mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-10-30 16:47:01 +09:00
Juan DenisandClaude Fable 5
5417c39100
An audit found 102 FK columns with no index — every join, per-parent listing, and the delete cascades from _delete_cascade_policy scanned whole tables on them (deployments.app_id, audit_logs.user_id, dns_records.zone_id, webhook_logs.webhook_id, ...). All FK columns now declare index=True; migration 096 creates the same indexes on existing installs, deriving the list from the live schema at upgrade time (so it is idempotent and cannot drift from what an install actually has). Ratchet: test_every_fk_column_is_indexed pins the rule with no allowlist — a new FK column is born indexed or the build fails. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
58 lines
2.2 KiB
Python
58 lines
2.2 KiB
Python
from datetime import datetime
|
|
import secrets
|
|
from app import db
|
|
|
|
|
|
class DdnsHost(db.Model):
|
|
"""A dynamic-DNS binding: a hostname whose A/AAAA record is updated on
|
|
demand through a secret token — the URL a home router or cron job calls
|
|
whenever its public IP changes."""
|
|
__tablename__ = 'ddns_hosts'
|
|
|
|
id = db.Column(db.Integer, primary_key=True)
|
|
zone_id = db.Column(db.Integer, db.ForeignKey('dns_zones.id'), nullable=False, index=True)
|
|
# Record name within the zone: '@' for the apex, or e.g. 'home' for
|
|
# home.example.com. Matches DNSRecord.name.
|
|
record_name = db.Column(db.String(256), nullable=False, default='@')
|
|
label = db.Column(db.String(128))
|
|
token = db.Column(db.String(64), nullable=False, unique=True, index=True)
|
|
|
|
last_ip = db.Column(db.String(45)) # last IP applied (IPv4 or IPv6)
|
|
last_update_at = db.Column(db.DateTime)
|
|
enabled = db.Column(db.Boolean, default=True, nullable=False)
|
|
|
|
created_at = db.Column(db.DateTime, default=datetime.utcnow)
|
|
|
|
# Parent-side backref so the delete-cascade policy covers the NOT NULL FK:
|
|
# a DDNS host is meaningless without its zone.
|
|
zone = db.relationship('DNSZone',
|
|
backref=db.backref('ddns_hosts', lazy='dynamic'))
|
|
|
|
@staticmethod
|
|
def generate_token():
|
|
return secrets.token_urlsafe(32)
|
|
|
|
@property
|
|
def hostname(self):
|
|
domain = self.zone.domain if self.zone else ''
|
|
if self.record_name in ('@', '', None):
|
|
return domain
|
|
return f'{self.record_name}.{domain}'
|
|
|
|
def to_dict(self, include_token=False):
|
|
data = {
|
|
'id': self.id,
|
|
'zone_id': self.zone_id,
|
|
'record_name': self.record_name,
|
|
'label': self.label,
|
|
'hostname': self.hostname,
|
|
'last_ip': self.last_ip,
|
|
'last_update_at': self.last_update_at.isoformat() if self.last_update_at else None,
|
|
'enabled': self.enabled,
|
|
'created_at': self.created_at.isoformat() if self.created_at else None,
|
|
}
|
|
# The token is a credential — only return it when it was just minted.
|
|
if include_token:
|
|
data['token'] = self.token
|
|
return data
|