javier
dc6b22e648
This PR contains the work done to introduce a _Fluent_-based persistence layer for the Website service, selectable at runtime alongside the existing in-memory default, plus the local dev tooling and docs to support it. To provide further details about the work: * Persistence package * The `Driver` and `TLS` enumerations * The `Configuration` type * The `Service` factory that builds the service * `PrepareDB` for migrations registration * The `Probe` for readiness checks. * App integration * Builds the driver, registers migrations, and attaches `Fluent` to the service lifecycle so it starts/stops with the HTTP server. * Migrate-on-boot is gated to the in-memory backend; MySQL/MariaDB is migrated out of band via --database-migrate so shared databases never race on startup. * The `ConfigReader+Properties` extension maps database.* config keys onto the driver. * Library * Added database configuration constants. * The `HealthController` controller gains a readiness probe: `GET /health/ready` checks whether the database is reachable, separate from the existing liveness check. * Others * Updated the `docker-compose` files to support a database service behind a database profile, and hardened for local development * New database targets on the `Makefile` file and overall documentation updated * Updated the `.env.local`, `Dockerfile`, and `README` files to document the persistence workflow, config keys, and local DB commands Reviewed-on: rock-n-code/loud-amsterdam#13 Co-authored-by: Javier Cicchelli <javier@rock-n-code.com> Co-committed-by: Javier Cicchelli <javier@rock-n-code.com>
43 lines
1.3 KiB
Swift
43 lines
1.3 KiB
Swift
import NIOSSL
|
|
|
|
/// The TLS posture used when connecting to the database.
|
|
///
|
|
/// The executable derives a posture from its `database.tls` configuration and passes it along as
|
|
/// part of ``Configuration``; the MySQL driver receives the resulting `TLSConfiguration` through
|
|
/// ``tlsConfiguration``.
|
|
public enum TLS: Sendable {
|
|
|
|
/// Connect without TLS, in plaintext.
|
|
case off
|
|
|
|
/// Connect over TLS when the server offers it, falling back to plaintext otherwise.
|
|
case prefer
|
|
|
|
/// Connect only over TLS, refusing the connection when the server offers none.
|
|
case require
|
|
|
|
}
|
|
|
|
// MARK: - Properties
|
|
|
|
extension TLS {
|
|
|
|
/// The NIO TLS configuration passed to the MySQL driver for this posture.
|
|
///
|
|
/// Returns `nil` for ``off`` (connect in plaintext) and the default client configuration for
|
|
/// ``prefer`` and ``require``.
|
|
///
|
|
/// - Note: `prefer` and `require` currently map to the same client configuration — both enable TLS.
|
|
/// The distinction (fall back to plaintext vs. fail when the server offers no TLS) is not yet
|
|
/// enforced here; tighten this mapping if that guarantee becomes required.
|
|
var tlsConfiguration: TLSConfiguration? {
|
|
switch self {
|
|
case .off:
|
|
return nil
|
|
case .prefer, .require:
|
|
return .makeClientConfiguration()
|
|
}
|
|
}
|
|
|
|
}
|