mrKamooandClaude Sonnet 5
c35833ed0b
L'édition de fichier nécessitait que le process web ait un accès en écriture sur .env — problématique en prod (permissions, plusieurs instances). À la place : - Table `settings` (clé/valeur) + SettingsRegistry, une liste blanche explicite des réglages modifiables (mail, OnlyOffice, GLPI, nom/URL de l'app) mappés vers leur chemin de config Laravel. - Volontairement exclu : tout ce qui touche à l'infrastructure (APP_KEY, DB_*, SESSION_DRIVER, CACHE_STORE, QUEUE_CONNECTION...) — ces valeurs sont nécessaires avant même qu'une connexion BDD existe, donc une surcharge en base ne serait pas fiable et reste réservée au .env. - AppServiceProvider applique les surcharges au boot (cache 5 min, invalidé immédiatement à l'enregistrement) ; le reste du code continue de lire config() normalement, sans changement ailleurs. - Tant qu'aucun réglage n'est enregistré, le comportement reste identique au .env actuel — transition sans rupture. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
72 lines
3.1 KiB
PHP
72 lines
3.1 KiB
PHP
<?php
|
|
|
|
namespace App\Services;
|
|
|
|
/**
|
|
* Whitelist of settings administrators can override from the database instead
|
|
* of editing .env directly. Deliberately excludes anything read at the very
|
|
* start of the boot process (APP_KEY, DB_*, SESSION_DRIVER, CACHE_STORE,
|
|
* QUEUE_CONNECTION, ...): those are resolved before a database connection —
|
|
* or before this override even runs — so changing them here wouldn't
|
|
* reliably take effect, and getting DB_* wrong here could lock everyone out.
|
|
* Only settings that are safe to read lazily, at point of use, belong here.
|
|
*/
|
|
class SettingsRegistry
|
|
{
|
|
/**
|
|
* @var array<string, array<string, array{config: string, label: string}>>
|
|
*/
|
|
public const SETTINGS = [
|
|
'Application' => [
|
|
'APP_NAME' => ['config' => 'app.name', 'label' => "Nom de l'application"],
|
|
'APP_URL' => ['config' => 'app.url', 'label' => 'URL de base'],
|
|
],
|
|
'Mail' => [
|
|
'MAIL_MAILER' => ['config' => 'mail.default', 'label' => 'Pilote (mailer)'],
|
|
'MAIL_HOST' => ['config' => 'mail.mailers.smtp.host', 'label' => 'Hôte SMTP'],
|
|
'MAIL_PORT' => ['config' => 'mail.mailers.smtp.port', 'label' => 'Port SMTP'],
|
|
'MAIL_SCHEME' => ['config' => 'mail.mailers.smtp.scheme', 'label' => 'Schéma (tls, ssl…)'],
|
|
'MAIL_USERNAME' => ['config' => 'mail.mailers.smtp.username', 'label' => 'Utilisateur SMTP'],
|
|
'MAIL_PASSWORD' => ['config' => 'mail.mailers.smtp.password', 'label' => 'Mot de passe SMTP'],
|
|
'MAIL_FROM_ADDRESS' => ['config' => 'mail.from.address', 'label' => 'Adresse expéditeur'],
|
|
'MAIL_FROM_NAME' => ['config' => 'mail.from.name', 'label' => 'Nom expéditeur'],
|
|
],
|
|
'OnlyOffice' => [
|
|
'ONLYOFFICE_DS_URL' => ['config' => 'onlyoffice.document_server_url', 'label' => 'URL du serveur de documents'],
|
|
'ONLYOFFICE_CALLBACK_BASE_URL' => ['config' => 'onlyoffice.callback_base_url', 'label' => 'URL de rappel (callback)'],
|
|
'ONLYOFFICE_JWT_SECRET' => ['config' => 'onlyoffice.jwt_secret', 'label' => 'Secret JWT'],
|
|
],
|
|
'GLPI' => [
|
|
'GLPI_API_URL' => ['config' => 'glpi.api_url', 'label' => "URL de l'API"],
|
|
'GLPI_APP_TOKEN' => ['config' => 'glpi.app_token', 'label' => 'Jeton application'],
|
|
'GLPI_USER_TOKEN' => ['config' => 'glpi.user_token', 'label' => 'Jeton utilisateur'],
|
|
'GLPI_CACHE_TTL' => ['config' => 'glpi.cache_ttl_seconds', 'label' => 'Durée du cache (secondes)'],
|
|
],
|
|
];
|
|
|
|
public const CACHE_KEY = 'settings.overrides';
|
|
|
|
public static function isSensitive(string $key): bool
|
|
{
|
|
return (bool) preg_match('/PASSWORD|SECRET|TOKEN|KEY/i', $key);
|
|
}
|
|
|
|
/**
|
|
* Flat env-style key => config path map, for applying overrides at boot.
|
|
*
|
|
* @return array<string, string>
|
|
*/
|
|
public static function configMap(): array
|
|
{
|
|
$map = [];
|
|
|
|
foreach (self::SETTINGS as $section) {
|
|
foreach ($section as $envKey => $meta) {
|
|
$map[$envKey] = $meta['config'];
|
|
}
|
|
}
|
|
|
|
return $map;
|
|
}
|
|
}
|