michael
445e751c16
- Add CORS headers to all API responses in main.lua - Implement OPTIONS preflight request handling - Add environment-variable based CORS origin configuration - Create production.env.example for deployment documentation - Update .env.example with CORS_ALLOWED_ORIGINS setting Resolves cross-origin request blocking for Hugo dev server integration. CORS origins now configurable via CORS_ALLOWED_ORIGINS environment variable for production deployments while maintaining dev-friendly defaults. Related to #49
61 lines
2 KiB
Lua
61 lines
2 KiB
Lua
-- furt-lua/config/server.lua
|
|
-- Server configuration for Furt Lua HTTP-Server
|
|
|
|
return {
|
|
-- HTTP Server settings
|
|
host = "127.0.0.1",
|
|
port = 8080,
|
|
|
|
-- Timeouts (seconds)
|
|
client_timeout = 10,
|
|
|
|
-- CORS Configuration
|
|
cors = {
|
|
-- Default allowed origins for development
|
|
-- Override in production with CORS_ALLOWED_ORIGINS environment variable
|
|
allowed_origins = (function()
|
|
local env_origins = os.getenv("CORS_ALLOWED_ORIGINS")
|
|
if env_origins then
|
|
-- Parse comma-separated list from environment
|
|
local origins = {}
|
|
for origin in env_origins:gmatch("([^,]+)") do
|
|
table.insert(origins, origin:match("^%s*(.-)%s*$")) -- trim whitespace
|
|
end
|
|
return origins
|
|
else
|
|
-- Default development origins
|
|
return {
|
|
"http://localhost:1313", -- Hugo dev server
|
|
"http://127.0.0.1:1313", -- Hugo dev server alternative
|
|
"http://localhost:3000", -- Common dev port
|
|
"http://127.0.0.1:3000" -- Common dev port alternative
|
|
}
|
|
end
|
|
end)()
|
|
},
|
|
|
|
-- Logging
|
|
log_level = "info",
|
|
log_requests = true,
|
|
|
|
-- Security (for future use)
|
|
api_keys = {
|
|
["hugo-frontend-key"] = {
|
|
name = "Hugo Frontend",
|
|
permissions = {"mail:send"},
|
|
allowed_ips = {"127.0.0.1", "10.0.0.0/8"}
|
|
}
|
|
},
|
|
|
|
-- Mail configuration (for SMTP integration)
|
|
mail = {
|
|
smtp_server = os.getenv("SMTP_HOST") or "mail.dragons-at-work.de",
|
|
smtp_port = tonumber(os.getenv("SMTP_PORT")) or 465,
|
|
use_ssl = true,
|
|
username = os.getenv("SMTP_USERNAME"),
|
|
password = os.getenv("SMTP_PASSWORD"),
|
|
from_address = os.getenv("SMTP_FROM") or "noreply@dragons-at-work.de",
|
|
to_address = os.getenv("SMTP_TO") or "michael@dragons-at-work.de"
|
|
}
|
|
}
|
|
|