gerbeur/api/config.ts

/**
 * Reads the server's settings from the `GERBEUR_*` environment variables, once
 * at import, and holds the fixed limits the backend applies. The deno tasks
 * load `.env` with `--env-file`, so changing a setting needs a restart.
 *
 * @module
 */

/** The port the server listens on (`GERBEUR_PORT`, default 8000). */
export const PORT: number = Number(Deno.env.get("GERBEUR_PORT")) || 8000;
/**
 * The `smtps://` URL of the server email-service sends mail through
 * (`GERBEUR_SMTPS_URL`). When it is empty, the welcome and password reset
 * emails are silently skipped.
 */
export const SMTPS_URL: string = Deno.env.get("GERBEUR_SMTPS_URL")?.trim() ||
  "";
/** The `From` address of the welcome and password reset emails. */
export const FROM_EMAIL: string = Deno.env.get("GERBEUR_FROM_EMAIL")?.trim() ||
  "";

const DEFAULT_WELCOME_EMAIL_BODY = `# Welcome to {{site_name}}!

Hi **{{username}}**,

Your account has been created successfully. Welcome aboard!`;

/**
 * The Markdown of the welcome email sent on registration
 * (`GERBEUR_WELCOME_EMAIL_BODY`). The users route replaces `{{site_name}}` and
 * `{{username}}` in it and sends it as both text and HTML.
 */
export const WELCOME_EMAIL_BODY: string =
  Deno.env.get("GERBEUR_WELCOME_EMAIL_BODY")?.trim() ||
  DEFAULT_WELCOME_EMAIL_BODY;
/**
 * The key lib/jwt.ts signs and verifies tokens with (`GERBEUR_JWT_SECRET`).
 * The server refuses to start without it.
 */
export const JWT_SECRET: string = Deno.env.get("GERBEUR_JWT_SECRET")?.trim() ||
  "";
/**
 * The interface the server binds to (`GERBEUR_LISTEN_HOST`). The default,
 * 0.0.0.0, lets Docker forward the port; 127.0.0.1 keeps it to loopback.
 */
export const LISTEN_HOST: string = Deno.env.get("GERBEUR_LISTEN_HOST") ||
  "0.0.0.0";
/**
 * The URL visitors reach the server at (`GERBEUR_PUBLIC_URL`), without a
 * trailing slash. Behind a reverse proxy it must be the outside URL: it is an
 * allowed origin, it tells links to this site's own pages from other links,
 * and it prefixes the image URLs in their previews.
 */
export const PUBLIC_URL: string =
  Deno.env.get("GERBEUR_PUBLIC_URL")?.trim().replace(/\/$/, "") ||
  `http://localhost:${PORT}`;
/**
 * The URL the frontend is served from (`GERBEUR_FRONTEND_URL`), when it isn't
 * {@link PUBLIC_URL}, as with a separate Vite server, without a trailing slash.
 * It is an allowed origin, and password reset links and the Open Graph tags'
 * page URLs point to it.
 */
export const FRONTEND_URL: string =
  Deno.env.get("GERBEUR_FRONTEND_URL")?.trim().replace(/\/$/, "") ||
  PUBLIC_URL;
/**
 * The SQLite database file (`GERBEUR_DB_PATH`). api/test/setup.ts points it at
 * a throwaway file before anything opens the database.
 */
export const DB_PATH: string = Deno.env.get("GERBEUR_DB_PATH") ||
  "api/sql/gerbeur.db";

/**
 * The directory uploads are stored under (`GERBEUR_UPLOADS_DIR`). Each kind has
 * its subdirectory below, created by the first upload, and each file is named
 * after the id of what it belongs to.
 */
export const UPLOADS_DIR: string = Deno.env.get("GERBEUR_UPLOADS_DIR") ||
  "api/uploads";
/** Holds the file of each file dump. */
export const DUMPS_DIR = `${UPLOADS_DIR}/dumps`;
/** Holds each user's avatar. */
export const AVATARS_DIR = `${UPLOADS_DIR}/avatars`;
/** Holds each playlist's cover. */
export const PLAYLIST_IMAGES_DIR = `${UPLOADS_DIR}/playlist-images`;
/**
 * Holds the images pasted into chat messages, comments, dump notes and
 * descriptions. The startup tasks purge those nothing links to.
 */
export const ATTACHMENTS_DIR = `${UPLOADS_DIR}/attachments`;
/**
 * Holds the thumbnails a poster uploads (`<id>-custom`) and those the
 * thumbnails route generates from file dumps.
 */
export const THUMBNAILS_DIR = `${UPLOADS_DIR}/thumbnails`;

/**
 * The largest image upload accepted, in bytes, for avatars, covers, thumbnails
 * and attachments. lib/upload.ts states it in megabytes in its error.
 */
export const MAX_IMAGE_SIZE_BYTES = 5 * 1024 * 1024;

/**
 * The MIME type prefixes a file dump may have. dump-service also accepts the
 * exact types of {@link DUMP_ALLOWED_MIME_TYPES}.
 */
export const DUMP_ALLOWED_MIME_PREFIXES: string[] = [
  "text/",
  "image/",
  "video/",
  "audio/",
];
/** The documents and archives a file dump may be, beyond the prefixes. */
export const DUMP_ALLOWED_MIME_TYPES: Set<string> = new Set([
  "application/pdf",
  "application/json",
  "application/zip",
  "application/x-zip-compressed",
  "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
  "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
  "application/vnd.openxmlformats-officedocument.presentationml.presentation",
  "application/msword",
  "application/vnd.ms-excel",
  "application/vnd.ms-powerpoint",
]);

/** The page size when a request names none. */
export const PAGINATION_DEFAULT_LIMIT = 20;
/** The largest page size a request may ask for. */
export const PAGINATION_MAX_LIMIT = 100;

/** How long an attachment nothing links to is kept before startup purges it. */
export const ORPHANED_ATTACHMENTS_RETENTION_HOURS = 1;
/**
 * How long an invite stays usable. invite-service refuses an older one, and
 * the startup tasks purge it.
 */
export const UNUSED_INVITES_RETENTION_DAYS = 7;

/**
 * The site's name (`GERBEUR_SITE_NAME`). It is filled into index.html, the OG
 * tags, the icons' manifest and the emails.
 */
export const OG_SITE_NAME: string = Deno.env.get("GERBEUR_SITE_NAME") ||
  "gerbeur";

/**
 * The emoji that serves as the site's logo (`GERBEUR_SITE_EMOJI`). The icons
 * script draws the favicons from it, and index.html carries it to the app's
 * header, so changing it needs a restart but no rebuild.
 */
export const SITE_EMOJI: string = Deno.env.get("GERBEUR_SITE_EMOJI") || "🚚";

/**
 * How the frontend plays Bandcamp. `"embed"` uses Bandcamp's iframe, which
 * can't autoplay. `"native"` resolves the page's streams through
 * `GET /api/bandcamp/tracks` and plays them in the app's player, which
 * autoplays and queues an album's tracks.
 */
export type BandcampPlayer = "embed" | "native";
/**
 * How the frontend plays Bandcamp (`GERBEUR_BANDCAMP_PLAYER`), passed to it in
 * index.html. Any value but `"native"` means `"embed"`, so a typo falls back to
 * the player that always works.
 */
export const BANDCAMP_PLAYER: BandcampPlayer =
  Deno.env.get("GERBEUR_BANDCAMP_PLAYER")?.trim() === "native"
    ? "native"
    : "embed";

/**
 * The background of the generated Apple touch icon, the manifest's colors, and
 * the accent of previews of this site's own pages. index.html's `theme-color`
 * tags don't follow it.
 */
export const THEME_COLOR = "#111827";

const rawOrigins = Deno.env.get("GERBEUR_ALLOWED_ORIGINS") ?? "";
/**
 * The origins that CORS in main.ts and the WebSocket route accept. They are
 * {@link PUBLIC_URL}, {@link FRONTEND_URL} and the comma-separated
 * `GERBEUR_ALLOWED_ORIGINS`.
 */
export const ALLOWED_ORIGINS: string[] = Array.from(
  new Set([
    PUBLIC_URL,
    FRONTEND_URL,
    ...rawOrigins.split(",").map((o) => o.trim()).filter(Boolean),
  ]),
);