a.tolmachev
83 lines
2.6 KiB
Rust
83 lines
2.6 KiB
Rust
mod app;
|
|
mod auth;
|
|
mod error;
|
|
mod routes;
|
|
mod secret_crypto;
|
|
mod service;
|
|
mod state;
|
|
mod storage;
|
|
|
|
use std::{env, net::SocketAddr, path::PathBuf};
|
|
|
|
use crank_registry::PostgresRegistry;
|
|
use tokio::net::TcpListener;
|
|
use tracing::info;
|
|
|
|
use crate::{
|
|
app::build_app,
|
|
auth::{AuthSettings, BootstrapAdminConfig},
|
|
secret_crypto::SecretCrypto,
|
|
service::AdminService,
|
|
state::AppState,
|
|
};
|
|
|
|
#[tokio::main]
|
|
async fn main() -> Result<(), Box<dyn std::error::Error>> {
|
|
tracing_subscriber::fmt()
|
|
.with_env_filter(
|
|
env::var("CRANK_LOG_LEVEL").unwrap_or_else(|_| "admin_api=info,tower_http=info".into()),
|
|
)
|
|
.init();
|
|
|
|
let database_url = env::var("CRANK_DATABASE_URL")?;
|
|
let storage_root = PathBuf::from(
|
|
env::var("CRANK_STORAGE_ROOT").unwrap_or_else(|_| "/var/lib/crank/storage".into()),
|
|
);
|
|
let bind_addr = env::var("CRANK_ADMIN_BIND").unwrap_or_else(|_| "0.0.0.0:3001".into());
|
|
let public_base_url =
|
|
env::var("CRANK_PUBLIC_BASE_URL").unwrap_or_else(|_| "http://localhost:3000".into());
|
|
let socket_addr: SocketAddr = bind_addr.parse()?;
|
|
let registry = PostgresRegistry::connect(&database_url).await?;
|
|
let auth_settings = AuthSettings {
|
|
session_secret: env::var("CRANK_SESSION_SECRET")?,
|
|
password_pepper: env::var("CRANK_PASSWORD_PEPPER")?,
|
|
session_ttl_hours: env::var("CRANK_SESSION_TTL_HOURS")
|
|
.ok()
|
|
.and_then(|value| value.parse::<i64>().ok())
|
|
.unwrap_or(24),
|
|
cookie_secure: public_base_url.starts_with("https://"),
|
|
bootstrap_admin: BootstrapAdminConfig {
|
|
email: env::var("CRANK_BOOTSTRAP_ADMIN_EMAIL")?,
|
|
password: env::var("CRANK_BOOTSTRAP_ADMIN_PASSWORD")?,
|
|
display_name: env::var("CRANK_BOOTSTRAP_ADMIN_DISPLAY_NAME")
|
|
.unwrap_or_else(|_| "Crank Owner".into()),
|
|
},
|
|
};
|
|
let secret_crypto = SecretCrypto::new(&env::var("CRANK_MASTER_KEY")?)?;
|
|
let service = AdminService::new(registry, storage_root, auth_settings, secret_crypto);
|
|
service.bootstrap_admin_user().await?;
|
|
if env_flag("CRANK_DEMO_SEED") {
|
|
service.seed_demo_assets().await?;
|
|
}
|
|
let state = AppState { service };
|
|
let app = build_app(state);
|
|
let listener = TcpListener::bind(socket_addr).await?;
|
|
|
|
info!("admin-api listening on {}", socket_addr);
|
|
|
|
axum::serve(listener, app).await?;
|
|
|
|
Ok(())
|
|
}
|
|
|
|
fn env_flag(name: &str) -> bool {
|
|
matches!(
|
|
env::var(name)
|
|
.ok()
|
|
.as_deref()
|
|
.map(str::to_ascii_lowercase)
|
|
.as_deref(),
|
|
Some("1" | "true" | "yes" | "on")
|
|
)
|
|
}
|