feat: add email-based authentication

2026-08-03 18:49:08 +08:00
parent 82a8b4187a
commit f2209a0e00
19 changed files with 641 additions and 1555 deletions
@@ -6,15 +6,25 @@ services:
    container_name: pipeline-lifetime
    restart: unless-stopped
    environment:
+      APP_ENV: ${APP_ENV:-production}
+      DEBUG: ${DEBUG:-false}
      SECRET_KEY: ${SECRET_KEY:?Set SECRET_KEY in .env}
      ADMIN_USERNAME: ${ADMIN_USERNAME:-admin}
      ADMIN_PASSWORD: ${ADMIN_PASSWORD:?Set ADMIN_PASSWORD in .env}
+      ADMIN_EMAIL: ${ADMIN_EMAIL:?Set ADMIN_EMAIL in .env}
      DATABASE_URL: ${DATABASE_URL:-sqlite:////app/data/pipe_survival_0331.db}
      APP_TIMEZONE: ${APP_TIMEZONE:-Asia/Shanghai}
      MAX_UPLOAD_BYTES: ${MAX_UPLOAD_BYTES:-16777216}
      FUSION_MODEL_CORE_DIR: ${FUSION_MODEL_CORE_DIR:-/app/model_core}
      ALLOW_REGISTRATION: ${ALLOW_REGISTRATION:-false}
      PASSWORD_RESET_TOKEN_MINUTES: ${PASSWORD_RESET_TOKEN_MINUTES:-30}
+      RESEND_API_KEY: ${RESEND_API_KEY:-}
+      RESEND_FROM_EMAIL: ${RESEND_FROM_EMAIL:-}
+      EMAIL_CODE_MINUTES: ${EMAIL_CODE_MINUTES:-10}
+      EMAIL_CODE_RESEND_SECONDS: ${EMAIL_CODE_RESEND_SECONDS:-60}
+      EMAIL_CODE_MAX_ATTEMPTS: ${EMAIL_CODE_MAX_ATTEMPTS:-5}
+      TRUSTED_DEVICE_DAYS: ${TRUSTED_DEVICE_DAYS:-30}
+      SESSION_COOKIE_SECURE: ${SESSION_COOKIE_SECURE:-true}
    ports:
      - "5005:5005"
    volumes: