192 lines
7.0 KiB
TypeScript
192 lines
7.0 KiB
TypeScript
/**
|
|
* Lets a deployment configure the server through the `GERBEUR_*` environment
|
|
* variables, which it reads once at import, and holds the fixed limits the
|
|
* backend applies. The deno tasks load `.env` with `--env-file`, so changing a
|
|
* setting needs a restart.
|
|
*
|
|
* @module
|
|
*/
|
|
|
|
/** The port the server listens on (`GERBEUR_PORT`, default 8000). */
|
|
export const PORT: number = Number(Deno.env.get("GERBEUR_PORT")) || 8000;
|
|
/**
|
|
* The `smtps://` URL of the server email-service sends mail through
|
|
* (`GERBEUR_SMTPS_URL`). When it is empty, the welcome and password reset
|
|
* emails are silently skipped.
|
|
*/
|
|
export const SMTPS_URL: string = Deno.env.get("GERBEUR_SMTPS_URL")?.trim() ||
|
|
"";
|
|
/** The `From` address of the welcome and password reset emails. */
|
|
export const FROM_EMAIL: string = Deno.env.get("GERBEUR_FROM_EMAIL")?.trim() ||
|
|
"";
|
|
|
|
const DEFAULT_WELCOME_EMAIL_BODY = `# Welcome to {{site_name}}!
|
|
|
|
Hi **{{username}}**,
|
|
|
|
Your account has been created successfully. Welcome aboard!`;
|
|
|
|
/**
|
|
* The Markdown of the welcome email sent on registration
|
|
* (`GERBEUR_WELCOME_EMAIL_BODY`). The users route replaces `{{site_name}}` and
|
|
* `{{username}}` in it and sends it as both text and HTML.
|
|
*/
|
|
export const WELCOME_EMAIL_BODY: string =
|
|
Deno.env.get("GERBEUR_WELCOME_EMAIL_BODY")?.trim() ||
|
|
DEFAULT_WELCOME_EMAIL_BODY;
|
|
/**
|
|
* The key lib/jwt.ts signs and verifies tokens with (`GERBEUR_JWT_SECRET`).
|
|
* The server refuses to start without it.
|
|
*/
|
|
export const JWT_SECRET: string = Deno.env.get("GERBEUR_JWT_SECRET")?.trim() ||
|
|
"";
|
|
/**
|
|
* The interface the server binds to (`GERBEUR_LISTEN_HOST`). The default,
|
|
* 0.0.0.0, lets Docker forward the port; 127.0.0.1 keeps it to loopback.
|
|
*/
|
|
export const LISTEN_HOST: string = Deno.env.get("GERBEUR_LISTEN_HOST") ||
|
|
"0.0.0.0";
|
|
/**
|
|
* The URL visitors reach the server at (`GERBEUR_PUBLIC_URL`), without a
|
|
* trailing slash. Behind a reverse proxy it must be the outside URL: it is an
|
|
* allowed origin, it tells links to this site's own pages from other links,
|
|
* and it prefixes the image URLs in their previews.
|
|
*/
|
|
export const PUBLIC_URL: string =
|
|
Deno.env.get("GERBEUR_PUBLIC_URL")?.trim().replace(/\/$/, "") ||
|
|
`http://localhost:${PORT}`;
|
|
/**
|
|
* Points password reset links and the Open Graph tags' page URLs at the
|
|
* frontend when it isn't served from {@link PUBLIC_URL}, as with a separate
|
|
* Vite server, and allows it as an origin. It is `GERBEUR_FRONTEND_URL`,
|
|
* without a trailing slash.
|
|
*/
|
|
export const FRONTEND_URL: string =
|
|
Deno.env.get("GERBEUR_FRONTEND_URL")?.trim().replace(/\/$/, "") ||
|
|
PUBLIC_URL;
|
|
/**
|
|
* The SQLite database file (`GERBEUR_DB_PATH`). api/test/setup.ts points it at
|
|
* a throwaway file before anything opens the database.
|
|
*/
|
|
export const DB_PATH: string = Deno.env.get("GERBEUR_DB_PATH") ||
|
|
"api/sql/gerbeur.db";
|
|
|
|
/**
|
|
* The directory uploads are stored under (`GERBEUR_UPLOADS_DIR`). Each kind has
|
|
* its subdirectory below, created by the first upload, and each file is named
|
|
* after the id of what it belongs to.
|
|
*/
|
|
export const UPLOADS_DIR: string = Deno.env.get("GERBEUR_UPLOADS_DIR") ||
|
|
"api/uploads";
|
|
/** Holds the file of each file dump. */
|
|
export const DUMPS_DIR = `${UPLOADS_DIR}/dumps`;
|
|
/** Holds each user's avatar. */
|
|
export const AVATARS_DIR = `${UPLOADS_DIR}/avatars`;
|
|
/** Holds each playlist's cover. */
|
|
export const PLAYLIST_IMAGES_DIR = `${UPLOADS_DIR}/playlist-images`;
|
|
/**
|
|
* Holds the images pasted into chat messages, comments, dump notes and
|
|
* descriptions. The startup tasks purge those nothing links to.
|
|
*/
|
|
export const ATTACHMENTS_DIR = `${UPLOADS_DIR}/attachments`;
|
|
/**
|
|
* Holds the thumbnails a poster uploads (`<id>-custom`) and those the
|
|
* thumbnails route generates from file dumps.
|
|
*/
|
|
export const THUMBNAILS_DIR = `${UPLOADS_DIR}/thumbnails`;
|
|
|
|
/**
|
|
* Caps the size of an image upload, in bytes, for avatars, covers, thumbnails
|
|
* and attachments. lib/upload.ts states it in megabytes in its error.
|
|
*/
|
|
export const MAX_IMAGE_SIZE_BYTES = 5 * 1024 * 1024;
|
|
|
|
/**
|
|
* The MIME type prefixes a file dump may have. dump-service also accepts the
|
|
* exact types of {@link DUMP_ALLOWED_MIME_TYPES}.
|
|
*/
|
|
export const DUMP_ALLOWED_MIME_PREFIXES: string[] = [
|
|
"text/",
|
|
"image/",
|
|
"video/",
|
|
"audio/",
|
|
];
|
|
/** The documents and archives a file dump may be, beyond the prefixes. */
|
|
export const DUMP_ALLOWED_MIME_TYPES: Set<string> = new Set([
|
|
"application/pdf",
|
|
"application/json",
|
|
"application/zip",
|
|
"application/x-zip-compressed",
|
|
"application/vnd.openxmlformats-officedocument.wordprocessingml.document",
|
|
"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
|
|
"application/vnd.openxmlformats-officedocument.presentationml.presentation",
|
|
"application/msword",
|
|
"application/vnd.ms-excel",
|
|
"application/vnd.ms-powerpoint",
|
|
]);
|
|
|
|
/** The page size when a request names none. */
|
|
export const PAGINATION_DEFAULT_LIMIT = 20;
|
|
/** The largest page size a request may ask for. */
|
|
export const PAGINATION_MAX_LIMIT = 100;
|
|
|
|
/** How long an attachment nothing links to is kept before startup purges it. */
|
|
export const ORPHANED_ATTACHMENTS_RETENTION_HOURS = 1;
|
|
/**
|
|
* How long an invite stays usable. invite-service refuses an older one, and
|
|
* the startup tasks purge it.
|
|
*/
|
|
export const UNUSED_INVITES_RETENTION_DAYS = 7;
|
|
|
|
/**
|
|
* The site's name (`GERBEUR_SITE_NAME`). It is filled into index.html, the OG
|
|
* tags, the icons' manifest and the emails.
|
|
*/
|
|
export const OG_SITE_NAME: string = Deno.env.get("GERBEUR_SITE_NAME") ||
|
|
"gerbeur";
|
|
|
|
/**
|
|
* The emoji that serves as the site's logo (`GERBEUR_SITE_EMOJI`). The icons
|
|
* script draws the favicons from it, and index.html carries it to the app's
|
|
* header, so changing it needs a restart but no rebuild.
|
|
*/
|
|
export const SITE_EMOJI: string = Deno.env.get("GERBEUR_SITE_EMOJI") || "🚚";
|
|
|
|
/**
|
|
* How the frontend plays Bandcamp. `"embed"` uses Bandcamp's iframe, which
|
|
* can't autoplay. `"native"` resolves the page's streams through
|
|
* `GET /api/bandcamp/tracks` and plays them in the app's player, which
|
|
* autoplays and queues an album's tracks.
|
|
*/
|
|
export type BandcampPlayer = "embed" | "native";
|
|
/**
|
|
* How the frontend plays Bandcamp (`GERBEUR_BANDCAMP_PLAYER`), passed to it in
|
|
* index.html. Any value but `"native"` means `"embed"`, so a typo falls back to
|
|
* the player that always works.
|
|
*/
|
|
export const BANDCAMP_PLAYER: BandcampPlayer =
|
|
Deno.env.get("GERBEUR_BANDCAMP_PLAYER")?.trim() === "native"
|
|
? "native"
|
|
: "embed";
|
|
|
|
/**
|
|
* The background of the generated Apple touch icon, the manifest's colors, and
|
|
* the accent of previews of this site's own pages. index.html's `theme-color`
|
|
* tags don't follow it.
|
|
*/
|
|
export const THEME_COLOR = "#111827";
|
|
|
|
const rawOrigins = Deno.env.get("GERBEUR_ALLOWED_ORIGINS") ?? "";
|
|
/**
|
|
* The origins that CORS in main.ts and the WebSocket route accept. They are
|
|
* {@link PUBLIC_URL}, {@link FRONTEND_URL} and the comma-separated
|
|
* `GERBEUR_ALLOWED_ORIGINS`.
|
|
*/
|
|
export const ALLOWED_ORIGINS: string[] = Array.from(
|
|
new Set([
|
|
PUBLIC_URL,
|
|
FRONTEND_URL,
|
|
...rawOrigins.split(",").map((o) => o.trim()).filter(Boolean),
|
|
]),
|
|
);
|