powerdns-admin/powerdnsadmin/default_config.py

import os
import urllib.parse
basedir = os.path.abspath(os.path.dirname(__file__))

### BASIC APP CONFIG
SALT = '$2b$12$yLUMTIfl21FKJQpTkRQXCu'
SECRET_KEY = 'e951e5a1f4b94151b360f47edf596dd2'
BIND_ADDRESS = '0.0.0.0'
PORT = 9191
HSTS_ENABLED = False
SERVER_EXTERNAL_SSL = True

SESSION_TYPE = 'sqlalchemy'
SESSION_COOKIE_SAMESITE = 'Lax'
CSRF_COOKIE_HTTPONLY = True

#CAPTCHA Config
CAPTCHA_ENABLE = True
CAPTCHA_LENGTH = 6
CAPTCHA_WIDTH = 160
CAPTCHA_HEIGHT = 60
CAPTCHA_SESSION_KEY = 'captcha_image'

### DATABASE CONFIG
SQLA_DB_USER = 'pda'
SQLA_DB_PASSWORD = 'changeme'
SQLA_DB_HOST = '127.0.0.1'
SQLA_DB_NAME = 'pda'
SQLALCHEMY_TRACK_MODIFICATIONS = True

### DATABASE - MySQL
# SQLALCHEMY_DATABASE_URI = 'mysql://{}:{}@{}/{}'.format(
#     urllib.parse.quote_plus(SQLA_DB_USER),
#     urllib.parse.quote_plus(SQLA_DB_PASSWORD),
#     SQLA_DB_HOST,
#     SQLA_DB_NAME
# )

### DATABASE - SQLite
SQLALCHEMY_DATABASE_URI = 'sqlite:///' + os.path.join(basedir, 'pdns.db')

# SAML Authnetication
SAML_ENABLED = False
SAML_ASSERTION_ENCRYPTED = True
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00			`import os`
default config: add exemplary URL encoding step for SQLA DB URL params SQLAlchemy database URLs follow RFC-1738, so parameters like username and password need to be encoded accordingly. https://docs.sqlalchemy.org/en/13/core/engines.html#database-urls 2021-11-10 10:29:01 +00:00			`import urllib.parse`
			`basedir = os.path.abspath(os.path.dirname(__file__))`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00
Update docker stuff and bug fixes 2019-12-04 04:50:46 +00:00			`### BASIC APP CONFIG`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00			`SALT = '$2b$12$yLUMTIfl21FKJQpTkRQXCu'`
Update docker stuff and bug fixes 2019-12-04 04:50:46 +00:00			`SECRET_KEY = 'e951e5a1f4b94151b360f47edf596dd2'`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00			`BIND_ADDRESS = '0.0.0.0'`
			`PORT = 9191`
Update docker stuff and bug fixes 2019-12-04 04:50:46 +00:00			`HSTS_ENABLED = False`
Updated the default value of the `SERVER_EXTERNAL_SSL` environment setting. 2023-04-12 12:07:40 +00:00			`SERVER_EXTERNAL_SSL = True`
Support multiple Flask session types, not just filesystem. Set via generic SESSION_TYPE environment variable 2023-03-08 10:08:07 +00:00
Tweaked PR to include the latest asset build changes for CSS minimizer. Also updated the default session storage to use SQLAlchemy instead of the file system. 2023-03-10 21:34:55 +00:00			`SESSION_TYPE = 'sqlalchemy'`
Set SameSite on cookies Setting this attribute on a cookie marks it as non-cross-site, so it is only send in requests to our own server. It is reasonable that no one else should need our session or csrf data. Setting it explicitly also prevents any issues from the ongoing change in browser behaviour [0] when it is unset. Seasurf supports the SameSite attribute starting with v0.3. As nothing obviously broke, I used the opportunity and updated all the way to the most recent version. The SeaSurf default for SameSite is already `Lax`, so it only needs to be set for the session cookie. [0] https://developers.google.com/search/blog/2020/01/get-ready-for-new-samesitenone-secure 2022-05-30 22:35:04 +00:00			`SESSION_COOKIE_SAMESITE = 'Lax'`
Set csrf cookie to httponly The CSRF token is currently inserted directly in the template and not in the browser via JavaScript from the cookie, so making it inaccessible is not a problem. The Sesson-cookie is already httponly by default [0]. [0] https://flask.palletsprojects.com/en/2.1.x/config/?highlight=session_cookie_httponly#SESSION_COOKIE_HTTPONLY 2022-05-27 10:53:28 +00:00			`CSRF_COOKIE_HTTPONLY = True`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00
Added default CAPTCHA settings to default configuration. Added flash_sessions directory pattern to git ignore file. 2023-02-19 00:18:59 +00:00			`#CAPTCHA Config`
			`CAPTCHA_ENABLE = True`
			`CAPTCHA_LENGTH = 6`
			`CAPTCHA_WIDTH = 160`
			`CAPTCHA_HEIGHT = 60`
			`CAPTCHA_SESSION_KEY = 'captcha_image'`

Update docker stuff and bug fixes 2019-12-04 04:50:46 +00:00			`### DATABASE CONFIG`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00			`SQLA_DB_USER = 'pda'`
			`SQLA_DB_PASSWORD = 'changeme'`
			`SQLA_DB_HOST = '127.0.0.1'`
			`SQLA_DB_NAME = 'pda'`
			`SQLALCHEMY_TRACK_MODIFICATIONS = True`

Code refactoring and bug fixes 2020-06-19 01:47:51 +00:00			`### DATABASE - MySQL`
Updated default app config to comment out MySQL default settings. 2023-02-18 00:35:36 +00:00			`# SQLALCHEMY_DATABASE_URI = 'mysql://{}:{}@{}/{}'.format(`
			`# urllib.parse.quote_plus(SQLA_DB_USER),`
			`# urllib.parse.quote_plus(SQLA_DB_PASSWORD),`
			`# SQLA_DB_HOST,`
			`# SQLA_DB_NAME`
			`# )`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00
Code refactoring and bug fixes 2020-06-19 01:47:51 +00:00			`### DATABASE - SQLite`
Updated Docker file to include npm as a new requirement for the admin-lte npm module. Also added session persistence setting to default and docker configuration files. Changed the default persistence configuration of the default config file to use SQLite instead of MySQL. 2023-02-18 00:00:09 +00:00			`SQLALCHEMY_DATABASE_URI = 'sqlite:///' + os.path.join(basedir, 'pdns.db')`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00
			`# SAML Authnetication`
			`SAML_ENABLED = False`
Code refactoring and bug fixes 2020-06-19 01:47:51 +00:00			`SAML_ASSERTION_ENCRYPTED = True`