mirror of
https://github.com/ClusterCockpit/cc-backend
synced 2026-06-19 09:47:29 +02:00
Jan Eitzinger
83d04dff17
Secrets (JWT keys, LDAP sync password, OIDC client id/secret, cross-login keys) are now configured directly in config.json under the auth section where they are used. Each secret can still be supplied via its existing environment variable, which takes precedence over the config value. The godotenv dependency, the .env file, configs/env-template.txt and the loadEnvironment() bootstrap step are removed. -init now writes the demo JWT keys into config.json instead of a .env file. Closes #283 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Entire-Checkpoint: 3a7cb814c53f
83 lines
2.6 KiB
Go
83 lines
2.6 KiB
Go
// Copyright (C) NHR@FAU, University Erlangen-Nuremberg.
|
|
// All rights reserved. This file is part of cc-backend.
|
|
// Use of this source code is governed by a MIT-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
// Package main provides the entry point for the ClusterCockpit backend server.
|
|
// This file contains bootstrap logic for initializing the environment,
|
|
// creating default configuration files, and setting up the database.
|
|
package main
|
|
|
|
import (
|
|
"encoding/json"
|
|
"os"
|
|
|
|
"github.com/ClusterCockpit/cc-backend/internal/repository"
|
|
"github.com/ClusterCockpit/cc-backend/pkg/archive"
|
|
cclog "github.com/ClusterCockpit/cc-lib/v2/ccLogger"
|
|
"github.com/ClusterCockpit/cc-lib/v2/util"
|
|
)
|
|
|
|
const configString = `
|
|
{
|
|
"main": {
|
|
"addr": "127.0.0.1:8080",
|
|
"short-running-jobs-duration": 300,
|
|
"resampling": {
|
|
"minimum-points": 600,
|
|
"trigger": 300,
|
|
"resolutions": [
|
|
240,
|
|
60
|
|
]
|
|
},
|
|
"api-allowed-ips": [
|
|
"*"
|
|
],
|
|
"emission-constant": 317
|
|
},
|
|
"cron": {
|
|
"commit-job-worker": "1m",
|
|
"duration-worker": "5m",
|
|
"footprint-worker": "10m"
|
|
},
|
|
"archive": {
|
|
"kind": "file",
|
|
"path": "./var/job-archive"
|
|
},
|
|
"auth": {
|
|
"jwts": {
|
|
"max-age": "2000h",
|
|
"public-key": "kzfYrYy+TzpanWZHJ5qSdMj5uKUWgq74BWhQG6copP0=",
|
|
"private-key": "dtPC/6dWJFKZK7KZ78CvWuynylOmjBFyMsUWArwmodOTN9itjL5POlqdZkcnmpJ0yPm4pRaCrvgFaFAbpyik/Q=="
|
|
}
|
|
}
|
|
}
|
|
`
|
|
|
|
func initEnv() {
|
|
if util.CheckFileExists("var") {
|
|
cclog.Exit("Directory ./var already exists. Cautiously exiting application initialization.")
|
|
}
|
|
|
|
if err := os.WriteFile("config.json", []byte(configString), 0o666); err != nil {
|
|
cclog.Abortf("Could not write default ./config.json with permissions '0o666'. Application initialization failed, exited.\nError: %s\n", err.Error())
|
|
}
|
|
|
|
if err := os.Mkdir("var", 0o777); err != nil {
|
|
cclog.Abortf("Could not create default ./var folder with permissions '0o777'. Application initialization failed, exited.\nError: %s\n", err.Error())
|
|
}
|
|
|
|
err := repository.MigrateDB("./var/job.db")
|
|
if err != nil {
|
|
cclog.Abortf("Could not initialize default SQLite database as './var/job.db'. Application initialization failed, exited.\nError: %s\n", err.Error())
|
|
}
|
|
if err := os.Mkdir("var/job-archive", 0o777); err != nil {
|
|
cclog.Abortf("Could not create default ./var/job-archive folder with permissions '0o777'. Application initialization failed, exited.\nError: %s\n", err.Error())
|
|
}
|
|
archiveCfg := "{\"kind\": \"file\",\"path\": \"./var/job-archive\"}"
|
|
if err := archive.Init(json.RawMessage(archiveCfg)); err != nil {
|
|
cclog.Abortf("Could not initialize job-archive, exited.\nError: %s\n", err.Error())
|
|
}
|
|
}
|