forked from wrenn/wrenn
pptx704
9d68eb5f00
Introduce internal/email package with SMTP sending, embedded HTML/text templates, and multipart MIME assembly. Emails use a generic EmailData struct (recipient name, message, optional button, optional closing) so new email types can be added without code changes. Wired into signup (welcome email), team creation, and team member addition. No-op mailer when SMTP_HOST is not configured.
97 lines
2.8 KiB
Go
97 lines
2.8 KiB
Go
package config
|
|
|
|
import (
|
|
"encoding/hex"
|
|
"os"
|
|
"strconv"
|
|
|
|
"github.com/joho/godotenv"
|
|
)
|
|
|
|
// Config holds the control plane configuration.
|
|
type Config struct {
|
|
DatabaseURL string
|
|
RedisURL string
|
|
ListenAddr string
|
|
JWTSecret string
|
|
|
|
// mTLS — CP→Agent channel. Both must be set to enable mTLS; omitting either
|
|
// disables cert issuance and leaves agent connections on plain HTTP (dev mode).
|
|
CACert string // WRENN_CA_CERT — PEM-encoded internal CA certificate
|
|
CAKey string // WRENN_CA_KEY — PEM-encoded internal CA private key
|
|
|
|
OAuthGitHubClientID string
|
|
OAuthGitHubClientSecret string
|
|
OAuthRedirectURL string
|
|
CPPublicURL string
|
|
|
|
// Channels — encryption for channel secrets (AES-256-GCM).
|
|
EncryptionKeyHex string // WRENN_ENCRYPTION_KEY raw hex string (for validation)
|
|
EncryptionKey [32]byte // parsed 32-byte key
|
|
|
|
// SMTP — transactional email. All fields optional; omitting SMTPHost disables email.
|
|
SMTPHost string // SMTP_HOST
|
|
SMTPPort int // SMTP_PORT (default 587)
|
|
SMTPUsername string // SMTP_USERNAME
|
|
SMTPPassword string // SMTP_PASSWORD
|
|
SMTPFromEmail string // SMTP_FROM_EMAIL
|
|
}
|
|
|
|
// Load reads configuration from a .env file (if present) and environment variables.
|
|
// Real environment variables take precedence over .env values.
|
|
func Load() Config {
|
|
// Best-effort load — missing .env file is fine.
|
|
_ = godotenv.Load()
|
|
|
|
cfg := Config{
|
|
DatabaseURL: envOrDefault("DATABASE_URL", "postgres://wrenn:wrenn@localhost:5432/wrenn?sslmode=disable"),
|
|
RedisURL: envOrDefault("REDIS_URL", "redis://localhost:6379/0"),
|
|
ListenAddr: envOrDefault("WRENN_CP_LISTEN_ADDR", ":8080"),
|
|
JWTSecret: os.Getenv("JWT_SECRET"),
|
|
|
|
CACert: os.Getenv("WRENN_CA_CERT"),
|
|
CAKey: os.Getenv("WRENN_CA_KEY"),
|
|
|
|
OAuthGitHubClientID: os.Getenv("OAUTH_GITHUB_CLIENT_ID"),
|
|
OAuthGitHubClientSecret: os.Getenv("OAUTH_GITHUB_CLIENT_SECRET"),
|
|
OAuthRedirectURL: envOrDefault("OAUTH_REDIRECT_URL", "https://app.wrenn.dev"),
|
|
CPPublicURL: os.Getenv("CP_PUBLIC_URL"),
|
|
|
|
EncryptionKeyHex: os.Getenv("WRENN_ENCRYPTION_KEY"),
|
|
|
|
SMTPHost: os.Getenv("SMTP_HOST"),
|
|
SMTPPort: envOrDefaultInt("SMTP_PORT", 587),
|
|
SMTPUsername: os.Getenv("SMTP_USERNAME"),
|
|
SMTPPassword: os.Getenv("SMTP_PASSWORD"),
|
|
SMTPFromEmail: envOrDefault("SMTP_FROM_EMAIL", "noreply@wrenn.dev"),
|
|
}
|
|
|
|
if cfg.EncryptionKeyHex != "" {
|
|
b, err := hex.DecodeString(cfg.EncryptionKeyHex)
|
|
if err == nil && len(b) == 32 {
|
|
copy(cfg.EncryptionKey[:], b)
|
|
}
|
|
}
|
|
|
|
return cfg
|
|
}
|
|
|
|
func envOrDefault(key, def string) string {
|
|
if v := os.Getenv(key); v != "" {
|
|
return v
|
|
}
|
|
return def
|
|
}
|
|
|
|
func envOrDefaultInt(key string, def int) int {
|
|
v := os.Getenv(key)
|
|
if v == "" {
|
|
return def
|
|
}
|
|
n, err := strconv.Atoi(v)
|
|
if err != nil {
|
|
return def
|
|
}
|
|
return n
|
|
}
|