Jannis Braun
024833c470
- Remove hardcoded JWT_SECRET fallback (crash on boot if unset) - Make LiveKit config optional with 503 guard on token endpoint - Add REST rate limiting via @fastify/rate-limit (auth 10/15m, messages 5/5s, uploads 10/1m, global 60/1m) - Add WebSocket token bucket rate limiter (30 burst, 2/sec refill) - Add DM channel ownership (ownerId) with migration, enforce on add-member - Require friendship to add users to group DMs - Add silent 20Hz oscillator to prevent Safari AudioContext suspension - Move WebSocket heartbeat to Web Worker to bypass Safari background throttling
54 lines
1.6 KiB
TypeScript
54 lines
1.6 KiB
TypeScript
import { config as dotenvConfig } from 'dotenv';
|
|
import { resolve, dirname } from 'path';
|
|
import { fileURLToPath } from 'url';
|
|
|
|
const __dirname = dirname(fileURLToPath(import.meta.url));
|
|
|
|
dotenvConfig({ path: resolve(__dirname, '../../../.env') });
|
|
|
|
function env(key: string, defaultValue?: string): string {
|
|
const value = process.env[key] ?? defaultValue;
|
|
if (value === undefined) {
|
|
throw new Error(`Missing required environment variable: ${key}`);
|
|
}
|
|
return value;
|
|
}
|
|
|
|
function envOptional(key: string): string | undefined {
|
|
return process.env[key] || undefined;
|
|
}
|
|
|
|
function envInt(key: string, defaultValue: number): number {
|
|
const value = process.env[key];
|
|
if (value === undefined) return defaultValue;
|
|
const parsed = parseInt(value, 10);
|
|
if (isNaN(parsed)) {
|
|
throw new Error(`Environment variable ${key} must be a number, got: ${value}`);
|
|
}
|
|
return parsed;
|
|
}
|
|
|
|
function envBool(key: string, defaultValue: boolean): boolean {
|
|
const value = process.env[key];
|
|
if (value === undefined) return defaultValue;
|
|
return value === 'true' || value === '1';
|
|
}
|
|
|
|
export const config = {
|
|
port: envInt('PORT', 3000),
|
|
host: env('HOST', '0.0.0.0'),
|
|
jwtSecret: env('JWT_SECRET'),
|
|
jwtExpiresIn: env('JWT_EXPIRES_IN', '30d'),
|
|
|
|
livekit: {
|
|
url: envOptional('LIVEKIT_URL'),
|
|
apiKey: envOptional('LIVEKIT_API_KEY'),
|
|
apiSecret: envOptional('LIVEKIT_API_SECRET'),
|
|
},
|
|
|
|
uploadDir: env('UPLOAD_DIR', resolve(__dirname, '../../../data/uploads')),
|
|
dbPath: env('DB_PATH', resolve(__dirname, '../../../data/opencord.db')),
|
|
maxUploadSize: envInt('MAX_UPLOAD_SIZE', 104857600),
|
|
registrationOpen: envBool('REGISTRATION_OPEN', true),
|
|
} as const;
|