Family Home Lab: portal, dsh (chat+plugins), transcriber, music/media tools, home dash

portal/config.py

@@ -0,0 +1,79 @@
+"""Application configuration.
+
+All values come from environment variables (populated by docker-compose or a
+local .env). No secrets are committed to the repo.
+"""
+from __future__ import annotations
+
+import os
+from pathlib import Path
+
+BASE_DIR = Path(__file__).resolve().parent
+
+
+def _bool(name: str, default: bool = False) -> bool:
+    raw = os.getenv(name)
+    if raw is None:
+        return default
+    return raw.strip().lower() in {"1", "true", "yes", "on"}
+
+
+class Settings:
+    # --- General ---
+    APP_NAME: str = os.getenv("APP_NAME", "Family Home Lab")
+    DEBUG: bool = _bool("DEBUG", False)
+    SECRET_KEY: str = os.getenv(
+        "SESSION_SECRET", "change-me-in-prod-use-openssl-rand-hex"
+    )
+    SESSION_COOKIE: str = os.getenv("SESSION_COOKIE", "fhl_session")
+    # How long a session cookie stays valid (seconds). 7 days.
+    SESSION_TTL: int = int(os.getenv("SESSION_TTL", str(7 * 24 * 3600)))
+
+    # --- First-run admin bootstrap (breed: env only, never committed) ---
+    ADMIN_USERNAME: str = os.getenv("ADMIN_USERNAME", "sam")
+    ADMIN_PASSWORD: str = os.getenv("ADMIN_PASSWORD", "")
+    ADMIN_FULLNAME: str = os.getenv("ADMIN_FULLNAME", "Sam")
+
+    # --- Database (pgvector pg16) ---
+    DATABASE_URL: str = os.getenv(
+        "DATABASE_URL", "postgresql+asyncpg://fhl:fhl@postgres:5432/fhl"
+    )
+
+    # --- Task queue (Celery + RabbitMQ broker, Redis backend) ---
+    # Final decision (plan.md §8 #1): own RabbitMQ container in our stack.
+    REDIS_URL: str = os.getenv("REDIS_URL", "redis://redis:6379/0")
+    CELERY_BROKER_URL: str = os.getenv(
+        "CELERY_BROKER_URL", "amqp://guest:guest@rabbitmq:5672//"
+    )
+
+    # --- Object storage (Garage S3) ---
+    S3_ENDPOINT_URL: str = os.getenv("S3_ENDPOINT_URL", "http://garage:3900")
+    S3_REGION: str = os.getenv("S3_REGION", "garage")
+    S3_ACCESS_KEY: str = os.getenv("S3_ACCESS_KEY", "")
+    S3_SECRET_KEY: str = os.getenv("S3_SECRET_KEY", "")
+
+    # --- Tool catalogue endpoint for opening tools ---
+    SECTION_COLORS: dict[str, str] = {
+        "chat": "#62aef0",      # accent-sky
+        "image": "#d6b6f6",     # accent-purple
+        "video": "#ff64c8",     # accent-pink
+        "audio": "#dd5b00",     # accent-orange
+        "docs": "#2a9d99",      # accent-teal
+        "ai": "#62aef0",        # accent-sky (fallback for ai stack)
+        "media": "#5fbf7a",     # media & entertainment
+        "data": "#c07af0",      # data & links
+        "storage": "#e0a63c",   # storage & backups
+        "home": "#41b6c6",      # home & iot
+        "home-mgmt": "#3fbfa8",  # home management
+        "dev": "#e07b39",        # development
+        "portfolio": "#b089d6",  # portfolio / resume
+        "infra": "#9aa4ad",     # infrastructure
+        "network": "#7db2f0",   # home network
+    }
+
+    @property
+    def is_secure(self) -> bool:
+        return not self.DEBUG
+
+
+settings = Settings()