mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-10-28 23:57:58 +09:00
Juan DenisandClaude Fable 5
5417c39100
An audit found 102 FK columns with no index — every join, per-parent listing, and the delete cascades from _delete_cascade_policy scanned whole tables on them (deployments.app_id, audit_logs.user_id, dns_records.zone_id, webhook_logs.webhook_id, ...). All FK columns now declare index=True; migration 096 creates the same indexes on existing installs, deriving the list from the live schema at upgrade time (so it is idempotent and cannot drift from what an install actually has). Ratchet: test_every_fk_column_is_indexed pins the rule with no allowlist — a new FK column is born indexed or the build fails. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
53 lines
2.4 KiB
Python
53 lines
2.4 KiB
Python
"""Base domains that managed sites can be published under.
|
|
|
|
ServerKit publishes a managed site at ``<slug>.<base_domain>``. Historically
|
|
there was exactly one base domain (the ``sites_base_domain`` setting); this
|
|
model lets an operator register several — e.g. ``example.com`` and ``toto.com`` —
|
|
each with its own DNS provider connection and wildcard certificate, so a new
|
|
site can choose which one to live under (``a.example.com`` vs ``a.toto.com``).
|
|
|
|
Exactly one row is the default, used when a create request doesn't name a base.
|
|
On upgrade the legacy single setting is lazily materialised into the default row
|
|
(see SiteBaseDomainService.ensure_seeded); a fresh/dev install with no rows keeps
|
|
falling back to the ``sites_base_domain`` setting / ``SITES_BASE_DOMAIN`` config.
|
|
"""
|
|
from datetime import datetime
|
|
|
|
from app import db
|
|
from app.models.mixins import TimestampMixin
|
|
|
|
|
|
class SiteBaseDomain(TimestampMixin, db.Model):
|
|
__tablename__ = 'site_base_domains'
|
|
|
|
DNS_MODES = ('wildcard', 'per-site')
|
|
|
|
id = db.Column(db.Integer, primary_key=True)
|
|
domain = db.Column(db.String(253), nullable=False, unique=True)
|
|
is_default = db.Column(db.Boolean, nullable=False, default=False)
|
|
# wildcard: one *.<domain> record covers every site; per-site: each site gets
|
|
# its own A record auto-created via the provider.
|
|
dns_mode = db.Column(db.String(20), nullable=False, default='wildcard')
|
|
# True once a *.<domain> wildcard certificate exists, so its sites serve TLS.
|
|
https_enabled = db.Column(db.Boolean, nullable=False, default=False)
|
|
# The connected DNS provider that owns this domain's zone — used to create the
|
|
# wildcard record and issue the wildcard cert. Nullable: a domain may be
|
|
# registered before HTTPS is set up, or have its DNS managed manually.
|
|
dns_provider_config_id = db.Column(
|
|
db.Integer,
|
|
db.ForeignKey('dns_provider_configs.id', ondelete='SET NULL'),
|
|
nullable=True,
|
|
index=True,
|
|
)
|
|
|
|
def to_dict(self):
|
|
return {
|
|
'id': self.id,
|
|
'domain': self.domain,
|
|
'is_default': self.is_default,
|
|
'dns_mode': self.dns_mode if self.dns_mode in self.DNS_MODES else 'wildcard',
|
|
'https_enabled': bool(self.https_enabled),
|
|
'dns_provider_config_id': self.dns_provider_config_id,
|
|
'created_at': self.created_at.isoformat() if self.created_at else None,
|
|
}
|