rogee
aeddedf2a3
Restructure the monorepo into clear top-level directories: - backend/: Go module root (cmd, internal, pkg, configs, migrations, docs/swagger, scripts, tests, go.mod, Makefile, .air.toml) - deploy/: Docker (Dockerfile, docker-compose*), quickstart, fluentd - docs/: project documentation + reports/ (moved from repo root) - AGENTS.md: new AI coding-agent guide at repo root Update all references to the new layout: - Dockerfile: COPY backend/go.mod, COPY backend/ (context = repo root) - docker-compose files: context ../.., dockerfile deploy/docker/Dockerfile, env_file ../../.env, volume mounts ../../backend:/app - deploy/quickstart/compose.yaml: dockerfile deploy/docker/Dockerfile - CI: working-directory: backend for go commands, file deploy/docker/Dockerfile, coverage path backend/coverage.out, health_check backend/scripts/ - backend/Makefile: docker target uses -f ../deploy/docker/Dockerfile ../ - README: architecture tree, quickstart, config paths updated Move root stray scripts (rename_models.*, run_m11_tests.sh, verify_build.sh, gorm_bool_main.go) to backend/scripts/legacy/. All moves via git mv to preserve history. Build, vet, SQLite tests, and docker compose config verified.
73 lines
2.7 KiB
YAML
73 lines
2.7 KiB
YAML
server:
|
|
host: "0.0.0.0"
|
|
port: 3000
|
|
mode: "debug" # debug, release, test
|
|
cors:
|
|
allowed_origins: [] # empty = Allow-Origin:* in debug mode; production must list exact origins
|
|
# Examples:
|
|
# - "https://app.example.com"
|
|
# - "*.example.com"
|
|
allowed_methods: ["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS"]
|
|
allowed_headers: ["Origin", "Content-Type", "Accept", "Authorization", "X-Account-ID", "access-token", "client", "uid", "token-type", "expiry"]
|
|
expose_headers: ["Content-Length", "access-token", "client", "uid", "token-type", "expiry"]
|
|
allow_credentials: false # set to true only if you need cookies/auth headers
|
|
max_age: 86400 # preflight cache duration in seconds
|
|
|
|
database:
|
|
host: "localhost"
|
|
port: 5432
|
|
user: "gochat"
|
|
password: "gochat_dev"
|
|
dbname: "gochat_dev"
|
|
sslmode: "disable"
|
|
max_idle_conns: 10
|
|
max_open_conns: 100
|
|
conn_max_lifetime: 3600 # seconds
|
|
run_migrations: false # set to true to auto-run migrations on startup
|
|
migrations_path: "migrations"
|
|
|
|
redis:
|
|
host: "localhost"
|
|
port: 6379
|
|
password: ""
|
|
db: 0
|
|
pool_size: 50
|
|
|
|
jwt:
|
|
secret: "gochat_dev_secret_change_in_production"
|
|
expiry_hours: 72
|
|
|
|
log:
|
|
level: "debug" # debug, info, warn, error
|
|
format: "json" # json, text
|
|
|
|
rate_limit:
|
|
enabled: true
|
|
requests_per_minute: 100 # max requests per client IP per window
|
|
window_seconds: 60 # sliding window duration in seconds
|
|
|
|
search:
|
|
# Chatwoot parity target. Use "db" only for explicit local fallback.
|
|
engine: "meilisearch"
|
|
host: "http://localhost:7700"
|
|
api_key: ""
|
|
index_prefix: "gochat_"
|
|
timeout_seconds: 5
|
|
|
|
saml:
|
|
enabled: false # SAML 2.0 SSO — enable for enterprise IdP integration
|
|
# IdP metadata: provide URL or inline XML (URL preferred for auto-refresh)
|
|
idp_metadata_url: "" # e.g. "https://idp.example.com/metadata"
|
|
idp_metadata_xml: "" # fallback: paste IdP metadata XML here
|
|
sp_entity_id: "https://gochat.example.com/saml" # our SP entity ID
|
|
acs_url: "https://gochat.example.com/api/v1/saml/acs" # Assertion Consumer Service URL
|
|
# SP key/certificate: PEM format (required for signed AuthnRequest + response validation)
|
|
sp_private_key: "" # path or inline PEM — generate with: openssl genrsa -out sp.key 2048
|
|
sp_certificate: "" # path or inline PEM — generate with: openssl req -new -x509 -key sp.key -out sp.crt
|
|
clock_drift_tolerance: 180 # seconds of allowed clock drift for NotOnOrAfter validation
|
|
attribute_map:
|
|
email: "email" # SAML attribute → GoChat email field
|
|
display_name: "displayName" # SAML attribute → GoChat name field
|
|
first_name: "firstName" # SAML attribute → first name component
|
|
last_name: "lastName" # SAML attribute → last name component
|