NixReaperandClaude Sonnet 5
fef914db36
CI / lint (push) Canceled after 0s
CI / typecheck (push) Canceled after 0s
CI / unit-tests (push) Canceled after 0s
CI / integration-tests (push) Canceled after 0s
CI / container-build (push) Canceled after 0s
CI / dependency-audit (push) Canceled after 0s
Section 10: every image API responses reference has pointed straight at TMDb's CDN since day one -- Aurora never actually downloaded or served artwork itself, despite storing dimensions/checksum/local_path columns for exactly that. Closes the gap: - is_primary was declared on the Artwork model but never actually set anywhere -- every row defaulted to False. Now the normalizer marks the one image each provider designates as *the* image for an entity (TMDb's poster_path/backdrop_path/profile_path) as primary, distinct from the dozens of alternates also ingested, including correctly marking an existing row primary (not inserting a duplicate) when that image already appears in the alternates list. - app/services/artwork/: an ArtworkStorage interface with a LocalDiskStorage implementation (checksum-named files, single-host deployment via a Docker volume shared between api and worker -- see docs/architecture.md for the S3/R2 upgrade path), and a download pipeline with content-type validation, a size cap, and path-traversal protection. - After movie/series/person ingestion succeeds, tasks.py cascades one download_artwork_task per primary artwork id via arq's ctx['redis'] (same fan-out pattern as the season cascade) -- fire-and-forget, not tracked in ingestion_jobs, since a failed image cache is a known-safe fallback to the provider URL, not a user-facing failure. - app/main.py serves MEDIA_ROOT at MEDIA_URL_PREFIX; local_path is preferred over original_url once set (already-existing fallback logic in app/services/common.py:artwork_url, now actually exercised). Also fixes a real interaction bug this surfaced: every ingestion pipeline deleted and recreated all of an entity's Artwork rows on each re-sync, which would have silently wiped local_path/checksum on every re-ingestion, forcing a full re-download every time and defeating the point of caching locally at all. app/repositories/polymorphic.py's new sync_artwork upserts by provider_asset_id (TMDb's stable per-image path) instead, preserving downloaded copies across re-sync, and replaces three near-identical delete+recreate helpers that used to live separately in movie_ingestion.py, series_ingestion.py, and person_ingestion.py. Co-Authored-By: Claude Sonnet 5 <[email protected]>
52 lines
1.5 KiB
Bash
52 lines
1.5 KiB
Bash
# Copy to .env and fill in real values for local development.
|
|
# NEVER commit a real .env file.
|
|
|
|
# --- Runtime ---
|
|
AURORA_ENV=development
|
|
AURORA_LOG_LEVEL=INFO
|
|
AURORA_API_DOCS_ENABLED=true
|
|
|
|
# --- Database ---
|
|
# Async URL used by the application (asyncpg driver).
|
|
DATABASE_URL=postgresql+asyncpg://aurora:aurora@localhost:5432/aurora_core
|
|
# Sync URL used by Alembic migrations (psycopg2 driver).
|
|
DATABASE_URL_SYNC=postgresql+psycopg2://aurora:aurora@localhost:5432/aurora_core
|
|
DATABASE_POOL_SIZE=10
|
|
DATABASE_MAX_OVERFLOW=20
|
|
|
|
# --- Redis ---
|
|
REDIS_URL=redis://localhost:6379/0
|
|
# If false, the app runs without caching/rate-limiting when Redis is unreachable
|
|
# instead of failing readiness checks.
|
|
REDIS_REQUIRED=false
|
|
|
|
# --- Security ---
|
|
# Generate with: python -c "import secrets; print(secrets.token_urlsafe(48))"
|
|
AURORA_SECRET_KEY=changeme-generate-a-real-secret
|
|
# Comma-separated API keys allowed to call /api/v1/admin/* endpoints.
|
|
AURORA_ADMIN_API_KEYS=changeme-admin-key
|
|
|
|
# --- CORS ---
|
|
CORS_ORIGINS=http://localhost:3000,http://localhost:5173
|
|
|
|
# --- Providers ---
|
|
# https://www.themoviedb.org/settings/api
|
|
TMDB_API_KEY=
|
|
|
|
# --- Workers ---
|
|
WORKER_CONCURRENCY=4
|
|
|
|
# --- Caching ---
|
|
CACHE_DEFAULT_TTL=300
|
|
|
|
# --- Rate limiting ---
|
|
RATE_LIMIT_ENABLED=true
|
|
RATE_LIMIT_PER_MINUTE=120
|
|
|
|
# --- Artwork storage ---
|
|
# Local disk, shared between the api and worker containers via a volume
|
|
# (see docker-compose.yml) -- the worker downloads here, the api serves it.
|
|
MEDIA_ROOT=./media
|
|
MEDIA_URL_PREFIX=/media
|
|
ARTWORK_DOWNLOAD_MAX_BYTES=15728640
|