tion
|
|
Config.TEMPLATE_IMAGES = Config._load_template_images()
|
|
Config.TEMPLATES_CONFIG = Config._load_templates_config()
|
|
|
|
# Baue CONTAINER_TEMPLATES aus Templates
|
|
templates = {}
|
|
for image in Config.TEMPLATE_IMAGES:
|
|
container_type = Config._extract_type_from_image(image)
|
|
config_meta = Config.TEMPLATES_CONFIG.get(container_type, {})
|
|
templates[container_type] = {
|
|
'image': image,
|
|
'display_name': config_meta.get('display_name', container_type.replace('-', ' ').title()),
|
|
'description': config_meta.get('description', f'Container basierend auf {image}')
|
|
}
|
|
Config.CONTAINER_TEMPLATES = templates
|
|
|
|
|
|
# Config-Dict für einfaches Laden
|
|
config = {
|
|
'development': DevelopmentConfig,
|
|
'production': ProductionConfig,
|
|
'testing': TestingConfig,
|
|
'default': DevelopmentConfig
|
|
}
|