lukas/uis-cloud-computing
1
0
Fork 0
mirror of https://github.com/dat515-2025/Group-8.git synced 2026-03-22 06:57:47 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(infrastructure): allow ssl connection to database

Browse Source
This commit is contained in:
Lukáš Trkan
2025-09-24 00:21:04 +02:00
parent 4e90183485
commit 19abbd18cc
1 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
backend/app/db.py
View File

@@ -3,9 +3,8 @@ from typing import AsyncGenerator
from fastapi import Depends from fastapi import Depends
from fastapi_users.db import SQLAlchemyBaseUserTableUUID, SQLAlchemyUserDatabase from fastapi_users.db import SQLAlchemyBaseUserTableUUID, SQLAlchemyUserDatabase
from sqlalchemy.ext.asyncio import AsyncSession, create_async_engine from sqlalchemy.ext.asyncio import AsyncSession, create_async_engine, async_sessionmaker
from sqlalchemy.ext.declarative import DeclarativeMeta, declarative_base from sqlalchemy.ext.declarative import DeclarativeMeta, declarative_base
from sqlalchemy.orm import sessionmaker
DATABASE_URL = os.getenv("DATABASE_URL") DATABASE_URL = os.getenv("DATABASE_URL")
if not DATABASE_URL: if not DATABASE_URL:
@@ -15,11 +14,9 @@ if not DATABASE_URL:
mariadb_user = os.getenv("MARIADB_USER", "root") mariadb_user = os.getenv("MARIADB_USER", "root")
mariadb_password = os.getenv("MARIADB_PASSWORD", "strongpassword") mariadb_password = os.getenv("MARIADB_PASSWORD", "strongpassword")
#always use SSL except for localhost - i dont want to include certs #always use SSL except for localhost - i dont want to include certs
ssl_param = "?ssl=true" if mariadb_host != "localhost" else ""
if mariadb_host and mariadb_db and mariadb_user and mariadb_password: if mariadb_host and mariadb_db and mariadb_user and mariadb_password:
# Use MariaDB/MySQL over async driver # Use MariaDB/MySQL over async driver
DATABASE_URL = f"mysql+asyncmy://{mariadb_user}:{mariadb_password}@{mariadb_host}:{mariadb_port}/{mariadb_db}{ssl_param}" DATABASE_URL = f"mysql+asyncmy://{mariadb_user}:{mariadb_password}@{mariadb_host}:{mariadb_port}/{mariadb_db}"
else: else:
raise Exception("Only MariaDB is supported. Please set the DATABASE_URL environment variable.") raise Exception("Only MariaDB is supported. Please set the DATABASE_URL environment variable.")
@@ -30,12 +27,17 @@ class User(SQLAlchemyBaseUserTableUUID, Base):
pass pass
# Nastavení connect_args pro SSL pouze pokud není localhost
ssl_enabled = os.getenv("MARIADB_HOST", "localhost") != "localhost"
connect_args = {"ssl": {"ssl": True}} if ssl_enabled else {}
engine = create_async_engine( engine = create_async_engine(
DATABASE_URL, DATABASE_URL,
pool_pre_ping=True, pool_pre_ping=True,
echo=os.getenv("SQL_ECHO", "0") == "1", echo=os.getenv("SQL_ECHO", "0") == "1",
connect_args=connect_args,
) )
async_session_maker = sessionmaker(engine, class_=AsyncSession, expire_on_commit=False) async_session_maker = async_sessionmaker(engine, expire_on_commit=False)
async def create_db_and_tables(): async def create_db_and_tables():