New top-level portal/ project, peer to console/ and firmware/. Delivers a .NET 10 + React 18 + TimescaleDB + Grafana stack, one container set per customer behind Traefik. Built in 12 phases per FrontEndPrompt spec; no changes to existing console or firmware. Backend (src/Tau.Acuvim.Portal/): - .NET 10 minimal API, Serilog, ASP.NET Identity (cookie auth, lockout). - Single AppDbContext with identity / app / monitoring schemas. - MigrateAsync + TimescaleBootstrapper (idempotent hypertable creation) + IdentityBootstrapper (seeded admin + branding) on startup. - Pure CostCalculator + DB-backed RateService for tariffs (effective-dated, TOU periods, VAT, fixed charges, per-municipality timezone). - BrandingService with logo upload to mounted volume. - Time-series ingest + bucketed query services (time_bucket aggregates, ON CONFLICT for idempotent re-delivery). - ConfigOverviewService with redaction-by-construction (passwords never in payload). - DataProtection keys persisted to /data/keys volume for cookie survival across container restarts. Frontend (frontend/): - React 18 + TypeScript + Vite + Ant Design 5 + TanStack Query. - BrandingProvider + ThemedRoot for live re-themed white-labelling. - RequireAuth / RequireRole guards. - Pages: Login, Dashboard, Dashboards (embedded Grafana), Sites (admin), Settings tabs (Branding / Rates / Users / Grafana / App config). Infra: - Dev (docker-compose.yml) and prod (docker-compose.prod.yml) compose files. Three services per customer; Traefik subdomain + same-origin /grafana path-prefix routing wired with labels. - Grafana 11 with provisioned timescaledb datasource (uid pinned) and starter power-overview.json dashboard with device template variable. - Compose project name documented as lowercase (Compose v2 requirement). Tests (tests/Tau.Acuvim.Portal.Tests/): - xUnit, 40 tests. Covers CostCalculator (period match, TZ, overlap, VAT, fixed), ConnectionStringResolver (all 4 precedence branches incl. Production refusal), TariffValidator, DayOfWeekFlag. - All passing locally against .NET 10. Docs: - README.md (onboarding + 11 spec sections), OPERATIONS.md (per-customer provisioning, secret rotation, backup, troubleshooting), TESTING.md (manual integration scenarios, frontend test scaffolding recipe). Production safety guards: - Refuses to start if Authentication:DefaultAdminPassword is unchanged default in Production. - Refuses to start if Database:AutoProvisionLocalTimescaleDb=true in Production. - Prod Grafana ships with anonymous off and auth mode unset (three options documented in README Security) so iframe refuses to load until a deliberate prod auth choice is made. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
43 lines
1.7 KiB
C#
43 lines
1.7 KiB
C#
using Microsoft.Extensions.Hosting;
|
|
|
|
namespace Tau.Acuvim.Portal.Configuration;
|
|
|
|
public static class ConnectionStringResolver
|
|
{
|
|
public sealed record Resolution(string ConnectionString, string Source);
|
|
|
|
// Precedence:
|
|
// 1. Database.ConnectionString (explicit) — always wins.
|
|
// 2. Database.AutoProvisionLocalTimescaleDb == true AND env != Production — build from TimescaleDb block.
|
|
// 3. Otherwise — throw. Production must supply an explicit connection string.
|
|
public static Resolution Resolve(
|
|
DatabaseOptions database,
|
|
TimescaleDbOptions timescale,
|
|
IHostEnvironment env)
|
|
{
|
|
if (!string.IsNullOrWhiteSpace(database.ConnectionString))
|
|
{
|
|
return new Resolution(database.ConnectionString, "Database:ConnectionString");
|
|
}
|
|
|
|
if (database.AutoProvisionLocalTimescaleDb && !env.IsProduction())
|
|
{
|
|
var built =
|
|
$"Host={timescale.Host};Port={timescale.Port};Database={timescale.Database};" +
|
|
$"Username={timescale.Username};Password={timescale.Password}";
|
|
return new Resolution(built, "auto-provision from TimescaleDb section");
|
|
}
|
|
|
|
if (database.AutoProvisionLocalTimescaleDb && env.IsProduction())
|
|
{
|
|
throw new InvalidOperationException(
|
|
"AutoProvisionLocalTimescaleDb=true is not permitted in Production. " +
|
|
"Set Database:ConnectionString explicitly via env var or secret.");
|
|
}
|
|
|
|
throw new InvalidOperationException(
|
|
"No database connection string available. Set Database:ConnectionString, " +
|
|
"or enable Database:AutoProvisionLocalTimescaleDb in a non-Production environment.");
|
|
}
|
|
}
|