bwilliams
eba6af680f
Without server.csrf.tokens.key, each server process signs CSRF tokens with a random key of its own, so tokens are lost on a restart and rejected by other instances. "job-search config generate-csrf-key" stores a new random 32-byte hex key in the configuration file, without printing it. --print only prints a key, for JOBSEARCH_SERVER_CSRF_TOKENS_KEY or another instance. An existing key is only replaced with --force, as that invalidates every issued token, and no key is stored while JOBSEARCH_SERVER_CSRF_TOKENS_KEY is set, as it would override the file.
115 lines
3.0 KiB
Go
115 lines
3.0 KiB
Go
package config
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"log/slog"
|
|
"os"
|
|
"strings"
|
|
|
|
"github.com/joho/godotenv"
|
|
"github.com/spf13/viper"
|
|
)
|
|
|
|
// envKeyReplacer turns a dotted key into its environment variable's suffix
|
|
// (logging.level to LOGGING_LEVEL, once upper-cased).
|
|
var envKeyReplacer = strings.NewReplacer(".", "_")
|
|
|
|
// EnvVarName returns the environment variable that sets key, e.g.
|
|
// JOBSEARCH_LOGGING_LEVEL for logging.level.
|
|
func EnvVarName(key string) string {
|
|
return EnvPrefix + "_" + strings.ToUpper(envKeyReplacer.Replace(key))
|
|
}
|
|
|
|
// isExplicitlySet reports whether key's value in Viper was set by the config
|
|
// file or by its environment variable, rather than coming from its default.
|
|
// As Viper does, it ignores an empty environment variable. Values set with
|
|
// viper.Set (e.g. by StoreValue) are not counted.
|
|
func isExplicitlySet(key string) bool {
|
|
if viper.InConfig(key) {
|
|
return true
|
|
}
|
|
value, ok := os.LookupEnv(EnvVarName(key))
|
|
return ok && value != ""
|
|
}
|
|
|
|
// loadEnv loads environment variables from a .env file in the working
|
|
// directory.
|
|
func loadEnv() error {
|
|
if err := godotenv.Load(); err != nil {
|
|
return fmt.Errorf("invalid .env file: %w", err)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// loadConfig sets up Viper with the defaults, configFile (or config.* found in
|
|
// EtcConfigPath or the working directory) and JOBSEARCH_* environment
|
|
// variables. A missing config file is only a warning.
|
|
func loadConfig(configFile string) error {
|
|
if configFile != "" {
|
|
// Use config file from the flag.
|
|
viper.SetConfigFile(configFile)
|
|
} else {
|
|
// Search config in /etc or local directory.
|
|
viper.AddConfigPath(EtcConfigPath)
|
|
viper.AddConfigPath(".")
|
|
|
|
viper.SetConfigName("config")
|
|
}
|
|
|
|
// Load default configuration
|
|
LoadDefaultConfig()
|
|
|
|
viper.SetEnvPrefix(EnvPrefix)
|
|
viper.SetEnvKeyReplacer(envKeyReplacer)
|
|
viper.AutomaticEnv() // read in environment variables that match
|
|
|
|
err := viper.ReadInConfig()
|
|
var notFound viper.ConfigFileNotFoundError
|
|
switch {
|
|
case errors.As(err, ¬Found):
|
|
// No config file was found in any search path.
|
|
slog.Warn("no config file found; using defaults")
|
|
case err != nil:
|
|
// A config file was found but couldn't be read or parsed.
|
|
return err
|
|
default:
|
|
slog.Info("using config file", "file", viper.ConfigFileUsed())
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// Init loads the .env file and the configuration (see loadConfig) into conf.
|
|
// A debug or error log level already set in conf, from --debug or --quiet,
|
|
// is kept over the loaded one.
|
|
func Init(configFile string, conf *JobSearchConfig) error {
|
|
if err := loadEnv(); err != nil {
|
|
return err
|
|
}
|
|
if conf.Logging.LogLevel() <= slog.LevelDebug {
|
|
printEnv()
|
|
}
|
|
|
|
if err := loadConfig(configFile); err != nil {
|
|
return err
|
|
}
|
|
|
|
// Load configuration from Viper, ensure -debug and -quiet are retained
|
|
oldLogLevel := conf.Logging.LogLevel()
|
|
LoadFromViper(conf)
|
|
if oldLogLevel == slog.LevelDebug {
|
|
conf.Logging.Level = "debug"
|
|
}
|
|
if oldLogLevel == slog.LevelError {
|
|
conf.Logging.Level = "error"
|
|
}
|
|
|
|
if conf.Logging.LogLevel() <= slog.LevelDebug {
|
|
printLoadedConfig()
|
|
printConfig(*conf)
|
|
}
|
|
|
|
return nil
|
|
}
|