Noah
500456c05e
* Add a "Newest" tab to the Forums landing page to order ALL forum posts (comments) by most recent, paginated. * Add a "Views" cooldown in Redis: viewing the same post multiple times within 1 hour doesn't ++ the view count with every page load, per user per thread ID. * Update the paginators to handle unlimited numbers of pages: shows max 7 page buttons with your current page towards the middle. * General ability to jump to the "last page" of anything: use a negative page size like ?page=-1 and it acts like the last page.
100 lines
2.6 KiB
Go
100 lines
2.6 KiB
Go
// Package config holds some (mostly static) configuration for the app.
|
|
package config
|
|
|
|
import (
|
|
"regexp"
|
|
"time"
|
|
)
|
|
|
|
// Branding
|
|
const (
|
|
Title = "nonshy"
|
|
Subtitle = "A social network for nudists and exhibitionists."
|
|
)
|
|
|
|
// Paths and layouts
|
|
const (
|
|
TemplatePath = "./web/templates"
|
|
StaticPath = "./web/static"
|
|
SettingsPath = "./settings.json"
|
|
|
|
// Web path where photos are kept. Photos in DB store only their filenames, this
|
|
// is the base URL that goes in front. TODO: support setting a CDN URL prefix.
|
|
JpegQuality = 90
|
|
PhotoWebPath = "/static/photos"
|
|
PhotoDiskPath = "./web/static/photos"
|
|
)
|
|
|
|
// Security
|
|
const (
|
|
BcryptCost = 14
|
|
SessionCookieName = "session_id"
|
|
CSRFCookieName = "xsrf_token"
|
|
CSRFInputName = "_csrf" // html input name
|
|
SessionCookieMaxAge = 60 * 60 * 24 * 30
|
|
SessionRedisKeyFormat = "session/%s"
|
|
MultipartMaxMemory = 1024 * 1024 * 1024 * 20 // 20 MB
|
|
)
|
|
|
|
// Authentication
|
|
const (
|
|
// Skip the email verification step. The signup page will directly ask for
|
|
// email+username+password rather than only email and needing verification.
|
|
SkipEmailVerification = false
|
|
|
|
SignupTokenRedisKey = "signup-token/%s"
|
|
ResetPasswordRedisKey = "reset-password/%s"
|
|
ChangeEmailRedisKey = "change-email/%s"
|
|
SignupTokenExpires = 24 * time.Hour // used for all tokens so far
|
|
|
|
// Rate limit
|
|
RateLimitRedisKey = "rate-limit/%s/%s" // namespace, id
|
|
LoginRateLimitWindow = 1 * time.Hour
|
|
LoginRateLimit = 10 // 10 failed login attempts = locked for full hour
|
|
LoginRateLimitCooldownAt = 3 // 3 failed attempts = start throttling
|
|
LoginRateLimitCooldown = 30 * time.Second
|
|
|
|
// How frequently to refresh LastLoginAt since sessions are long-lived.
|
|
LastLoginAtCooldown = 8 * time.Hour
|
|
)
|
|
|
|
var (
|
|
UsernameRegexp = regexp.MustCompile(`^[a-z0-9_-]{3,32}$`)
|
|
ReservedUsernames = []string{
|
|
"admin",
|
|
"admins",
|
|
"administrator",
|
|
"moderator",
|
|
"support",
|
|
"staff",
|
|
"nonshy",
|
|
}
|
|
)
|
|
|
|
// Photo Galleries
|
|
const (
|
|
MaxPhotoWidth = 1280
|
|
ProfilePhotoWidth = 512
|
|
|
|
// Quotas for uploaded photos.
|
|
PhotoQuotaUncertified = 6
|
|
PhotoQuotaCertified = 24
|
|
)
|
|
|
|
// Forum settings
|
|
const (
|
|
// Only ++ the Views count per user per thread within a small
|
|
// window of time - if a user keeps reloading the same thread
|
|
// rapidly it does not increment the view counter more.
|
|
ThreadViewDebounceRedisKey = "debounce-view/user=%d/thr=%d"
|
|
ThreadViewDebounceCooldown = 1 * time.Hour
|
|
)
|
|
|
|
// Variables set by main.go to make them readily available.
|
|
var (
|
|
RuntimeVersion string
|
|
RuntimeBuild string
|
|
RuntimeBuildDate string
|
|
Debug bool // app is in debug mode
|
|
)
|