powerdns-admin/powerdnsadmin/default_config.py

import os
import urllib.parse
basedir = os.path.abspath(os.path.dirname(__file__))

### BASIC APP CONFIG
SALT = '$2b$12$yLUMTIfl21FKJQpTkRQXCu'
SECRET_KEY = 'e951e5a1f4b94151b360f47edf596dd2'
BIND_ADDRESS = '0.0.0.0'
PORT = 9191
HSTS_ENABLED = False
FILESYSTEM_SESSIONS_ENABLED = False
SESSION_COOKIE_SAMESITE = 'Lax'
CSRF_COOKIE_HTTPONLY = True

### DATABASE CONFIG
SQLA_DB_USER = 'pda'
SQLA_DB_PASSWORD = 'changeme'
SQLA_DB_HOST = '127.0.0.1'
SQLA_DB_NAME = 'pda'
SQLALCHEMY_TRACK_MODIFICATIONS = True

### DATABASE - MySQL
SQLALCHEMY_DATABASE_URI = 'mysql://{}:{}@{}/{}'.format(
    urllib.parse.quote_plus(SQLA_DB_USER),
    urllib.parse.quote_plus(SQLA_DB_PASSWORD),
    SQLA_DB_HOST,
    SQLA_DB_NAME
)

### DATABASE - SQLite
# SQLALCHEMY_DATABASE_URI = 'sqlite:///' + os.path.join(basedir, 'pdns.db')

# SAML Authnetication
SAML_ENABLED = False
SAML_ASSERTION_ENCRYPTED = True
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00			`import os`
default config: add exemplary URL encoding step for SQLA DB URL params SQLAlchemy database URLs follow RFC-1738, so parameters like username and password need to be encoded accordingly. https://docs.sqlalchemy.org/en/13/core/engines.html#database-urls 2021-11-10 10:29:01 +00:00			`import urllib.parse`
			`basedir = os.path.abspath(os.path.dirname(__file__))`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00
Update docker stuff and bug fixes 2019-12-04 04:50:46 +00:00			`### BASIC APP CONFIG`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00			`SALT = '$2b$12$yLUMTIfl21FKJQpTkRQXCu'`
Update docker stuff and bug fixes 2019-12-04 04:50:46 +00:00			`SECRET_KEY = 'e951e5a1f4b94151b360f47edf596dd2'`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00			`BIND_ADDRESS = '0.0.0.0'`
			`PORT = 9191`
Update docker stuff and bug fixes 2019-12-04 04:50:46 +00:00			`HSTS_ENABLED = False`
allow-server-side-sessions (#855) 2021-01-24 08:09:53 +00:00			`FILESYSTEM_SESSIONS_ENABLED = False`
Set SameSite on cookies Setting this attribute on a cookie marks it as non-cross-site, so it is only send in requests to our own server. It is reasonable that no one else should need our session or csrf data. Setting it explicitly also prevents any issues from the ongoing change in browser behaviour [0] when it is unset. Seasurf supports the SameSite attribute starting with v0.3. As nothing obviously broke, I used the opportunity and updated all the way to the most recent version. The SeaSurf default for SameSite is already `Lax`, so it only needs to be set for the session cookie. [0] https://developers.google.com/search/blog/2020/01/get-ready-for-new-samesitenone-secure 2022-05-30 22:35:04 +00:00			`SESSION_COOKIE_SAMESITE = 'Lax'`
Set csrf cookie to httponly The CSRF token is currently inserted directly in the template and not in the browser via JavaScript from the cookie, so making it inaccessible is not a problem. The Sesson-cookie is already httponly by default [0]. [0] https://flask.palletsprojects.com/en/2.1.x/config/?highlight=session_cookie_httponly#SESSION_COOKIE_HTTPONLY 2022-05-27 10:53:28 +00:00			`CSRF_COOKIE_HTTPONLY = True`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00
Update docker stuff and bug fixes 2019-12-04 04:50:46 +00:00			`### DATABASE CONFIG`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00			`SQLA_DB_USER = 'pda'`
			`SQLA_DB_PASSWORD = 'changeme'`
			`SQLA_DB_HOST = '127.0.0.1'`
			`SQLA_DB_NAME = 'pda'`
			`SQLALCHEMY_TRACK_MODIFICATIONS = True`

Code refactoring and bug fixes 2020-06-19 01:47:51 +00:00			`### DATABASE - MySQL`
default config: add exemplary URL encoding step for SQLA DB URL params SQLAlchemy database URLs follow RFC-1738, so parameters like username and password need to be encoded accordingly. https://docs.sqlalchemy.org/en/13/core/engines.html#database-urls 2021-11-10 10:29:01 +00:00			`SQLALCHEMY_DATABASE_URI = 'mysql://{}:{}@{}/{}'.format(`
			`urllib.parse.quote_plus(SQLA_DB_USER),`
			`urllib.parse.quote_plus(SQLA_DB_PASSWORD),`
			`SQLA_DB_HOST,`
			`SQLA_DB_NAME`
			`)`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00
Code refactoring and bug fixes 2020-06-19 01:47:51 +00:00			`### DATABASE - SQLite`
Update docker stuff and bug fixes 2019-12-04 04:50:46 +00:00			`# SQLALCHEMY_DATABASE_URI = 'sqlite:///' + os.path.join(basedir, 'pdns.db')`
Refactoring the code - Use Flask blueprint - Split model and views into smaller parts - Bug fixes - API adjustment 2019-12-02 03:32:03 +00:00
			`# SAML Authnetication`
			`SAML_ENABLED = False`
Code refactoring and bug fixes 2020-06-19 01:47:51 +00:00			`SAML_ASSERTION_ENCRYPTED = True`