aneurinandClaude Sonnet 5
64ba21795b
Adds a mailpit service (axllent/mailpit, ~15 MB, in-memory) to docker-compose.yml — chosen over the unmaintained MailHog for the same footprint. It has no profile, so `docker compose up -d` starts it alongside the API; the app defaults to MAIL_TRANSPORT=smtp -> mailpit:1025 (no auth/TLS) and mail is read at http://localhost:8025. Also change the default MAIL_FROM to no-reply@todo.test: PHPMailer v7 rejects the dotless no-reply@localhost as an invalid address. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
99 lines
3.3 KiB
PHP
99 lines
3.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Support;
|
|
|
|
/**
|
|
* Immutable application configuration, resolved from environment variables with
|
|
* development-friendly defaults.
|
|
*/
|
|
final class Config
|
|
{
|
|
public function __construct(
|
|
public readonly string $databasePath,
|
|
public readonly string $jwtSecret,
|
|
public readonly int $jwtTtl,
|
|
public readonly bool $displayErrors,
|
|
/** Base URL of the frontend, used to build magic links. */
|
|
public readonly string $appUrl,
|
|
public readonly MailConfig $mail,
|
|
) {
|
|
}
|
|
|
|
public static function load(string $basePath): self
|
|
{
|
|
if (is_file($basePath . '/.env')) {
|
|
\Dotenv\Dotenv::createImmutable($basePath)->safeLoad();
|
|
}
|
|
|
|
$storagePath = self::env('STORAGE_PATH', $basePath . '/storage');
|
|
if (!is_dir($storagePath)) {
|
|
mkdir($storagePath, 0775, true);
|
|
}
|
|
|
|
$databasePath = self::env('DATABASE_PATH', $storagePath . '/database.sqlite');
|
|
if (!self::isAbsolutePath($databasePath)) {
|
|
$databasePath = $basePath . '/' . ltrim($databasePath, '/');
|
|
}
|
|
|
|
$jwtSecret = self::env('JWT_SECRET') ?? self::resolveSecret($storagePath . '/secret.key');
|
|
$jwtTtl = (int) (self::env('JWT_TTL') ?? '86400');
|
|
$displayErrors = filter_var(self::env('APP_DEBUG', 'false'), FILTER_VALIDATE_BOOL);
|
|
|
|
$appUrl = rtrim(self::env('APP_URL', 'http://localhost:5173'), '/');
|
|
|
|
$mailLogPath = self::env('MAIL_LOG_PATH', $storagePath . '/mail.log');
|
|
if (!self::isAbsolutePath($mailLogPath)) {
|
|
$mailLogPath = $basePath . '/' . ltrim($mailLogPath, '/');
|
|
}
|
|
|
|
$mail = new MailConfig(
|
|
transport: strtolower(self::env('MAIL_TRANSPORT', 'mail')),
|
|
fromAddress: self::env('MAIL_FROM', 'no-reply@todo.test'),
|
|
fromName: self::env('MAIL_FROM_NAME', 'Todo List'),
|
|
logPath: $mailLogPath,
|
|
smtpHost: self::env('MAIL_SMTP_HOST'),
|
|
smtpPort: (int) (self::env('MAIL_SMTP_PORT') ?? '587'),
|
|
smtpUsername: self::env('MAIL_SMTP_USERNAME'),
|
|
smtpPassword: self::env('MAIL_SMTP_PASSWORD'),
|
|
smtpEncryption: strtolower(self::env('MAIL_SMTP_ENCRYPTION', 'tls')),
|
|
);
|
|
|
|
return new self($databasePath, $jwtSecret, $jwtTtl, $displayErrors, $appUrl, $mail);
|
|
}
|
|
|
|
private static function env(string $key, ?string $default = null): ?string
|
|
{
|
|
$value = $_ENV[$key] ?? $_SERVER[$key] ?? getenv($key);
|
|
|
|
if ($value === false || $value === null || $value === '') {
|
|
return $default;
|
|
}
|
|
|
|
return (string) $value;
|
|
}
|
|
|
|
private static function isAbsolutePath(string $path): bool
|
|
{
|
|
return str_starts_with($path, '/') || preg_match('#^[A-Za-z]:[\\\\/]#', $path) === 1;
|
|
}
|
|
|
|
/**
|
|
* Return the persisted signing secret, generating and storing one on first run
|
|
* so local development works with zero configuration.
|
|
*/
|
|
private static function resolveSecret(string $path): string
|
|
{
|
|
if (is_file($path)) {
|
|
return trim((string) file_get_contents($path));
|
|
}
|
|
|
|
$secret = bin2hex(random_bytes(32));
|
|
file_put_contents($path, $secret);
|
|
@chmod($path, 0600);
|
|
|
|
return $secret;
|
|
}
|
|
}
|