Some checks failed
Build and Push Docker Image / build (push) Successful in 59s
CI / Security audit (push) Successful in 1m5s
CI / Tests & coverage (push) Successful in 1m24s
Docs Check / Markdown lint (push) Failing after 45s
Docs Check / Mermaid diagram parse check (push) Successful in 1m27s
CI / Security audit (pull_request) Successful in 51s
CI / Tests & coverage (pull_request) Successful in 1m1s
Docs Check / Markdown lint (pull_request) Failing after 39s
Docs Check / Mermaid diagram parse check (pull_request) Successful in 1m12s
Phase 1 - Licensing & Compliance: - Add MIT LICENSE file - Add copyright headers to server/index.js, poller.js, config.js, sanitizeError.js, and new loadSecrets.js Phase 2 - Security Hardening: - Add server/utils/loadSecrets.js: Docker secrets support via _FILE env var pattern (COOKIE_SECRET_FILE, EMBY_API_KEY_FILE, etc.) - Add SSRF/URL validation in config.js: validates all configured service instance URLs for scheme and well-formedness at startup - Add SIGTERM/SIGINT graceful shutdown: stops poller, drains HTTP connections, 10s force-exit fallback - Warn at startup if COOKIE_SECRET is shorter than 32 characters - Validate EMBY_URL scheme at startup - Improve sanitizeError: redact host:port from axios error URLs while preserving path/query for other redaction patterns Phase 3 - Config Robustness: - Weak COOKIE_SECRET warning (< 32 chars) - EMBY_URL validated via validateInstanceUrl on startup Phase 4 - Docker & Deployment: - .dockerignore: add tests/, coverage/, vitest.config.js, CHANGELOG.md, SECURITY.md, LICENSE, .markdownlint.json - docker-compose.yaml: add commented Option B (Docker secrets _FILE pattern) alongside existing plain-env Option A Phase 5 - Docs & Release Readiness: - Add CHANGELOG.md with entries from v1.0.0 to v1.2.0 - Update SECURITY.md: supported versions table, fix Docker secrets note to reflect _FILE support now implemented - Add public/.well-known/security.txt for responsible disclosure - Bump version to 1.2.0
105 lines
2.9 KiB
JavaScript
105 lines
2.9 KiB
JavaScript
// Copyright (c) 2025 Gordon Bolton. MIT License.
|
|
const { logToFile } = require('./logger');
|
|
|
|
// Validate that a configured service URL is well-formed and uses http(s).
|
|
// Emits a warning (never throws) so a misconfigured instance degrades
|
|
// gracefully rather than crashing the whole server.
|
|
function validateInstanceUrl(url, instanceId) {
|
|
if (!url || typeof url !== 'string') {
|
|
logToFile(`[Config] WARNING: instance "${instanceId}" has no URL configured`);
|
|
return false;
|
|
}
|
|
let parsed;
|
|
try {
|
|
parsed = new URL(url);
|
|
} catch {
|
|
logToFile(`[Config] WARNING: instance "${instanceId}" has an invalid URL: "${url}"`);
|
|
return false;
|
|
}
|
|
if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
|
|
logToFile(`[Config] WARNING: instance "${instanceId}" URL must use http or https, got "${parsed.protocol}"`);
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
function parseInstances(envVar, legacyUrl, legacyKey, legacyUsername, legacyPassword) {
|
|
// Try to parse JSON array format first
|
|
if (envVar) {
|
|
try {
|
|
// Handle multi-line JSON by removing newlines and extra spaces
|
|
const cleaned = envVar.replace(/\s+/g, ' ').trim();
|
|
const instances = JSON.parse(cleaned);
|
|
if (Array.isArray(instances) && instances.length > 0) {
|
|
logToFile(`[Config] Parsed ${instances.length} instances from JSON array`);
|
|
return instances.map((inst, idx) => {
|
|
const id = inst.name || `instance-${idx + 1}`;
|
|
validateInstanceUrl(inst.url, id);
|
|
return { ...inst, id };
|
|
});
|
|
}
|
|
} catch (err) {
|
|
logToFile(`[Config] Failed to parse JSON array: ${err.message}`);
|
|
}
|
|
}
|
|
|
|
// Fall back to legacy single-instance format
|
|
if (legacyUrl && legacyKey) {
|
|
logToFile(`[Config] Using legacy single-instance format`);
|
|
validateInstanceUrl(legacyUrl, 'default');
|
|
return [{
|
|
id: 'default',
|
|
name: 'Default',
|
|
url: legacyUrl,
|
|
apiKey: legacyKey,
|
|
username: legacyUsername,
|
|
password: legacyPassword
|
|
}];
|
|
}
|
|
|
|
return [];
|
|
}
|
|
|
|
function getSABnzbdInstances() {
|
|
return parseInstances(
|
|
process.env.SABNZBD_INSTANCES,
|
|
process.env.SABNZBD_URL,
|
|
process.env.SABNZBD_API_KEY
|
|
);
|
|
}
|
|
|
|
function getSonarrInstances() {
|
|
return parseInstances(
|
|
process.env.SONARR_INSTANCES,
|
|
process.env.SONARR_URL,
|
|
process.env.SONARR_API_KEY
|
|
);
|
|
}
|
|
|
|
function getRadarrInstances() {
|
|
return parseInstances(
|
|
process.env.RADARR_INSTANCES,
|
|
process.env.RADARR_URL,
|
|
process.env.RADARR_API_KEY
|
|
);
|
|
}
|
|
|
|
function getQbittorrentInstances() {
|
|
return parseInstances(
|
|
process.env.QBITTORRENT_INSTANCES,
|
|
process.env.QBITTORRENT_URL,
|
|
null, // no apiKey for qBittorrent
|
|
process.env.QBITTORRENT_USERNAME,
|
|
process.env.QBITTORRENT_PASSWORD
|
|
);
|
|
}
|
|
|
|
module.exports = {
|
|
getSABnzbdInstances,
|
|
getSonarrInstances,
|
|
getRadarrInstances,
|
|
getQbittorrentInstances,
|
|
parseInstances,
|
|
validateInstanceUrl
|
|
};
|