create-ortha-app 0.4.2 → 0.4.3

package/templates/default/apps/server/config/media-storage.ts

@@ -0,0 +1,83 @@
+/**
+ * Where uploads are written.
+ *
+ * One block per adapter, and the wizard picks exactly one — so a generated app
+ * has the body it chose and nothing else. Swapping backends later means
+ * swapping this file, the type on `AppMediaConfig.storage`, and the factory
+ * `src/plugins.ts` imports; nothing inside the media package changes.
+ */
+// ortha:if media-local
+import type { LocalStorageConfig } from '@orthacms/media-provider-local';
+
+/** Local-filesystem blobs. */
+export function mediaStorage(): LocalStorageConfig {
+    return {
+        // Point MEDIA_LOCAL_ROOT at a persistent volume in production: a
+        // container's own disk is wiped on every deploy.
+        rootDir: process.env['MEDIA_LOCAL_ROOT'] ?? './.storage/media'
+    };
+}
+// ortha:end
+// ortha:if media-vercel-blob
+import type { VercelBlobStorageConfig } from '@orthacms/media-provider-vercel-blob';
+import { defined, readEnv } from '@orthacms/utils-server';
+/** Vercel Blob. */
+export function mediaStorage(): VercelBlobStorageConfig {
+    return defined({
+        // On Vercel the SDK reads BLOB_READ_WRITE_TOKEN itself, so this is only
+        // for running the app elsewhere.
+        token: readEnv('BLOB_READ_WRITE_TOKEN')
+    });
+}
+// ortha:end
+// ortha:if media-gcs
+import type { GcsStorageConfig } from '@orthacms/media-provider-gcs';
+import { defined, readEnv, readFlag, requireEnv } from '@orthacms/utils-server';
+/** Google Cloud Storage. */
+export function mediaStorage(): GcsStorageConfig {
+    return defined({
+        bucket: requireEnv('MEDIA_GCS_BUCKET'),
+        // Everything else is optional: with no key file and no inline
+        // credentials the client uses Application Default Credentials, which is
+        // what a GKE or Cloud Run deployment wants.
+        projectId: readEnv('MEDIA_GCS_PROJECT_ID'),
+        keyFilename: readEnv('MEDIA_GCS_KEY_FILE'),
+        signWithIam: readFlag('MEDIA_GCS_SIGN_WITH_IAM', false)
+    });
+}
+// ortha:end
+// ortha:if media-azure
+import type { AzureStorageConfig } from '@orthacms/media-provider-azure';
+import { requireEnv } from '@orthacms/utils-server';
+/** Azure Blob Storage. */
+export function mediaStorage(): AzureStorageConfig {
+    return {
+        container: requireEnv('MEDIA_AZURE_CONTAINER'),
+        connectionString: requireEnv('MEDIA_AZURE_CONNECTION_STRING')
+    };
+}
+// ortha:end
+// ortha:if media-s3
+import type { S3StorageConfig } from '@orthacms/media-provider-s3';
+import { defined, readEnv, readFlag, requireEnv } from '@orthacms/utils-server';
+/** S3 or an S3-compatible endpoint — R2, MinIO, Spaces, B2. */
+export function mediaStorage(): S3StorageConfig {
+    const accessKeyId = readEnv('MEDIA_S3_ACCESS_KEY_ID');
+    const secretAccessKey = readEnv('MEDIA_S3_SECRET_ACCESS_KEY');
+    return defined({
+        bucket: requireEnv('MEDIA_S3_BUCKET'),
+        // `auto` is what R2 expects; AWS needs its real region.
+        region: process.env['MEDIA_S3_REGION'] ?? 'auto',
+        // Omit for AWS S3 itself; set it for R2, MinIO, Spaces, B2…
+        endpoint: readEnv('MEDIA_S3_ENDPOINT'),
+        forcePathStyle: readFlag('MEDIA_S3_FORCE_PATH_STYLE', false),
+        // Absent means "use the SDK's own provider chain" — an instance role,
+        // IRSA, a shared config file. Passing blanks instead would shadow all
+        // of that with credentials that cannot sign.
+        credentials:
+            accessKeyId && secretAccessKey
+                ? { accessKeyId, secretAccessKey }
+                : undefined
+    });
+}
+// ortha:end

package/templates/default/apps/server/config/media.ts

@@ -0,0 +1,67 @@
+/** Media — the storage backend, plus how downloads and uploads are bounded. */
+import type { MediaPluginConfig } from '@orthacms/media-server';
+// ortha:if media-local
+import type { LocalStorageConfig } from '@orthacms/media-provider-local';
+// ortha:end
+// ortha:if media-s3
+import type { S3StorageConfig } from '@orthacms/media-provider-s3';
+// ortha:end
+// ortha:if media-azure
+import type { AzureStorageConfig } from '@orthacms/media-provider-azure';
+// ortha:end
+// ortha:if media-gcs
+import type { GcsStorageConfig } from '@orthacms/media-provider-gcs';
+// ortha:end
+// ortha:if media-vercel-blob
+import type { VercelBlobStorageConfig } from '@orthacms/media-provider-vercel-blob';
+// ortha:end
+import { readEnv, readPositiveInt } from '@orthacms/utils-server';
+
+import { mediaStorage } from './media-storage';
+
+/**
+ * Media settings, plus whatever the storage backend `src/plugins.ts`
+ * constructs needs. The two move together: the type below is the one exported
+ * by the adapter that file imports.
+ */
+export interface AppMediaConfig extends MediaPluginConfig {
+    // ortha:if media-local
+    storage: LocalStorageConfig;
+    // ortha:end
+    // ortha:if media-s3
+    storage: S3StorageConfig;
+    // ortha:end
+    // ortha:if media-azure
+    storage: AzureStorageConfig;
+    // ortha:end
+    // ortha:if media-gcs
+    storage: GcsStorageConfig;
+    // ortha:end
+    // ortha:if media-vercel-blob
+    storage: VercelBlobStorageConfig;
+    // ortha:end
+}
+
+/** Media — the storage backend, plus how downloads and uploads are bounded. */
+export function mediaConfig(): AppMediaConfig {
+    return {
+        storage: mediaStorage(),
+        // Redirect an already-authorized download straight to the storage
+        // backend instead of streaming it through the app. Off unless asked
+        // for, and only possible on a backend that can sign a URL — the plugin
+        // refuses the combination at boot rather than proxying while the
+        // operator believes otherwise.
+        directServe:
+            readEnv('MEDIA_DIRECT_SERVE') === 'signed-url'
+                ? 'signed-url'
+                : 'off',
+        directServeTtlSeconds: readPositiveInt(
+            'MEDIA_DIRECT_SERVE_TTL_SECONDS',
+            300
+        ),
+        maxUploadBytes: readPositiveInt(
+            'MEDIA_MAX_UPLOAD_BYTES',
+            50 * 1024 * 1024
+        )
+    };
+}

package/templates/default/apps/server/config/sso-oidc.ts

@@ -0,0 +1,34 @@
+// ortha:if sso-oidc
+import type { OidcProviderConfig } from '@orthacms/identity-provider-oidc';
+import { defined, readEnv, readFlag } from '@orthacms/utils-server';
+
+/**
+ * The OIDC provider, or nothing.
+ *
+ * Present only when both values are set: an issuer with no client id becomes a
+ * sign-in button that can only fail, and every SSO failure looks the same, so
+ * whoever clicks it learns nothing.
+ */
+export function oidcProvider(): (OidcProviderConfig & { name: string }) | undefined {
+    const issuer = readEnv('SSO_OIDC_ISSUER');
+    const clientId = readEnv('SSO_OIDC_CLIENT_ID');
+    if (!issuer || !clientId) {
+        return undefined;
+    }
+    return defined({
+        name: process.env['SSO_OIDC_NAME'] ?? 'oidc',
+        issuer,
+        clientId,
+        clientSecret: readEnv('SSO_OIDC_CLIENT_SECRET'),
+        label: readEnv('SSO_OIDC_LABEL'),
+        // The only gate on a first sign-in claiming an existing account. A
+        // provider that omits the claim — Entra ID, notably — links nobody
+        // until an operator asserts that this directory owns the addresses it
+        // reports.
+        emailVerifiedWhenAbsent: readFlag(
+            'SSO_OIDC_EMAIL_VERIFIED_WHEN_ABSENT',
+            false
+        )
+    });
+}
+// ortha:end