41 lines
1.7 KiB
Python
41 lines
1.7 KiB
Python
"""Configuration surface — the single place deployment/environment config is read.
|
|
|
|
INV-8: no deployment shape is baked into framework code. Every URL, credential, or
|
|
relay coordinate arrives through here from the environment (resolved from Secret
|
|
Manager in deployed environments). The localhost defaults match compose.yaml so a
|
|
clean `scripts/dev.sh` checkout needs no env setup.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
|
|
# Dev default points at the single Postgres container compose.yaml brings up. In
|
|
# PPE/Prod the deployment supplies ECOMM_DATABASE_URL from Secret Manager (INV-8).
|
|
_DEFAULT_DATABASE_URL = "postgresql://ecomm:ecomm@localhost:5432/ecomm"
|
|
|
|
|
|
def database_url() -> str:
|
|
"""The psycopg DSN for the application database."""
|
|
return os.environ.get("ECOMM_DATABASE_URL") or _DEFAULT_DATABASE_URL
|
|
|
|
|
|
# Session signing secret. Dev default is intentionally well-known and insecure — a clean
|
|
# checkout works with no setup; deployed environments MUST supply ECOMM_SESSION_SECRET from
|
|
# Secret Manager (INV-8, §6.6). Rotating it invalidates all sessions at once (§6.2).
|
|
_DEFAULT_SESSION_SECRET = "dev-insecure-session-secret-change-me"
|
|
|
|
|
|
def session_secret() -> str:
|
|
"""The HMAC key for signed session cookies (and the one-time-code pepper)."""
|
|
return os.environ.get("ECOMM_SESSION_SECRET") or _DEFAULT_SESSION_SECRET
|
|
|
|
|
|
def cookie_secure() -> bool:
|
|
"""Whether to mark the session cookie Secure (HTTPS-only). True in deployed envs."""
|
|
return os.environ.get("ECOMM_COOKIE_SECURE", "").strip().lower() in {"1", "true", "yes", "on"}
|
|
|
|
|
|
def mailer_kind() -> str:
|
|
"""Which mailer adapter to build: 'log' (dev/tests) or 'smtp' (deployed; SLICE-4)."""
|
|
return os.environ.get("ECOMM_MAILER") or "log"
|