2fa17e5feb
Same routes, same Docker topology, same env vars. Frontend untouched.
Backend swap:
- Hono on Node -> FastAPI on Python 3.12, served by uvicorn behind Caddy.
- Drizzle on Node -> SQLAlchemy 2.0 async (asyncpg driver) with declarative
models that mirror the previous schema 1:1. Migrations are still plain
SQL files (apps/api/app/migrations/) run idempotently at startup by
app/db/migrate.py via asyncpg, tracking each file's sha256 in a
schema_migrations table.
- aws4fetch -> boto3 wrapped in asyncio.to_thread so the async routes
do not block on MinIO/S3 calls. The presign_put / init_multipart /
complete_multipart / head / delete contract is unchanged so the React
client sees the same /api/uploads/* payloads.
- Cookie+JWT admin auth -> pyjwt + FastAPI Cookie() dependency.
constant-time password compare. Same 7-day HttpOnly cookie shape.
- QR code: qrcode lib + reportlab. /api/qrcode keeps format=png|svg|pdf;
the PDF is still A6 with the couple's names + 'Aponte a câmera' CTA.
- Pydantic-settings replaces the zod env loader and still fails fast
on missing required vars.
Routes ported with identical paths and JSON shapes:
- public: /api/event, /api/gallery, /api/qrcode, /api/stats
- uploads: /api/uploads/init, /{id}/confirm, /{id}/abort
- admin: /login, /logout, /me, /event (GET+PATCH), /uploads (GET with
?status, ?kind=photo|video, ?q= for search), /uploads/{id} (PATCH
for author/message edit), /uploads/{id}/{approve,reject,cover},
/uploads/{id} (DELETE), /event/cover (DELETE), /uploads/bulk, /stats.
Build pipeline:
- Dockerfile: stage 1 builds the React/Vite SPA with pnpm; stage 2 is
python:3.12-slim that installs deps via uv (fast, reproducible),
copies the app/, and copies the SPA dist from stage 1 into /app/public
so the FastAPI process serves both /api/* and the SPA assets.
- docker-compose.yml unchanged: postgres + minio + minio-init + app +
caddy. Same env vars (DATABASE_URL, S3_*, ADMIN_PASSWORD, SESSION_SECRET,
ALLOWED_ADMIN_EMAILS, AUTO_MIGRATE).
- Removed apps/api from the pnpm workspace; root package.json now only
scripts the web. Makefile centralizes dev/build/docker commands so
the Python side has the same DX as the Node side did.
47 lines
1.4 KiB
SQL
47 lines
1.4 KiB
SQL
CREATE TABLE event_config (
|
|
id INTEGER PRIMARY KEY DEFAULT 1,
|
|
couple_names TEXT NOT NULL,
|
|
event_date TEXT,
|
|
cover_key TEXT,
|
|
gallery_visibility TEXT NOT NULL DEFAULT 'public',
|
|
moderation TEXT NOT NULL DEFAULT 'post',
|
|
max_file_mb INTEGER NOT NULL DEFAULT 500,
|
|
allow_video BOOLEAN NOT NULL DEFAULT TRUE,
|
|
max_video_seconds INTEGER NOT NULL DEFAULT 300,
|
|
welcome_message TEXT,
|
|
updated_at BIGINT NOT NULL DEFAULT (EXTRACT(EPOCH FROM NOW()) * 1000)::BIGINT
|
|
);
|
|
|
|
INSERT INTO event_config (id, couple_names)
|
|
VALUES (1, 'Stefanie & Leandro')
|
|
ON CONFLICT (id) DO NOTHING;
|
|
|
|
CREATE TABLE uploads (
|
|
id TEXT PRIMARY KEY,
|
|
storage_key TEXT NOT NULL,
|
|
thumbnail_key TEXT,
|
|
mime_type TEXT NOT NULL,
|
|
size_bytes BIGINT NOT NULL,
|
|
duration_seconds INTEGER,
|
|
author_name TEXT,
|
|
message TEXT,
|
|
status TEXT NOT NULL DEFAULT 'approved',
|
|
source TEXT NOT NULL DEFAULT 'guest',
|
|
ip_hash TEXT,
|
|
provider_upload_id TEXT,
|
|
created_at BIGINT NOT NULL DEFAULT (EXTRACT(EPOCH FROM NOW()) * 1000)::BIGINT,
|
|
approved_at BIGINT
|
|
);
|
|
|
|
CREATE INDEX idx_uploads_status_created ON uploads (status, created_at DESC);
|
|
CREATE INDEX idx_uploads_source ON uploads (source);
|
|
CREATE INDEX idx_uploads_author_lower ON uploads (LOWER(author_name));
|
|
|
|
CREATE TABLE audit_log (
|
|
id TEXT PRIMARY KEY,
|
|
action TEXT NOT NULL,
|
|
actor TEXT,
|
|
payload TEXT,
|
|
created_at BIGINT NOT NULL DEFAULT (EXTRACT(EPOCH FROM NOW()) * 1000)::BIGINT
|
|
);
|