mirror of
https://github.com/penpot/penpot.git
synced 2025-03-03 03:17:26 -05:00
368 lines
12 KiB
Clojure
368 lines
12 KiB
Clojure
;; This Source Code Form is subject to the terms of the Mozilla Public
|
|
;; License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
;; file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
;;
|
|
;; Copyright (c) UXBOX Labs SL
|
|
|
|
(ns app.config
|
|
"A configuration management."
|
|
(:refer-clojure :exclude [get])
|
|
(:require
|
|
[app.common.data :as d]
|
|
[app.common.exceptions :as ex]
|
|
[app.common.flags :as flags]
|
|
[app.common.logging :as l]
|
|
[app.common.spec :as us]
|
|
[app.common.version :as v]
|
|
[app.util.time :as dt]
|
|
[clojure.core :as c]
|
|
[clojure.java.io :as io]
|
|
[clojure.pprint :as pprint]
|
|
[clojure.spec.alpha :as s]
|
|
[cuerdas.core :as str]
|
|
[environ.core :refer [env]]
|
|
[integrant.core :as ig]))
|
|
|
|
(prefer-method print-method
|
|
clojure.lang.IRecord
|
|
clojure.lang.IDeref)
|
|
|
|
(prefer-method pprint/simple-dispatch
|
|
clojure.lang.IPersistentMap
|
|
clojure.lang.IDeref)
|
|
|
|
(defmethod ig/init-key :default
|
|
[_ data]
|
|
(d/without-nils data))
|
|
|
|
(defmethod ig/prep-key :default
|
|
[_ data]
|
|
(if (map? data)
|
|
(d/without-nils data)
|
|
data))
|
|
|
|
(def defaults
|
|
{
|
|
:database-uri "postgresql://postgres/penpot"
|
|
:database-username "penpot"
|
|
:database-password "penpot"
|
|
|
|
:default-blob-version 4
|
|
:loggers-zmq-uri "tcp://localhost:45556"
|
|
|
|
:file-change-snapshot-every 5
|
|
:file-change-snapshot-timeout "3h"
|
|
|
|
:public-uri "http://localhost:3449"
|
|
:host "localhost"
|
|
:tenant "main"
|
|
|
|
:redis-uri "redis://redis/0"
|
|
:srepl-host "127.0.0.1"
|
|
:srepl-port 6062
|
|
|
|
:assets-storage-backend :assets-fs
|
|
:storage-assets-fs-directory "assets"
|
|
|
|
:assets-path "/internal/assets/"
|
|
:smtp-default-reply-to "Penpot <no-reply@example.com>"
|
|
:smtp-default-from "Penpot <no-reply@example.com>"
|
|
|
|
:profile-complaint-max-age (dt/duration {:days 7})
|
|
:profile-complaint-threshold 2
|
|
|
|
:profile-bounce-max-age (dt/duration {:days 7})
|
|
:profile-bounce-threshold 10
|
|
|
|
:telemetry-uri "https://telemetry.penpot.app/"
|
|
|
|
:ldap-user-query "(|(uid=:username)(mail=:username))"
|
|
:ldap-attrs-username "uid"
|
|
:ldap-attrs-email "mail"
|
|
:ldap-attrs-fullname "cn"
|
|
|
|
;; a server prop key where initial project is stored.
|
|
:initial-project-skey "initial-project"})
|
|
|
|
(s/def ::flags ::us/vec-of-keywords)
|
|
|
|
;; DEPRECATED PROPERTIES
|
|
(s/def ::telemetry-enabled ::us/boolean)
|
|
;; END DEPRECATED
|
|
|
|
(s/def ::audit-log-archive-uri ::us/string)
|
|
(s/def ::audit-log-gc-max-age ::dt/duration)
|
|
|
|
(s/def ::admins ::us/set-of-str)
|
|
(s/def ::file-change-snapshot-every ::us/integer)
|
|
(s/def ::file-change-snapshot-timeout ::dt/duration)
|
|
|
|
(s/def ::default-executor-parallelism ::us/integer)
|
|
(s/def ::blocking-executor-parallelism ::us/integer)
|
|
(s/def ::worker-executor-parallelism ::us/integer)
|
|
|
|
(s/def ::secret-key ::us/string)
|
|
(s/def ::allow-demo-users ::us/boolean)
|
|
(s/def ::assets-path ::us/string)
|
|
(s/def ::authenticated-cookie-domain ::us/string)
|
|
(s/def ::database-password (s/nilable ::us/string))
|
|
(s/def ::database-uri ::us/string)
|
|
(s/def ::database-username (s/nilable ::us/string))
|
|
(s/def ::database-readonly ::us/boolean)
|
|
(s/def ::database-min-pool-size ::us/integer)
|
|
(s/def ::database-max-pool-size ::us/integer)
|
|
|
|
(s/def ::default-blob-version ::us/integer)
|
|
(s/def ::error-report-webhook ::us/string)
|
|
(s/def ::user-feedback-destination ::us/string)
|
|
(s/def ::github-client-id ::us/string)
|
|
(s/def ::github-client-secret ::us/string)
|
|
(s/def ::gitlab-base-uri ::us/string)
|
|
(s/def ::gitlab-client-id ::us/string)
|
|
(s/def ::gitlab-client-secret ::us/string)
|
|
(s/def ::google-client-id ::us/string)
|
|
(s/def ::google-client-secret ::us/string)
|
|
(s/def ::oidc-client-id ::us/string)
|
|
(s/def ::oidc-client-secret ::us/string)
|
|
(s/def ::oidc-base-uri ::us/string)
|
|
(s/def ::oidc-token-uri ::us/string)
|
|
(s/def ::oidc-auth-uri ::us/string)
|
|
(s/def ::oidc-user-uri ::us/string)
|
|
(s/def ::oidc-scopes ::us/set-of-str)
|
|
(s/def ::oidc-roles ::us/set-of-str)
|
|
(s/def ::oidc-roles-attr ::us/keyword)
|
|
(s/def ::oidc-email-attr ::us/keyword)
|
|
(s/def ::oidc-name-attr ::us/keyword)
|
|
(s/def ::host ::us/string)
|
|
(s/def ::http-server-port ::us/integer)
|
|
(s/def ::http-server-host ::us/string)
|
|
(s/def ::http-server-max-body-size ::us/integer)
|
|
(s/def ::http-server-max-multipart-body-size ::us/integer)
|
|
(s/def ::http-server-io-threads ::us/integer)
|
|
(s/def ::http-server-worker-threads ::us/integer)
|
|
(s/def ::http-session-idle-max-age ::dt/duration)
|
|
(s/def ::http-session-updater-batch-max-age ::dt/duration)
|
|
(s/def ::http-session-updater-batch-max-size ::us/integer)
|
|
(s/def ::initial-project-skey ::us/string)
|
|
(s/def ::ldap-attrs-email ::us/string)
|
|
(s/def ::ldap-attrs-fullname ::us/string)
|
|
(s/def ::ldap-attrs-username ::us/string)
|
|
(s/def ::ldap-base-dn ::us/string)
|
|
(s/def ::ldap-bind-dn ::us/string)
|
|
(s/def ::ldap-bind-password ::us/string)
|
|
(s/def ::ldap-host ::us/string)
|
|
(s/def ::ldap-port ::us/integer)
|
|
(s/def ::ldap-ssl ::us/boolean)
|
|
(s/def ::ldap-starttls ::us/boolean)
|
|
(s/def ::ldap-user-query ::us/string)
|
|
(s/def ::loggers-loki-uri ::us/string)
|
|
(s/def ::loggers-zmq-uri ::us/string)
|
|
(s/def ::media-directory ::us/string)
|
|
(s/def ::media-uri ::us/string)
|
|
(s/def ::profile-bounce-max-age ::dt/duration)
|
|
(s/def ::profile-bounce-threshold ::us/integer)
|
|
(s/def ::profile-complaint-max-age ::dt/duration)
|
|
(s/def ::profile-complaint-threshold ::us/integer)
|
|
(s/def ::public-uri ::us/string)
|
|
(s/def ::redis-uri ::us/string)
|
|
(s/def ::registration-domain-whitelist ::us/set-of-str)
|
|
(s/def ::rlimit-font ::us/integer)
|
|
(s/def ::rlimit-file-update ::us/integer)
|
|
(s/def ::rlimit-image ::us/integer)
|
|
(s/def ::rlimit-password ::us/integer)
|
|
(s/def ::smtp-default-from ::us/string)
|
|
(s/def ::smtp-default-reply-to ::us/string)
|
|
(s/def ::smtp-host ::us/string)
|
|
(s/def ::smtp-password (s/nilable ::us/string))
|
|
(s/def ::smtp-port ::us/integer)
|
|
(s/def ::smtp-ssl ::us/boolean)
|
|
(s/def ::smtp-tls ::us/boolean)
|
|
(s/def ::smtp-username (s/nilable ::us/string))
|
|
(s/def ::srepl-host ::us/string)
|
|
(s/def ::srepl-port ::us/integer)
|
|
(s/def ::assets-storage-backend ::us/keyword)
|
|
(s/def ::fdata-storage-backend ::us/keyword)
|
|
(s/def ::storage-assets-fs-directory ::us/string)
|
|
(s/def ::storage-assets-s3-bucket ::us/string)
|
|
(s/def ::storage-assets-s3-region ::us/keyword)
|
|
(s/def ::storage-assets-s3-endpoint ::us/string)
|
|
(s/def ::storage-fdata-s3-bucket ::us/string)
|
|
(s/def ::storage-fdata-s3-region ::us/keyword)
|
|
(s/def ::storage-fdata-s3-prefix ::us/string)
|
|
(s/def ::storage-fdata-s3-endpoint ::us/string)
|
|
(s/def ::telemetry-uri ::us/string)
|
|
(s/def ::telemetry-with-taiga ::us/boolean)
|
|
(s/def ::tenant ::us/string)
|
|
|
|
(s/def ::sentry-trace-sample-rate ::us/number)
|
|
(s/def ::sentry-attach-stack-trace ::us/boolean)
|
|
(s/def ::sentry-debug ::us/boolean)
|
|
(s/def ::sentry-dsn ::us/string)
|
|
|
|
(s/def ::config
|
|
(s/keys :opt-un [::secret-key
|
|
::flags
|
|
::admins
|
|
::allow-demo-users
|
|
::audit-log-archive-uri
|
|
::audit-log-gc-max-age
|
|
::authenticated-cookie-domain
|
|
::database-password
|
|
::database-uri
|
|
::database-username
|
|
::database-readonly
|
|
::database-min-pool-size
|
|
::database-max-pool-size
|
|
::default-blob-version
|
|
::error-report-webhook
|
|
::default-executor-parallelism
|
|
::blocking-executor-parallelism
|
|
::worker-executor-parallelism
|
|
::file-change-snapshot-every
|
|
::file-change-snapshot-timeout
|
|
::user-feedback-destination
|
|
::github-client-id
|
|
::github-client-secret
|
|
::gitlab-base-uri
|
|
::gitlab-client-id
|
|
::gitlab-client-secret
|
|
::google-client-id
|
|
::google-client-secret
|
|
::oidc-client-id
|
|
::oidc-client-secret
|
|
::oidc-base-uri
|
|
::oidc-token-uri
|
|
::oidc-auth-uri
|
|
::oidc-user-uri
|
|
::oidc-scopes
|
|
::oidc-roles-attr
|
|
::oidc-email-attr
|
|
::oidc-name-attr
|
|
::oidc-roles
|
|
::host
|
|
::http-server-host
|
|
::http-server-port
|
|
::http-server-max-body-size
|
|
::http-server-max-multipart-body-size
|
|
::http-server-io-threads
|
|
::http-server-worker-threads
|
|
::http-session-idle-max-age
|
|
::http-session-updater-batch-max-age
|
|
::http-session-updater-batch-max-size
|
|
::initial-project-skey
|
|
::ldap-attrs-email
|
|
::ldap-attrs-fullname
|
|
::ldap-attrs-username
|
|
::ldap-base-dn
|
|
::ldap-bind-dn
|
|
::ldap-bind-password
|
|
::ldap-host
|
|
::ldap-port
|
|
::ldap-ssl
|
|
::ldap-starttls
|
|
::ldap-user-query
|
|
::local-assets-uri
|
|
::loggers-loki-uri
|
|
::loggers-zmq-uri
|
|
::profile-bounce-max-age
|
|
::profile-bounce-threshold
|
|
::profile-complaint-max-age
|
|
::profile-complaint-threshold
|
|
::public-uri
|
|
::redis-uri
|
|
::registration-domain-whitelist
|
|
::rlimit-font
|
|
::rlimit-file-update
|
|
::rlimit-image
|
|
::rlimit-password
|
|
::sentry-dsn
|
|
::sentry-debug
|
|
::sentry-attach-stack-trace
|
|
::sentry-trace-sample-rate
|
|
::smtp-default-from
|
|
::smtp-default-reply-to
|
|
::smtp-host
|
|
::smtp-password
|
|
::smtp-port
|
|
::smtp-ssl
|
|
::smtp-tls
|
|
::smtp-username
|
|
::srepl-host
|
|
::srepl-port
|
|
::assets-storage-backend
|
|
::storage-assets-fs-directory
|
|
::storage-assets-s3-bucket
|
|
::storage-assets-s3-region
|
|
::storage-assets-s3-endpoint
|
|
::fdata-storage-backend
|
|
::storage-fdata-s3-bucket
|
|
::storage-fdata-s3-region
|
|
::storage-fdata-s3-prefix
|
|
::storage-fdata-s3-endpoint
|
|
::telemetry-enabled
|
|
::telemetry-uri
|
|
::telemetry-referer
|
|
::telemetry-with-taiga
|
|
::tenant]))
|
|
|
|
(def default-flags
|
|
[:enable-backend-api-doc
|
|
:enable-secure-session-cookies])
|
|
|
|
(defn- parse-flags
|
|
[config]
|
|
(flags/parse flags/default
|
|
default-flags
|
|
(:flags config)))
|
|
|
|
(defn read-env
|
|
[prefix]
|
|
(let [prefix (str prefix "-")
|
|
len (count prefix)]
|
|
(reduce-kv
|
|
(fn [acc k v]
|
|
(cond-> acc
|
|
(str/starts-with? (name k) prefix)
|
|
(assoc (keyword (subs (name k) len)) v)))
|
|
{}
|
|
env)))
|
|
|
|
(defn- read-config
|
|
[]
|
|
(try
|
|
(->> (read-env "penpot")
|
|
(merge defaults)
|
|
(us/conform ::config))
|
|
(catch Throwable e
|
|
(when (ex/ex-info? e)
|
|
(println ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;")
|
|
(println "Error on validating configuration:")
|
|
(println (us/pretty-explain (ex-data e)))
|
|
(println ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"))
|
|
(throw e))))
|
|
|
|
(def version
|
|
(v/parse (or (some-> (io/resource "version.txt")
|
|
(slurp)
|
|
(str/trim))
|
|
"%version%")))
|
|
|
|
(defonce ^:dynamic config (read-config))
|
|
|
|
(defonce ^:dynamic flags
|
|
(let [flags (parse-flags config)]
|
|
(l/info :hint "flags initialized" :flags (str/join "," (map name flags)))
|
|
flags))
|
|
|
|
(def deletion-delay
|
|
(dt/duration {:days 7}))
|
|
|
|
(defn get
|
|
"A configuration getter. Helps code be more testable."
|
|
([key]
|
|
(c/get config key))
|
|
([key default]
|
|
(c/get config key default)))
|
|
|
|
;; Set value for all new threads bindings.
|
|
(alter-var-root #'*assert* (constantly (contains? flags :backend-asserts)))
|