cancan-microstack 0.0.1__tar.gz → 0.0.2__tar.gz

{cancan_microstack-0.0.1 → cancan_microstack-0.0.2}/MANIFEST.in

@@ -7,3 +7,7 @@ prune build
 prune dist
 exclude .coverage
 exclude coverage.xml
+
+# 显式纳入随包资产（含 dotfile）与类型标记
+graft assets
+include py.typed

{cancan_microstack-0.0.1/cancan_microstack.egg-info → cancan_microstack-0.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cancan-microstack
-Version: 0.0.1
+Version: 0.0.2
 Summary: Controllersrv/Infrasrv/Opsbffsrv bundle with compose tooling
 Author-email: Victor Lai <victor.lai@foxmail.com>
 License-Expression: MIT

{cancan_microstack-0.0.1 → cancan_microstack-0.0.2}/__version__.py

@@ -3,7 +3,7 @@
 __title__ = "cancan-microstack"
 __description__ = "Infrastructure microservice bundle providing controllersrv/infrasrv/opsbffsrv, assets, and orchestration tooling"
 __url__ = "https://github.com/10000ms/cancan_microstack"
-__version__ = "0.0.1"
+__version__ = "0.0.2"
 __author__ = "Victor Lai"
 __author_email__ = "victor.lai@foxmail.com"
 __license__ = "MIT"

cancan_microstack-0.0.2/assets/builds/caddy/.gitignore

@@ -0,0 +1,15 @@
+# Caddy 运行时文件
+logs/
+data/
+config/
+
+# GeoIP 数据库（体积大，不提交到 Git）
+geoip/*.mmdb
+geoip/*.dat
+
+# 但是保留 GeoLite2-City.mmdb（项目需要）
+!geoip/GeoLite2-City.mmdb
+
+# OWASP CRS（可选，如果使用）
+waf/owasp-crs/
+waf/*.tar.gz

cancan_microstack-0.0.2/assets/builds/caddy/www/.gitignore

@@ -0,0 +1,4 @@
+# Generated static assets live here.
+# 静态资源构建产物（生成物，不提交 Git）
+*
+!.gitignore

cancan_microstack-0.0.2/assets/env/env.example

@@ -0,0 +1,71 @@
+# Cancan Microstack — environment configuration example
+# ======================================================
+# 复制为工作区根目录的 `.env`（`cancan init` / `cancan stack up --bootstrap` 会自动生成）。
+# Copy to `.env` in your workspace root (cancan init / stack up --bootstrap create it for you).
+#
+# 下面的值是【本地开发默认值】，开箱即用。
+# These are LOCAL-DEV defaults — fine for getting started.
+#
+# ⚠️ 生产部署：务必修改所有标了 [PROD] 的项，切勿沿用默认弱口令。
+# ⚠️ Production: change every [PROD] item below; never ship the default weak secrets.
+
+# ── 栈隔离 / Stack isolation ───────────────────────────────────────────────
+# 用于隔离多套 Docker/Podman 栈的命名前缀（卷名、容器名）。
+# Name prefix to isolate multiple Docker/Podman stacks (volumes, containers).
+CANCAN_STACK_PREFIX=cancan
+
+# 容器引擎偏好：auto | docker | podman（auto = 自动探测）。
+# Container engine preference.
+# CANCAN_CONTAINER_ENGINE=auto
+
+# 宿主机 controllersrv 地址（容器内服务回调宿主机时使用）。
+# Host controllersrv URL (used by containers to reach the host-run controllersrv).
+CONTROLLERSRV_HOST=http://host.containers.internal:22100
+
+# ── PostgreSQL ─────────────────────────────────────────────────────────────
+# [PROD] 主数据库密码。
+POSTGRES_PASSWORD=postgres123
+
+# ── RabbitMQ ───────────────────────────────────────────────────────────────
+RABBITMQ_USERNAME=admin
+# [PROD] RabbitMQ 密码（同时作用于容器与应用连接）。
+RABBITMQ_PASSWORD=admin123
+
+# ── MongoDB（日志存储）/ MongoDB (log storage) ─────────────────────────────
+# [PROD] Mongo root 密码（容器初始化用）。
+MONGO_INITDB_ROOT_PASSWORD=admin123
+# [PROD] 应用连接串——若修改了上面的 Mongo 密码，请同步修改这里。
+# App connection string — keep in sync with MONGO_INITDB_ROOT_PASSWORD above.
+MONGODB_URI=mongodb://admin:admin123@mongo.internal:27017/admin?authSource=admin
+
+# ── 运维控制台认证（opsbffsrv）/ Ops console auth ──────────────────────────
+# [PROD] TOTP 密钥加密用的 Fernet key —— 生产模式下【必须】设置，否则服务启动会直接报错。
+# Required in production; the service refuses to start if empty in prod mode.
+# 生成 / Generate:
+#   python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
+AUTH_TOTP_FERNET_KEY=
+
+# 仅通过 HTTPS 下发会话 cookie。本地 http 调试可设 false。
+# Send the session cookie only over HTTPS. Set false for local http debugging.
+AUTH_COOKIE_SECURE=true
+
+# 登录失败 / TOTP 失败次数上限。
+# AUTH_IP_MAX_FAILURES=5
+# AUTH_TOTP_MAX_FAILURES=5
+
+# 代理接口跨域白名单（逗号分隔 Origin），默认空 = 仅同源。
+# CORS allowlist for proxy endpoints (comma-separated); empty = same-origin only.
+# PROXY_CORS_ALLOWED_ORIGINS=
+
+# ── 数据库管理 UI 代理凭据（mongo-express / RabbitMQ 管理）/ Admin UI proxy creds ──
+# [PROD] 若修改了上游中间件密码，请同步修改这些。
+MONGO_EXPRESS_PASSWORD=admin123
+RABBITMQ_MGMT_PASSWORD=admin123
+
+# ── 高级 / Advanced ────────────────────────────────────────────────────────
+# 显式指定工作区根目录 / 覆盖目录（一般无需设置，会自动探测）。
+# CANCAN_WORKSPACE_ROOT=
+# CANCAN_OVERRIDE_ROOT=
+# 发版前用本地构建测试容器镜像（指向 wheel 或 git）。
+# Dev-only: build the service image from a local wheel or git instead of PyPI.
+# CANCAN_PIP_SPEC=cancan-microstack @ git+https://github.com/10000ms/cancan_microstack.git@main

{cancan_microstack-0.0.1 → cancan_microstack-0.0.2/cancan_microstack.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cancan-microstack
-Version: 0.0.1
+Version: 0.0.2
 Summary: Controllersrv/Infrasrv/Opsbffsrv bundle with compose tooling
 Author-email: Victor Lai <victor.lai@foxmail.com>
 License-Expression: MIT

{cancan_microstack-0.0.1 → cancan_microstack-0.0.2}/cancan_microstack.egg-info/SOURCES.txt

@@ -38,6 +38,7 @@ pyproject.toml
 ./assets/ddl/ops/caddy_route_tbl.sql
 ./assets/ddl/ops/caddy_stats_tbl.sql
 ./assets/docker/docker-compose.infra.yml
+./assets/env/env.example
 ./assets/scripts/README.md
 ./assets/scripts/start_controllersrv.sh
 ./assets/scripts/docker/build_images.sh
@@ -440,6 +441,7 @@ pyproject.toml
 ./utils/__init__.py
 ./utils/container_env.py
 assets/__init__.py
+assets/builds/caddy/.gitignore
 assets/builds/caddy/Caddyfile
 assets/builds/caddy/DEPLOYMENT.md
 assets/builds/caddy/Dockerfile
@@ -447,6 +449,7 @@ assets/builds/caddy/README.md
 assets/builds/caddy/start.sh
 assets/builds/caddy/geoip/README.md
 assets/builds/caddy/waf/coraza.conf
+assets/builds/caddy/www/.gitignore
 assets/builds/service/Dockerfile
 assets/builds/service/README.md
 assets/ddl/create_db.sql
@@ -469,6 +472,7 @@ assets/ddl/ops/caddy_rate_limit_tbl.sql
 assets/ddl/ops/caddy_route_tbl.sql
 assets/ddl/ops/caddy_stats_tbl.sql
 assets/docker/docker-compose.infra.yml
+assets/env/env.example
 assets/scripts/README.md
 assets/scripts/start_controllersrv.sh
 assets/scripts/docker/build_images.sh

{cancan_microstack-0.0.1 → cancan_microstack-0.0.2}/cli/main.py

@@ -179,7 +179,7 @@ def _seed_env_file(workspace: Path, stack: CancanMicrostack) -> None:
     if env_path.exists():
         return
     try:
-        template = stack.assets.read_text("env/.env.example")
+        template = stack.assets.read_text("env/env.example")
     except Exception:
         return
 
@@ -243,7 +243,7 @@ def _bootstrap_workspace_files(workspace: Path, stack: CancanMicrostack) -> None
 
     # Export the env template and seed a workspace .env (with a fresh TOTP key) when missing.
     # 导出 env 模板；缺失时生成带新鲜 TOTP 密钥的工作区 .env（供 compose 注入凭据/密钥）。
-    _export_asset_if_missing("env/.env.example", workspace / ".env.example")
+    _export_asset_if_missing("env/env.example", workspace / ".env.example")
     _seed_env_file(workspace, stack)
 
     # Export adminops frontend into workspace for Caddy to serve.

{cancan_microstack-0.0.1 → cancan_microstack-0.0.2}/pyproject.toml

@@ -64,6 +64,7 @@ Repository = "https://github.com/10000ms/cancan_microstack"
 
 [tool.setuptools]
 zip-safe = false
+include-package-data = true
 package-dir = {"cancan_microstack" = "."}
 packages = [
     "cancan_microstack",