Безопасность и публикация: убраны корпоративные следы, исправлены зависимости, SECRET_KEY обязателен
This commit is contained in:
@@ -20,6 +20,13 @@ def create_app(config_class=Config):
|
||||
app = Flask(__name__)
|
||||
app.config.from_object(config_class)
|
||||
|
||||
secret_key = app.config.get("SECRET_KEY", "")
|
||||
if not secret_key or secret_key == "change-me-in-production":
|
||||
raise RuntimeError(
|
||||
"SECRET_KEY не задан или равен значению по умолчанию. "
|
||||
"Задайте уникальный секретный ключ через переменную окружения SECRET_KEY или файл .env."
|
||||
)
|
||||
|
||||
# Ensure upload directories exist
|
||||
os.makedirs(app.config["PHOTO_FOLDER"], exist_ok=True)
|
||||
os.makedirs(app.config["QR_FOLDER"], exist_ok=True)
|
||||
|
||||
@@ -68,7 +68,7 @@
|
||||
<div class="mb-4">
|
||||
<label for="ews_url" class="form-label">EWS URL</label>
|
||||
<input type="text" class="form-control" id="ews_url" name="ews_url" value="{{ settings.ews_url or '' }}" placeholder="https://mail.company.com/EWS/Exchange.asmx">
|
||||
<div class="form-text text-muted">URL вида <code>https://mail.integrita.ru/EWS/Exchange.asmx</code></div>
|
||||
<div class="form-text text-muted">URL вида <code>https://mail.company.com/EWS/Exchange.asmx</code></div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
@@ -88,7 +88,7 @@
|
||||
<div class="row">
|
||||
<div class="col-md-8 mb-3">
|
||||
<label for="imap_server" class="form-label">IMAP-сервер</label>
|
||||
<input type="text" class="form-control" id="imap_server" name="imap_server" value="{{ settings.imap_server or '' }}" placeholder="mail.integrita.ru">
|
||||
<input type="text" class="form-control" id="imap_server" name="imap_server" value="{{ settings.imap_server or '' }}" placeholder="imap.example.com">
|
||||
</div>
|
||||
<div class="col-md-4 mb-3">
|
||||
<label for="imap_port" class="form-label">Порт</label>
|
||||
|
||||
@@ -7,7 +7,6 @@
|
||||
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet">
|
||||
<link rel="stylesheet" href="{{ url_for('static', filename='css/style.css') }}">
|
||||
<link rel="icon" type="image/png" href="{{ url_for('static', filename='images/inviteme_logo.png') }}">
|
||||
<!-- InviteMe — crafted for mycloud24.ru -->
|
||||
</head>
|
||||
<body>
|
||||
<nav class="navbar navbar-expand-lg navbar-dark">
|
||||
@@ -81,9 +80,5 @@
|
||||
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js"></script>
|
||||
{% block scripts %}{% endblock %}
|
||||
|
||||
<div class="easter-egg-star" title="о создателе">
|
||||
★
|
||||
<span class="ee-tooltip">crafted for mycloud24.ru</span>
|
||||
</div>
|
||||
</body>
|
||||
</html>
|
||||
|
||||
Reference in New Issue
Block a user