Pleroma/lib/pleroma/web/endpoint.ex

100 lines
2.9 KiB
Elixir
Raw Normal View History

# Pleroma: A lightweight social networking server
2018-12-31 16:41:47 +01:00
# Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
# SPDX-License-Identifier: AGPL-3.0-only
2017-03-17 17:09:58 +01:00
defmodule Pleroma.Web.Endpoint do
use Phoenix.Endpoint, otp_app: :pleroma
2018-11-16 21:35:08 +01:00
socket("/socket", Pleroma.Web.UserSocket)
2018-03-30 15:01:53 +02:00
2017-03-17 17:09:58 +01:00
# Serve at "/" the static files from "priv/static" directory.
#
# You should set gzip to true if you are running phoenix.digest
# when deploying your static files in production.
plug(CORSPlug)
2018-11-12 16:08:02 +01:00
plug(Pleroma.Plugs.HTTPSecurityPlug)
2018-11-23 17:40:45 +01:00
plug(Pleroma.Plugs.UploadedMedia)
2018-03-30 15:01:53 +02:00
# InstanceStatic needs to be before Plug.Static to be able to override shipped-static files
# If you're adding new paths to `only:` you'll need to configure them in InstanceStatic as well
plug(Pleroma.Plugs.InstanceStatic, at: "/")
2018-03-30 15:01:53 +02:00
plug(
Plug.Static,
at: "/",
from: :pleroma,
2018-11-10 12:18:25 +01:00
only:
~w(index.html robots.txt static finmoji emoji packs sounds images instance sw.js sw-pleroma.js favicon.png schemas doc)
# credo:disable-for-previous-line Credo.Check.Readability.MaxLineLength
2018-03-30 15:01:53 +02:00
)
2017-03-17 17:09:58 +01:00
# Code reloading can be explicitly enabled under the
# :code_reloader configuration of your endpoint.
if code_reloading? do
2018-03-30 15:01:53 +02:00
plug(Phoenix.CodeReloader)
2017-03-17 17:09:58 +01:00
end
2018-03-30 15:01:53 +02:00
plug(TrailingFormatPlug)
plug(Plug.RequestId)
plug(Plug.Logger)
2017-03-17 17:09:58 +01:00
2018-03-30 15:01:53 +02:00
plug(
Plug.Parsers,
2017-03-17 17:09:58 +01:00
parsers: [:urlencoded, :multipart, :json],
pass: ["*/*"],
json_decoder: Jason,
length: Application.get_env(:pleroma, :instance) |> Keyword.get(:upload_limit),
body_reader: {Pleroma.Web.Plugs.DigestPlug, :read_body, []}
2018-03-30 15:01:53 +02:00
)
2017-03-17 17:09:58 +01:00
2018-03-30 15:01:53 +02:00
plug(Plug.MethodOverride)
plug(Plug.Head)
2017-03-17 17:09:58 +01:00
2019-03-11 18:37:26 +01:00
secure_cookies = Pleroma.Config.get([__MODULE__, :secure_cookie_flag])
cookie_name =
2019-03-11 18:37:26 +01:00
if secure_cookies,
do: "__Host-pleroma_key",
else: "pleroma_key"
same_site =
if Pleroma.Config.get([:auth, :oauth_consumer_enabled]) do
# Note: "SameSite=Strict" prevents sign in with external OAuth provider (no cookies during callback request)
"SameSite=Lax"
else
"SameSite=Strict"
end
2017-03-17 17:09:58 +01:00
# The session will be stored in the cookie and signed,
# this means its contents can be read but not tampered with.
# Set :encryption_salt if you would also like to encrypt it.
2018-03-30 15:01:53 +02:00
plug(
Plug.Session,
2017-03-17 17:09:58 +01:00
store: :cookie,
key: cookie_name,
2018-11-16 21:35:08 +01:00
signing_salt: {Pleroma.Config, :get, [[__MODULE__, :signing_salt], "CqaoopA2"]},
2018-08-28 22:34:31 +02:00
http_only: true,
2019-03-11 18:37:26 +01:00
secure: secure_cookies,
extra: same_site
2018-03-30 15:01:53 +02:00
)
2017-03-17 17:09:58 +01:00
2018-03-30 15:01:53 +02:00
plug(Pleroma.Web.Router)
2017-03-17 17:09:58 +01:00
@doc """
Dynamically loads configuration from the system environment
on startup.
It receives the endpoint configuration from the config files
and must return the updated configuration.
"""
def load_from_system_env(config) do
port = System.get_env("PORT") || raise "expected the PORT environment variable to be set"
{:ok, Keyword.put(config, :http, [:inet6, port: port])}
end
def websocket_url do
String.replace_leading(url(), "http", "ws")
end
2017-03-17 17:09:58 +01:00
end