71 lines
2.5 KiB
Python
71 lines
2.5 KiB
Python
"""Configuration surface — the single place deployment/environment config is read.
|
|
|
|
INV-8: no deployment shape is baked into framework code. Every URL, credential, or
|
|
relay coordinate arrives through here from the environment (resolved from Secret
|
|
Manager in deployed environments). The localhost defaults match compose.yaml so a
|
|
clean `scripts/dev.sh` checkout needs no env setup.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
|
|
# Dev default points at the single Postgres container compose.yaml brings up. In
|
|
# PPE/Prod the deployment supplies ECOMM_DATABASE_URL from Secret Manager (INV-8).
|
|
_DEFAULT_DATABASE_URL = "postgresql://ecomm:ecomm@localhost:5432/ecomm"
|
|
|
|
|
|
def database_url() -> str:
|
|
"""The psycopg DSN for the application database."""
|
|
return os.environ.get("ECOMM_DATABASE_URL") or _DEFAULT_DATABASE_URL
|
|
|
|
|
|
# Session signing secret. Dev default is intentionally well-known and insecure — a clean
|
|
# checkout works with no setup; deployed environments MUST supply ECOMM_SESSION_SECRET from
|
|
# Secret Manager (INV-8, §6.6). Rotating it invalidates all sessions at once (§6.2).
|
|
_DEFAULT_SESSION_SECRET = "dev-insecure-session-secret-change-me"
|
|
|
|
|
|
def session_secret() -> str:
|
|
"""The HMAC key for signed session cookies (and the one-time-code pepper)."""
|
|
return os.environ.get("ECOMM_SESSION_SECRET") or _DEFAULT_SESSION_SECRET
|
|
|
|
|
|
def cookie_secure() -> bool:
|
|
"""Whether to mark the session cookie Secure (HTTPS-only). True in deployed envs."""
|
|
return os.environ.get("ECOMM_COOKIE_SECURE", "").strip().lower() in {"1", "true", "yes", "on"}
|
|
|
|
|
|
def mailer_kind() -> str:
|
|
"""Which mailer adapter to build: 'log' (dev/tests) or 'smtp' (deployed)."""
|
|
return os.environ.get("ECOMM_MAILER") or "log"
|
|
|
|
|
|
# SMTP relay coordinates (deployed envs only; INV-8 — host/port/user/from are non-secret
|
|
# overlay values, the password is a Secret Manager reference resolved by the deploy).
|
|
|
|
|
|
def smtp_host() -> str:
|
|
return os.environ.get("ECOMM_SMTP_HOST", "")
|
|
|
|
|
|
def smtp_port() -> int:
|
|
return int(os.environ.get("ECOMM_SMTP_PORT") or "587")
|
|
|
|
|
|
def smtp_user() -> str:
|
|
return os.environ.get("ECOMM_SMTP_USER", "")
|
|
|
|
|
|
def smtp_password() -> str:
|
|
return os.environ.get("ECOMM_SMTP_PASSWORD", "")
|
|
|
|
|
|
def smtp_from() -> str:
|
|
"""The From header; defaults to the relay user."""
|
|
return os.environ.get("ECOMM_SMTP_FROM") or smtp_user()
|
|
|
|
|
|
def smtp_starttls() -> bool:
|
|
"""STARTTLS on the relay connection (default on; disable only for odd relays)."""
|
|
return os.environ.get("ECOMM_SMTP_STARTTLS", "1").strip().lower() not in {"0", "false", "no", "off"}
|