2018-12-23 13:04:54 -07:00
|
|
|
# Pleroma: A lightweight social networking server
|
2020-03-01 22:08:45 -07:00
|
|
|
# Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/>
|
2018-12-23 13:04:54 -07:00
|
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
|
2017-03-17 10:09:58 -06:00
|
|
|
defmodule Pleroma.Web.Endpoint do
|
|
|
|
use Phoenix.Endpoint, otp_app: :pleroma
|
|
|
|
|
2020-05-01 13:15:43 -06:00
|
|
|
require Pleroma.Constants
|
|
|
|
|
2018-11-16 13:35:08 -07:00
|
|
|
socket("/socket", Pleroma.Web.UserSocket)
|
2018-03-30 07:01:53 -06:00
|
|
|
|
2020-10-22 14:33:52 -06:00
|
|
|
plug(Plug.Telemetry, event_prefix: [:phoenix, :endpoint])
|
|
|
|
|
2020-06-24 00:24:29 -06:00
|
|
|
plug(Pleroma.Web.Plugs.SetLocalePlug)
|
2018-11-10 04:23:50 -07:00
|
|
|
plug(CORSPlug)
|
2020-06-24 01:39:17 -06:00
|
|
|
plug(Pleroma.Web.Plugs.HTTPSecurityPlug)
|
2020-06-24 00:03:48 -06:00
|
|
|
plug(Pleroma.Web.Plugs.UploadedMedia)
|
2018-03-30 07:01:53 -06:00
|
|
|
|
2020-03-11 08:58:25 -06:00
|
|
|
@static_cache_control "public, no-cache"
|
2019-05-24 14:33:55 -06:00
|
|
|
|
2018-12-17 14:50:59 -07:00
|
|
|
# InstanceStatic needs to be before Plug.Static to be able to override shipped-static files
|
|
|
|
# If you're adding new paths to `only:` you'll need to configure them in InstanceStatic as well
|
2019-05-24 14:33:55 -06:00
|
|
|
# Cache-control headers are duplicated in case we turn off etags in the future
|
2020-06-24 01:03:10 -06:00
|
|
|
plug(Pleroma.Web.Plugs.InstanceStatic,
|
2019-05-24 14:33:55 -06:00
|
|
|
at: "/",
|
|
|
|
gzip: true,
|
|
|
|
cache_control_for_etags: @static_cache_control,
|
|
|
|
headers: %{
|
|
|
|
"cache-control" => @static_cache_control
|
|
|
|
}
|
|
|
|
)
|
2018-12-17 14:50:59 -07:00
|
|
|
|
2020-07-28 09:35:16 -06:00
|
|
|
# Careful! No `only` restriction here, as we don't know what frontends contain.
|
2020-09-02 01:29:36 -06:00
|
|
|
plug(Pleroma.Web.Plugs.FrontendStatic,
|
2020-07-28 09:35:16 -06:00
|
|
|
at: "/",
|
|
|
|
frontend_type: :primary,
|
|
|
|
gzip: true,
|
|
|
|
cache_control_for_etags: @static_cache_control,
|
|
|
|
headers: %{
|
|
|
|
"cache-control" => @static_cache_control
|
|
|
|
}
|
|
|
|
)
|
|
|
|
|
2020-07-29 05:03:04 -06:00
|
|
|
plug(Plug.Static.IndexHtml, at: "/pleroma/admin/")
|
|
|
|
|
2020-09-02 01:29:36 -06:00
|
|
|
plug(Pleroma.Web.Plugs.FrontendStatic,
|
2020-07-29 05:03:04 -06:00
|
|
|
at: "/pleroma/admin",
|
|
|
|
frontend_type: :admin,
|
|
|
|
gzip: true,
|
|
|
|
cache_control_for_etags: @static_cache_control,
|
|
|
|
headers: %{
|
|
|
|
"cache-control" => @static_cache_control
|
|
|
|
}
|
|
|
|
)
|
|
|
|
|
2019-07-09 05:30:15 -06:00
|
|
|
# Serve at "/" the static files from "priv/static" directory.
|
|
|
|
#
|
|
|
|
# You should set gzip to true if you are running phoenix.digest
|
|
|
|
# when deploying your static files in production.
|
2018-03-30 07:01:53 -06:00
|
|
|
plug(
|
|
|
|
Plug.Static,
|
|
|
|
at: "/",
|
|
|
|
from: :pleroma,
|
2020-05-01 13:15:43 -06:00
|
|
|
only: Pleroma.Constants.static_only_files(),
|
2019-03-04 21:37:33 -07:00
|
|
|
# credo:disable-for-previous-line Credo.Check.Readability.MaxLineLength
|
2019-05-24 14:33:55 -06:00
|
|
|
gzip: true,
|
|
|
|
cache_control_for_etags: @static_cache_control,
|
|
|
|
headers: %{
|
|
|
|
"cache-control" => @static_cache_control
|
|
|
|
}
|
2018-03-30 07:01:53 -06:00
|
|
|
)
|
2017-03-17 10:09:58 -06:00
|
|
|
|
2019-05-10 19:34:17 -06:00
|
|
|
plug(Plug.Static,
|
|
|
|
at: "/pleroma/admin/",
|
|
|
|
from: {:pleroma, "priv/static/adminfe/"}
|
|
|
|
)
|
|
|
|
|
2017-03-17 10:09:58 -06:00
|
|
|
# Code reloading can be explicitly enabled under the
|
|
|
|
# :code_reloader configuration of your endpoint.
|
|
|
|
if code_reloading? do
|
2018-03-30 07:01:53 -06:00
|
|
|
plug(Phoenix.CodeReloader)
|
2017-03-17 10:09:58 -06:00
|
|
|
end
|
|
|
|
|
2020-06-24 00:05:23 -06:00
|
|
|
plug(Pleroma.Web.Plugs.TrailingFormatPlug)
|
2018-03-30 07:01:53 -06:00
|
|
|
plug(Plug.RequestId)
|
2019-12-09 05:12:24 -07:00
|
|
|
plug(Plug.Logger, log: :debug)
|
2017-03-17 10:09:58 -06:00
|
|
|
|
2020-02-07 09:21:55 -07:00
|
|
|
plug(Plug.Parsers,
|
|
|
|
parsers: [
|
|
|
|
:urlencoded,
|
|
|
|
{:multipart, length: {Pleroma.Config, :get, [[:instance, :upload_limit]]}},
|
|
|
|
:json
|
|
|
|
],
|
|
|
|
pass: ["*/*"],
|
|
|
|
json_decoder: Jason,
|
|
|
|
length: Pleroma.Config.get([:instance, :upload_limit]),
|
|
|
|
body_reader: {Pleroma.Web.Plugs.DigestPlug, :read_body, []}
|
|
|
|
)
|
2017-03-17 10:09:58 -06:00
|
|
|
|
2018-03-30 07:01:53 -06:00
|
|
|
plug(Plug.MethodOverride)
|
|
|
|
plug(Plug.Head)
|
2017-03-17 10:09:58 -06:00
|
|
|
|
2019-03-11 11:37:26 -06:00
|
|
|
secure_cookies = Pleroma.Config.get([__MODULE__, :secure_cookie_flag])
|
|
|
|
|
2018-11-12 16:32:38 -07:00
|
|
|
cookie_name =
|
2019-03-11 11:37:26 -06:00
|
|
|
if secure_cookies,
|
2018-11-12 16:32:38 -07:00
|
|
|
do: "__Host-pleroma_key",
|
|
|
|
else: "pleroma_key"
|
|
|
|
|
2019-04-14 22:33:46 -06:00
|
|
|
extra =
|
|
|
|
Pleroma.Config.get([__MODULE__, :extra_cookie_attrs])
|
|
|
|
|> Enum.join(";")
|
2019-03-15 08:08:03 -06:00
|
|
|
|
2017-03-17 10:09:58 -06:00
|
|
|
# The session will be stored in the cookie and signed,
|
|
|
|
# this means its contents can be read but not tampered with.
|
|
|
|
# Set :encryption_salt if you would also like to encrypt it.
|
2018-03-30 07:01:53 -06:00
|
|
|
plug(
|
|
|
|
Plug.Session,
|
2017-03-17 10:09:58 -06:00
|
|
|
store: :cookie,
|
2018-11-12 16:32:38 -07:00
|
|
|
key: cookie_name,
|
2019-06-14 09:45:05 -06:00
|
|
|
signing_salt: Pleroma.Config.get([__MODULE__, :signing_salt], "CqaoopA2"),
|
2018-08-28 14:34:31 -06:00
|
|
|
http_only: true,
|
2019-03-11 11:37:26 -06:00
|
|
|
secure: secure_cookies,
|
2019-04-14 22:33:46 -06:00
|
|
|
extra: extra
|
2018-03-30 07:01:53 -06:00
|
|
|
)
|
2017-03-17 10:09:58 -06:00
|
|
|
|
2020-06-24 00:30:32 -06:00
|
|
|
plug(Pleroma.Web.Plugs.RemoteIp)
|
2019-01-30 08:32:30 -07:00
|
|
|
|
|
|
|
defmodule Instrumenter do
|
|
|
|
use Prometheus.PhoenixInstrumenter
|
|
|
|
end
|
|
|
|
|
|
|
|
defmodule PipelineInstrumenter do
|
|
|
|
use Prometheus.PlugPipelineInstrumenter
|
|
|
|
end
|
|
|
|
|
|
|
|
defmodule MetricsExporter do
|
|
|
|
use Prometheus.PlugExporter
|
|
|
|
end
|
|
|
|
|
|
|
|
plug(PipelineInstrumenter)
|
|
|
|
plug(MetricsExporter)
|
|
|
|
|
2018-03-30 07:01:53 -06:00
|
|
|
plug(Pleroma.Web.Router)
|
2017-03-17 10:09:58 -06:00
|
|
|
|
|
|
|
@doc """
|
|
|
|
Dynamically loads configuration from the system environment
|
|
|
|
on startup.
|
|
|
|
|
|
|
|
It receives the endpoint configuration from the config files
|
|
|
|
and must return the updated configuration.
|
|
|
|
"""
|
|
|
|
def load_from_system_env(config) do
|
|
|
|
port = System.get_env("PORT") || raise "expected the PORT environment variable to be set"
|
|
|
|
{:ok, Keyword.put(config, :http, [:inet6, port: port])}
|
|
|
|
end
|
2019-02-01 11:56:18 -07:00
|
|
|
|
|
|
|
def websocket_url do
|
2019-02-01 12:35:19 -07:00
|
|
|
String.replace_leading(url(), "http", "ws")
|
2019-02-01 11:56:18 -07:00
|
|
|
end
|
2017-03-17 10:09:58 -06:00
|
|
|
end
|