Auction handling: - Capture itemEndDate from eBay Browse API and ending_date from ZenMarket (Yahoo JP); plumb through results.ends_at column. Permissive ZenMarket parser (multiple layouts, JST when offset missing). - Per-row "Ends" countdown column + "Ending soon" banner on results pages, live-ticked by flair.js with urgent/critical tinting under 1h/5m. - Backfill ends_at for known auctions when their URL reappears in a poll (dedup hit no longer drops the new end time). - Hide ended auctions from result listings by default via ResultsQuery.ExcludeEnded; rows stay in the DB. Visual flair: - Glassy backdrop-blur v-cards with gradient-mask borders and hover-lift. - htmx swap fade-in via transient .v-just-swapped class. - Count-up animation on dashboard stats. All animations gated behind prefers-reduced-motion. eBay condition + region filters (auctions-style scoping): - items.condition and items.region columns; threaded through item form, CreateItem/UpdateItem, scheduler eBay plan input, and previewKey so cache invalidates when these change. - ebay.SearchParams gains conditionIds and itemLocationCountry filters. Run Now reload + countdown engine: - Run Now now sets HX-Refresh: true (non-htmx fallback: 303 redirect) so the entire results view — best price, chart, badge, last polled — reflects the new poll, instead of swapping just one partial. Pre-launch hardening (P1 set): - auth.EqualizeLoginTiming on no-such-user branch. - (*App).serverError centralizes 500s; replaces err.Error() leaks across results/settings/items/users/dashboard handlers. - main.go server: ReadTimeout 30s / WriteTimeout 60s / IdleTimeout 120s alongside the existing ReadHeaderTimeout. - noListFS wrapper blocks static directory listings. - Credential fields in settings no longer render value=; blank submission preserves the saved value, with per-field "Saved in settings / Set in config.toml / Not set" status indicator. Misc: - -debug flag wires slog to LevelDebug; raw ZenMarket items logged for format diagnosis. - /healthz public endpoint for reverse-proxy probes. - deploy/veola.service systemd unit template (hardening flags, single ReadWritePaths=/var/lib/veola). - handlers_test.go covers /healthz, setup-gate redirect, auth gate, and /login render with httptest + in-memory sqlite. - best_price_currency on items; templates pick the right symbol per row. - .gitignore now excludes *.log / veola-debug.log. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
123 lines
3.0 KiB
Go
123 lines
3.0 KiB
Go
package main
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"flag"
|
|
"fmt"
|
|
"log/slog"
|
|
"net/http"
|
|
"os"
|
|
"os/signal"
|
|
"syscall"
|
|
"time"
|
|
// Embed the timezone database so eBay's Pacific-time quota reset resolves
|
|
// correctly even on minimal hosts without system zoneinfo.
|
|
_ "time/tzdata"
|
|
|
|
"veola/internal/apify"
|
|
"veola/internal/auth"
|
|
"veola/internal/config"
|
|
"veola/internal/crypto"
|
|
"veola/internal/db"
|
|
"veola/internal/handlers"
|
|
"veola/internal/ntfy"
|
|
"veola/internal/scheduler"
|
|
)
|
|
|
|
func main() {
|
|
configPath := flag.String("config", "config.toml", "path to config TOML file")
|
|
debug := flag.Bool("debug", false, "enable debug-level logging (verbose; raw external payloads logged)")
|
|
flag.Parse()
|
|
|
|
level := slog.LevelInfo
|
|
if *debug {
|
|
level = slog.LevelDebug
|
|
}
|
|
slog.SetDefault(slog.New(slog.NewTextHandler(os.Stderr, &slog.HandlerOptions{Level: level})))
|
|
|
|
if *debug {
|
|
slog.Debug("debug logging enabled")
|
|
}
|
|
|
|
if err := run(*configPath); err != nil {
|
|
slog.Error("fatal", "err", err)
|
|
os.Exit(1)
|
|
}
|
|
}
|
|
|
|
func run(configPath string) error {
|
|
cfg, err := config.Load(configPath)
|
|
if err != nil {
|
|
return fmt.Errorf("config: %w", err)
|
|
}
|
|
|
|
key, err := crypto.DeriveKey([]byte(cfg.Security.EncryptionKey))
|
|
if err != nil {
|
|
return fmt.Errorf("derive key: %w", err)
|
|
}
|
|
|
|
sqlDB, err := db.Open(cfg.Server.DBPath)
|
|
if err != nil {
|
|
return fmt.Errorf("db open: %w", err)
|
|
}
|
|
defer sqlDB.Close()
|
|
|
|
store := db.NewStore(sqlDB, key)
|
|
authMgr, err := auth.NewManager(sqlDB, store, cfg.Security.SessionSecret, cfg.Server.UseSecureCookies())
|
|
if err != nil {
|
|
return fmt.Errorf("auth manager: %w", err)
|
|
}
|
|
|
|
apifyClient := apify.New(cfg.Apify.APIKey)
|
|
ntfyClient := ntfy.New(cfg.Ntfy.BaseURL)
|
|
sched := scheduler.New(cfg, store, apifyClient, ntfyClient)
|
|
|
|
startCtx, cancelStart := context.WithTimeout(context.Background(), 30*time.Second)
|
|
defer cancelStart()
|
|
if err := sched.Start(startCtx); err != nil {
|
|
return fmt.Errorf("scheduler start: %w", err)
|
|
}
|
|
|
|
app := handlers.New(cfg, store, authMgr, apifyClient, ntfyClient, sched)
|
|
addr := fmt.Sprintf(":%d", cfg.Server.Port)
|
|
srv := &http.Server{
|
|
Addr: addr,
|
|
Handler: app.Routes(),
|
|
ReadHeaderTimeout: 10 * time.Second,
|
|
ReadTimeout: 30 * time.Second,
|
|
WriteTimeout: 60 * time.Second,
|
|
IdleTimeout: 120 * time.Second,
|
|
}
|
|
|
|
errCh := make(chan error, 1)
|
|
go func() {
|
|
slog.Info("listening", "addr", addr)
|
|
if err := srv.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
|
|
errCh <- err
|
|
}
|
|
close(errCh)
|
|
}()
|
|
|
|
sigCh := make(chan os.Signal, 1)
|
|
signal.Notify(sigCh, syscall.SIGINT, syscall.SIGTERM)
|
|
|
|
select {
|
|
case sig := <-sigCh:
|
|
slog.Info("shutting down", "signal", sig.String())
|
|
case err := <-errCh:
|
|
if err != nil {
|
|
return fmt.Errorf("http: %w", err)
|
|
}
|
|
}
|
|
|
|
shutdownCtx, cancelShutdown := context.WithTimeout(context.Background(), 30*time.Second)
|
|
defer cancelShutdown()
|
|
if err := srv.Shutdown(shutdownCtx); err != nil {
|
|
slog.Error("http shutdown", "err", err)
|
|
}
|
|
sched.Stop()
|
|
slog.Info("shutdown complete")
|
|
return nil
|
|
}
|