retoor
b8d88f5807
Implement a full-featured admin backend at `/manage/` with login authentication using signed cookies and constant-time credential verification. The panel includes a dashboard showing total/active users, storage usage, monthly revenue, and pending invoices, plus user management, payment overview, and pricing configuration pages. New environment variables `ADMIN_USERNAME`, `ADMIN_PASSWORD`, `ADMIN_SESSION_SECRET`, and `ADMIN_SESSION_EXPIRE_HOURS` control access. The admin router is registered in main.py and all new templates, auth module, and router files are added.
35 lines
758 B
Bash
35 lines
758 B
Bash
POSTGRES_USER=mywebdav_user
|
|
POSTGRES_PASSWORD=mywebdav_password
|
|
POSTGRES_DB=mywebdav_db
|
|
|
|
DATABASE_URL=postgres://mywebdav_user:mywebdav_password@db:5432/mywebdav_db
|
|
REDIS_URL=redis://redis:6379/0
|
|
|
|
SECRET_KEY=change-this-to-a-random-secret-key-in-production
|
|
ALGORITHM=HS256
|
|
ACCESS_TOKEN_EXPIRE_MINUTES=30
|
|
REFRESH_TOKEN_EXPIRE_DAYS=7
|
|
|
|
DOMAIN_NAME=localhost
|
|
CERTBOT_EMAIL=admin@example.com
|
|
|
|
STORAGE_PATH=/app/data
|
|
|
|
S3_ACCESS_KEY_ID=
|
|
S3_SECRET_ACCESS_KEY=
|
|
S3_ENDPOINT_URL=
|
|
S3_BUCKET_NAME=mywebdav-storage
|
|
|
|
SMTP_SERVER=
|
|
SMTP_PORT=587
|
|
SMTP_USERNAME=
|
|
SMTP_PASSWORD=
|
|
SMTP_FROM_EMAIL=no-reply@example.com
|
|
|
|
TOTP_ISSUER=MyWebdav
|
|
|
|
ADMIN_USERNAME=admin
|
|
ADMIN_PASSWORD=change-this-password
|
|
ADMIN_SESSION_SECRET=change-this-to-a-random-secret
|
|
ADMIN_SESSION_EXPIRE_HOURS=24
|