# Defaults for Docker image BIND_ADDRESS = '0.0.0.0' PORT = 80 SQLALCHEMY_DATABASE_URI = 'sqlite:////data/powerdns-admin.db' legal_envvars = ( 'SECRET_KEY', 'OIDC_OAUTH_API_URL', 'OIDC_OAUTH_TOKEN_URL', 'OIDC_OAUTH_AUTHORIZE_URL', 'BIND_ADDRESS', 'PORT', 'LOG_LEVEL', 'SALT', 'SQLALCHEMY_TRACK_MODIFICATIONS', 'SQLALCHEMY_DATABASE_URI', 'MAIL_SERVER', 'MAIL_PORT', 'MAIL_DEBUG', 'MAIL_USE_TLS', 'MAIL_USE_SSL', 'MAIL_USERNAME', 'MAIL_PASSWORD', 'MAIL_DEFAULT_SENDER', 'SAML_ENABLED', 'SAML_DEBUG', 'SAML_PATH', 'SAML_METADATA_URL', 'SAML_METADATA_CACHE_LIFETIME', 'SAML_IDP_SSO_BINDING', 'SAML_IDP_ENTITY_ID', 'SAML_NAMEID_FORMAT', 'SAML_ATTRIBUTE_EMAIL', 'SAML_ATTRIBUTE_GIVENNAME', 'SAML_ATTRIBUTE_SURNAME', 'SAML_ATTRIBUTE_NAME', 'SAML_ATTRIBUTE_USERNAME', 'SAML_ATTRIBUTE_ADMIN', 'SAML_ATTRIBUTE_GROUP', 'SAML_GROUP_ADMIN_NAME', 'SAML_GROUP_TO_ACCOUNT_MAPPING', 'SAML_ATTRIBUTE_ACCOUNT', 'SAML_SP_ENTITY_ID', 'SAML_SP_CONTACT_NAME', 'SAML_SP_CONTACT_MAIL', 'SAML_SIGN_REQUEST', 'SAML_WANT_MESSAGE_SIGNED', 'SAML_LOGOUT', 'SAML_LOGOUT_URL', 'SAML_ASSERTION_ENCRYPTED', 'OFFLINE_MODE', 'REMOTE_USER_LOGOUT_URL', 'REMOTE_USER_COOKIES', 'SIGNUP_ENABLED', 'LOCAL_DB_ENABLED', 'LDAP_ENABLED', 'SAML_CERT', 'SAML_KEY', 'FILESYSTEM_SESSIONS_ENABLED' ) legal_envvars_int = ('PORT', 'MAIL_PORT', 'SAML_METADATA_CACHE_LIFETIME') legal_envvars_bool = ( 'SQLALCHEMY_TRACK_MODIFICATIONS', 'HSTS_ENABLED', 'MAIL_DEBUG', 'MAIL_USE_TLS', 'MAIL_USE_SSL', 'SAML_ENABLED', 'SAML_DEBUG', 'SAML_SIGN_REQUEST', 'SAML_WANT_MESSAGE_SIGNED', 'SAML_LOGOUT', 'SAML_ASSERTION_ENCRYPTED', 'OFFLINE_MODE', 'REMOTE_USER_ENABLED', 'SIGNUP_ENABLED', 'LOCAL_DB_ENABLED', 'LDAP_ENABLED', 'FILESYSTEM_SESSIONS_ENABLED' ) # import everything from environment variables import os import sys def str2bool(v): return v.lower() in ("true", "yes", "1") for v in legal_envvars: ret = None # _FILE suffix will allow to read value from file, usefull for Docker's # secrets feature if v + '_FILE' in os.environ: if v in os.environ: raise AttributeError( "Both {} and {} are set but are exclusive.".format( v, v + '_FILE')) with open(os.environ[v + '_FILE']) as f: ret = f.read() f.close() elif v in os.environ: ret = os.environ[v] if ret is not None: if v in legal_envvars_bool: ret = str2bool(ret) if v in legal_envvars_int: ret = int(ret) sys.modules[__name__].__dict__[v] = ret