mirror of
https://github.com/Such-Software/wowcheckout.git
synced 2026-10-17 05:51:45 +02:00
jwinterm
00e04c74bb
- Use secrets.compare_digest for timing-safe admin key comparison - Strip whitespace from ADMIN_API_KEY env var - Add PostgreSQL advisory locks per-invoice in reconciler to prevent duplicate processing during deployments - Add wallet-RPC retry with backoff (3 attempts: 0.5s, 1s, 2s) - Raise MAX_SUBADDRESS_INDEX from 100 to 300 - Tune DB connection pool (pool_size=20, max_overflow=10, recycle=3600) - Add 1-hour admin session timeout - Regenerate UI lockfile
50 lines
1.9 KiB
Python
50 lines
1.9 KiB
Python
import os
|
|
|
|
|
|
def _get_bool_env(name: str, default: bool = False) -> bool:
|
|
value = os.getenv(name)
|
|
if value is None or value == "":
|
|
return default
|
|
return value.strip().lower() in {"1", "true", "yes", "on"}
|
|
|
|
|
|
def _get_env(name: str, default: str | None = None) -> str:
|
|
value = os.getenv(name, default)
|
|
if value is None or value == "":
|
|
raise RuntimeError(f"Missing required environment variable: {name}")
|
|
return value
|
|
|
|
|
|
DATABASE_URL = _get_env("DATABASE_URL")
|
|
|
|
API_KEYS = [
|
|
key.strip()
|
|
for key in os.getenv("API_KEYS", "").split(",")
|
|
if key.strip()
|
|
]
|
|
|
|
API_KEY_ENCRYPTION_KEY = _get_env("API_KEY_ENCRYPTION_KEY")
|
|
INVOICE_RECONCILE_INTERVAL_SECONDS = int(os.getenv("INVOICE_RECONCILE_INTERVAL_SECONDS", "30"))
|
|
INVOICE_DEFAULT_EXPIRY_HOURS = int(os.getenv("INVOICE_DEFAULT_EXPIRY_HOURS", "1"))
|
|
LATE_PAYMENT_LOOKBACK_HOURS = int(os.getenv("LATE_PAYMENT_LOOKBACK_HOURS", "48"))
|
|
DONATION_EXPIRY_MINUTES = int(os.getenv("DONATION_EXPIRY_MINUTES", "30"))
|
|
DONATION_ACTIVE_INVOICE_LIMIT = int(os.getenv("DONATION_ACTIVE_INVOICE_LIMIT", "25"))
|
|
RATE_PROVIDER = os.getenv("RATE_PROVIDER", "kraken")
|
|
DONATIONS_ENABLED = _get_bool_env("DONATIONS_ENABLED", False)
|
|
OPEN_REGISTRATION = _get_bool_env("OPEN_REGISTRATION", True)
|
|
|
|
MONERO_WALLET_RPC_URLS = [
|
|
url.strip()
|
|
for url in os.getenv("MONERO_WALLET_RPC_URLS", "").split(",")
|
|
if url.strip()
|
|
]
|
|
MONERO_WALLET_RPC_USER = os.getenv("MONERO_WALLET_RPC_USER", "")
|
|
MONERO_WALLET_RPC_PASSWORD = os.getenv("MONERO_WALLET_RPC_PASSWORD", "")
|
|
MONERO_WALLET_RPC_WALLET_PASSWORD = os.getenv("MONERO_WALLET_RPC_WALLET_PASSWORD", "")
|
|
MONERO_DAEMON_URL = os.getenv("MONERO_DAEMON_URL")
|
|
MONERO_WALLET_RPC_WALLET_DIR = os.getenv("MONERO_WALLET_RPC_WALLET_DIR", "")
|
|
FOUNDER_PAYMENT_ADDRESS = os.getenv("FOUNDER_PAYMENT_ADDRESS", "")
|
|
FOUNDER_VIEW_KEY = os.getenv("FOUNDER_VIEW_KEY", "")
|
|
QR_STORAGE_DIR = os.getenv("QR_STORAGE_DIR", "/qr")
|
|
ADMIN_API_KEY = os.getenv("ADMIN_API_KEY", "").strip()
|