Initial commit on Forgejo

Fresh repository history for elektrine/tarakan hosted at
https://git.elektrine.com/elektrine/tarakan.

lib/tarakan_web/endpoint.ex

@@ -0,0 +1,96 @@
+defmodule TarakanWeb.Endpoint do
+  use Phoenix.Endpoint, otp_app: :tarakan
+
+  # The session will be stored in the cookie and signed,
+  # this means its contents can be read but not tampered with.
+  # Set :encryption_salt if you would also like to encrypt it.
+  @session_options [
+    store: :cookie,
+    key: "_tarakan_key",
+    signing_salt: "z2pFa4vB",
+    encryption_salt: "PS6crKxQ",
+    same_site: "Lax",
+    secure: Application.compile_env(:tarakan, :secure_cookies, true)
+  ]
+
+  socket "/live", Phoenix.LiveView.Socket,
+    websocket: [connect_info: [:peer_data, :x_headers, session: @session_options]],
+    longpoll: [connect_info: [:peer_data, :x_headers, session: @session_options]]
+
+  # Force SSL in prod with the X-Forwarded-Proto scheme rewrite gated on
+  # trusted proxies. Phoenix would insert Plug.SSL ahead of every plug below
+  # when :force_ssl is configured, leaving its rewrite_on honoring the header
+  # from any peer, so prod sets :trusted_ssl instead and both plugs run here,
+  # first and in order.
+  if trusted_ssl = Application.compile_env(:tarakan, [__MODULE__, :trusted_ssl]) do
+    plug TarakanWeb.Plugs.ForwardedProto
+    plug Plug.SSL, trusted_ssl
+  end
+
+  # Serve at "/" the static files from "priv/static" directory.
+  #
+  # When code reloading is disabled (e.g., in production),
+  # the `gzip` option is enabled to serve compressed
+  # static files generated by running `phx.digest`.
+  plug Plug.Static,
+    at: "/",
+    from: :tarakan,
+    gzip: not code_reloading?,
+    only: TarakanWeb.static_paths(),
+    raise_on_missing_only: code_reloading?
+
+  # Code reloading can be explicitly enabled under the
+  # :code_reloader configuration of your endpoint.
+  if code_reloading? do
+    socket "/phoenix/live_reload/socket", Phoenix.LiveReloader.Socket
+    plug Phoenix.LiveReloader
+    plug Phoenix.CodeReloader
+    plug Phoenix.Ecto.CheckRepoStatus, otp_app: :tarakan
+  end
+
+  plug Phoenix.LiveDashboard.RequestLogger,
+    param_key: "request_logger",
+    cookie_key: "request_logger"
+
+  plug Plug.RequestId
+  plug Plug.Telemetry, event_prefix: [:phoenix, :endpoint]
+
+  # Rewrite remote_ip from X-Forwarded-For only when the peer is a configured
+  # trusted proxy (see :trusted_proxies). Must run before rate limiters / git.
+  plug TarakanWeb.Plugs.ClientIp
+
+  # Git smart HTTP must run before Plug.Parsers: RPC bodies stream to a git
+  # subprocess and would otherwise be buffered and rejected at the parser's
+  # size cap. Non-git requests pass straight through.
+  plug TarakanWeb.GitHTTP
+
+  plug Plug.Parsers,
+    parsers: [:urlencoded, :multipart, :json],
+    pass: ["*/*"],
+    length: 2_500_000,
+    body_reader: {TarakanWeb.Endpoint, :read_body, []},
+    json_decoder: Phoenix.json_library()
+
+  # Plug.Parsers body_reader wrapper: caches the raw request body in
+  # conn.assigns[:raw_body] so the Stripe webhook controller can verify the
+  # Stripe-Signature HMAC against the exact payload bytes.
+  @doc false
+  def read_body(conn, opts) do
+    case Plug.Conn.read_body(conn, opts) do
+      {:ok, body, conn} ->
+        {:ok, body, Plug.Conn.assign(conn, :raw_body, body)}
+
+      {:more, chunk, conn} ->
+        {:more, chunk,
+         Plug.Conn.assign(conn, :raw_body, (conn.assigns[:raw_body] || "") <> chunk)}
+
+      {:error, reason} ->
+        {:error, reason}
+    end
+  end
+
+  plug Plug.MethodOverride
+  plug Plug.Head
+  plug Plug.Session, @session_options
+  plug TarakanWeb.Router
+end