Maxfield Luke
af6077b9c3
Fresh repository history for elektrine/tarakan hosted at https://git.elektrine.com/elektrine/tarakan.
96 lines
3.4 KiB
Elixir
96 lines
3.4 KiB
Elixir
defmodule TarakanWeb.Endpoint do
|
|
use Phoenix.Endpoint, otp_app: :tarakan
|
|
|
|
# The session will be stored in the cookie and signed,
|
|
# this means its contents can be read but not tampered with.
|
|
# Set :encryption_salt if you would also like to encrypt it.
|
|
@session_options [
|
|
store: :cookie,
|
|
key: "_tarakan_key",
|
|
signing_salt: "z2pFa4vB",
|
|
encryption_salt: "PS6crKxQ",
|
|
same_site: "Lax",
|
|
secure: Application.compile_env(:tarakan, :secure_cookies, true)
|
|
]
|
|
|
|
socket "/live", Phoenix.LiveView.Socket,
|
|
websocket: [connect_info: [:peer_data, :x_headers, session: @session_options]],
|
|
longpoll: [connect_info: [:peer_data, :x_headers, session: @session_options]]
|
|
|
|
# Force SSL in prod with the X-Forwarded-Proto scheme rewrite gated on
|
|
# trusted proxies. Phoenix would insert Plug.SSL ahead of every plug below
|
|
# when :force_ssl is configured, leaving its rewrite_on honoring the header
|
|
# from any peer, so prod sets :trusted_ssl instead and both plugs run here,
|
|
# first and in order.
|
|
if trusted_ssl = Application.compile_env(:tarakan, [__MODULE__, :trusted_ssl]) do
|
|
plug TarakanWeb.Plugs.ForwardedProto
|
|
plug Plug.SSL, trusted_ssl
|
|
end
|
|
|
|
# Serve at "/" the static files from "priv/static" directory.
|
|
#
|
|
# When code reloading is disabled (e.g., in production),
|
|
# the `gzip` option is enabled to serve compressed
|
|
# static files generated by running `phx.digest`.
|
|
plug Plug.Static,
|
|
at: "/",
|
|
from: :tarakan,
|
|
gzip: not code_reloading?,
|
|
only: TarakanWeb.static_paths(),
|
|
raise_on_missing_only: code_reloading?
|
|
|
|
# Code reloading can be explicitly enabled under the
|
|
# :code_reloader configuration of your endpoint.
|
|
if code_reloading? do
|
|
socket "/phoenix/live_reload/socket", Phoenix.LiveReloader.Socket
|
|
plug Phoenix.LiveReloader
|
|
plug Phoenix.CodeReloader
|
|
plug Phoenix.Ecto.CheckRepoStatus, otp_app: :tarakan
|
|
end
|
|
|
|
plug Phoenix.LiveDashboard.RequestLogger,
|
|
param_key: "request_logger",
|
|
cookie_key: "request_logger"
|
|
|
|
plug Plug.RequestId
|
|
plug Plug.Telemetry, event_prefix: [:phoenix, :endpoint]
|
|
|
|
# Rewrite remote_ip from X-Forwarded-For only when the peer is a configured
|
|
# trusted proxy (see :trusted_proxies). Must run before rate limiters / git.
|
|
plug TarakanWeb.Plugs.ClientIp
|
|
|
|
# Git smart HTTP must run before Plug.Parsers: RPC bodies stream to a git
|
|
# subprocess and would otherwise be buffered and rejected at the parser's
|
|
# size cap. Non-git requests pass straight through.
|
|
plug TarakanWeb.GitHTTP
|
|
|
|
plug Plug.Parsers,
|
|
parsers: [:urlencoded, :multipart, :json],
|
|
pass: ["*/*"],
|
|
length: 2_500_000,
|
|
body_reader: {TarakanWeb.Endpoint, :read_body, []},
|
|
json_decoder: Phoenix.json_library()
|
|
|
|
# Plug.Parsers body_reader wrapper: caches the raw request body in
|
|
# conn.assigns[:raw_body] so the Stripe webhook controller can verify the
|
|
# Stripe-Signature HMAC against the exact payload bytes.
|
|
@doc false
|
|
def read_body(conn, opts) do
|
|
case Plug.Conn.read_body(conn, opts) do
|
|
{:ok, body, conn} ->
|
|
{:ok, body, Plug.Conn.assign(conn, :raw_body, body)}
|
|
|
|
{:more, chunk, conn} ->
|
|
{:more, chunk,
|
|
Plug.Conn.assign(conn, :raw_body, (conn.assigns[:raw_body] || "") <> chunk)}
|
|
|
|
{:error, reason} ->
|
|
{:error, reason}
|
|
end
|
|
end
|
|
|
|
plug Plug.MethodOverride
|
|
plug Plug.Head
|
|
plug Plug.Session, @session_options
|
|
plug TarakanWeb.Router
|
|
end
|