2.0+ public access setup

config.py

@@ -6,9 +6,10 @@ from pathlib import Path
 
 BASE_DIR = Path(__file__).resolve().parent
 DATA_PATH = BASE_DIR / "data" / "entries.csv"
+DEFAULT_DATABASE_URL = f"sqlite:///{BASE_DIR / 'data' / 'boker-dev.sqlite3'}"
 
 ELIGIBLE_MIN_SESSIONS = 3
-APP_VERSION = "1.8.6"
+APP_VERSION = "2.3.0"
 
 
 def load_local_env(env_path: Path) -> None:
@@ -32,9 +33,23 @@ load_local_env(BASE_DIR / ".env")
 class Config:
     APP_VERSION: str = APP_VERSION
     SECRET_KEY: str = os.getenv("SECRET_KEY", "change-this-before-deploying")
-    ADMIN_USERNAME: str = os.getenv("ADMIN_USERNAME", "admin")
-    ADMIN_PASSWORD: str = os.getenv("ADMIN_PASSWORD", "change-me")
+    SQLALCHEMY_DATABASE_URI: str = os.getenv("DATABASE_URL", DEFAULT_DATABASE_URL)
+    SQLALCHEMY_TRACK_MODIFICATIONS: bool = False
     SESSION_COOKIE_HTTPONLY: bool = True
     SESSION_COOKIE_SAMESITE: str = "Lax"
     SESSION_COOKIE_NAME: str = "poker_portal_session"
     DATA_PATH: Path = DATA_PATH
+    WTF_CSRF_TIME_LIMIT: int = 3600
+    APP_BASE_URL: str = os.getenv("APP_BASE_URL", "http://localhost:5000")
+    MAIL_SERVER: str = os.getenv("MAIL_SERVER", "")
+    MAIL_PORT: int = int(os.getenv("MAIL_PORT", "587"))
+    MAIL_USE_TLS: bool = os.getenv("MAIL_USE_TLS", "true").lower() in ("true", "1", "yes")
+    MAIL_USERNAME: str | None = os.getenv("MAIL_USERNAME") or None
+    MAIL_PASSWORD: str | None = os.getenv("MAIL_PASSWORD") or None
+    MAIL_DEFAULT_SENDER: str = os.getenv("MAIL_DEFAULT_SENDER", "noreply@myboker.org")
+
+
+class ProductionConfig(Config):
+    SESSION_COOKIE_SECURE: bool = True
+    SESSION_COOKIE_SAMESITE: str = "Strict"
+    PREFERRED_URL_SCHEME: str = "https"