From 1529e9fdca2c535850a09077b5c5ee879f26ff01 Mon Sep 17 00:00:00 2001 From: "naps62-yolo (agent)" Date: Sat, 22 Aug 2026 19:44:50 +0100 Subject: [PATCH] Bootstrap configuration loading (#46) --- Cargo.lock | 65 +++++++ crates/arr-daemon/Cargo.toml | 6 + crates/arr-daemon/src/config.rs | 310 ++++++++++++++++++++++++++++++++ crates/arr-daemon/src/main.rs | 17 +- 4 files changed, 396 insertions(+), 2 deletions(-) create mode 100644 crates/arr-daemon/src/config.rs diff --git a/Cargo.lock b/Cargo.lock index 6ac3610..34fb6b5 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -32,6 +32,12 @@ version = "0.1.0" [[package]] name = "arr-daemon" version = "0.1.0" +dependencies = [ + "serde", + "tempfile", + "thiserror", + "toml", +] [[package]] name = "arr-db" @@ -1080,6 +1086,15 @@ dependencies = [ "zmij", ] +[[package]] +name = "serde_spanned" +version = "0.6.9" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3" +dependencies = [ + "serde", +] + [[package]] name = "serde_urlencoded" version = "0.7.1" @@ -1528,6 +1543,47 @@ dependencies = [ "tokio", ] +[[package]] +name = "toml" +version = "0.8.23" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "dc1beb996b9d83529a9e75c17a1686767d148d70663143c7854d8b4a09ced362" +dependencies = [ + "serde", + "serde_spanned", + "toml_datetime", + "toml_edit", +] + +[[package]] +name = "toml_datetime" +version = "0.6.11" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "22cddaf88f4fbc13c51aebbf5f8eceb5c7c5a9da2ac40a13519eb5b0a0e8f11c" +dependencies = [ + "serde", +] + +[[package]] +name = "toml_edit" +version = "0.22.27" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "41fe8c660ae4257887cf66394862d21dbca4a6ddd26f04a3560410406a2f819a" +dependencies = [ + "indexmap", + "serde", + "serde_spanned", + "toml_datetime", + "toml_write", + "winnow", +] + +[[package]] +name = "toml_write" +version = "0.1.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "5d99f8c9a7727884afe522e9bd5edbfc91a3312b36a77b5fb8926e4c31a41801" + [[package]] name = "tracing" version = "0.1.44" @@ -1824,6 +1880,15 @@ version = "0.48.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ed94fce61571a4006852b7389a063ab983c02eb1bb37b47f8272ce92d06d9538" +[[package]] +name = "winnow" +version = "0.7.15" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945" +dependencies = [ + "memchr", +] + [[package]] name = "writeable" version = "0.6.4" diff --git a/crates/arr-daemon/Cargo.toml b/crates/arr-daemon/Cargo.toml index 00161de..98665ed 100644 --- a/crates/arr-daemon/Cargo.toml +++ b/crates/arr-daemon/Cargo.toml @@ -11,6 +11,12 @@ name = "arr" path = "src/main.rs" [dependencies] +serde.workspace = true +thiserror.workspace = true +toml.workspace = true + +[dev-dependencies] +tempfile.workspace = true [lints] workspace = true diff --git a/crates/arr-daemon/src/config.rs b/crates/arr-daemon/src/config.rs new file mode 100644 index 0000000..afceee6 --- /dev/null +++ b/crates/arr-daemon/src/config.rs @@ -0,0 +1,310 @@ +//! Bootstrap configuration. See DESIGN.md §10: only these settings come from +//! config/env; everything else lives in the database. +//! +//! Precedence per field: env > file > default. Every non-secret field has a +//! default, and the config file itself is optional, so an empty environment +//! and no file both resolve to a usable config. Secrets (API keys) are read +//! only from the environment: [`ConfigFile`] has no fields for them, and +//! `deny_unknown_fields` turns an accidental key in the file into a parse +//! error instead of silently ignoring it. + +use std::net::SocketAddr; +use std::path::{Path, PathBuf}; + +use serde::Deserialize; + +pub const ENV_CONFIG_FILE: &str = "ARR_CONFIG_FILE"; +pub const ENV_BIND_ADDR: &str = "ARR_BIND_ADDR"; +pub const ENV_DATABASE_PATH: &str = "ARR_DATABASE_PATH"; +pub const ENV_MEDIA_ROOT: &str = "ARR_MEDIA_ROOT"; +pub const ENV_PROWLARR_URL: &str = "ARR_PROWLARR_URL"; +pub const ENV_PROWLARR_API_KEY: &str = "ARR_PROWLARR_API_KEY"; +pub const ENV_TRANSMISSION_URL: &str = "ARR_TRANSMISSION_URL"; +pub const ENV_TMDB_API_KEY: &str = "ARR_TMDB_API_KEY"; +pub const ENV_JELLYFIN_URL: &str = "ARR_JELLYFIN_URL"; +pub const ENV_JELLYFIN_API_KEY: &str = "ARR_JELLYFIN_API_KEY"; +pub const ENV_NTFY_URL: &str = "ARR_NTFY_URL"; + +pub const DEFAULT_BIND_ADDR: &str = "0.0.0.0:7878"; +pub const DEFAULT_DATABASE_PATH: &str = "arr.db"; +pub const DEFAULT_MEDIA_ROOT: &str = "/mnt/media"; +pub const DEFAULT_PROWLARR_URL: &str = "http://localhost:9696"; +pub const DEFAULT_TRANSMISSION_URL: &str = "http://localhost:9091/transmission/rpc"; +pub const DEFAULT_JELLYFIN_URL: &str = "http://localhost:8096"; +pub const DEFAULT_NTFY_URL: &str = "http://localhost"; + +#[derive(Debug, thiserror::Error)] +pub enum ConfigError { + #[error("io: {0}")] + Io(#[from] std::io::Error), + #[error("toml decode: {0}")] + TomlDecode(#[from] toml::de::Error), + #[error("invalid {env} ({input:?}): {source}")] + InvalidBindAddr { + env: &'static str, + input: String, + source: std::net::AddrParseError, + }, +} + +/// On-disk representation. Non-secret fields only — see the module docs. +#[derive(Debug, Clone, Default, Deserialize)] +#[serde(deny_unknown_fields)] +struct ConfigFile { + #[serde(default)] + bind_addr: Option, + #[serde(default)] + database_path: Option, + #[serde(default)] + media_root: Option, + #[serde(default)] + prowlarr_url: Option, + #[serde(default)] + transmission_url: Option, + #[serde(default)] + jellyfin_url: Option, + #[serde(default)] + ntfy_url: Option, +} + +impl ConfigFile { + fn load(path: &Path) -> Result { + if !path.exists() { + return Ok(Self::default()); + } + let raw = std::fs::read_to_string(path)?; + Ok(toml::from_str(&raw)?) + } +} + +/// Raw env var readout, so tests can inject values without mutating the +/// process environment (which races other tests in the same binary). +#[derive(Debug, Clone, Default)] +pub struct EnvOverrides { + pub config_file: Option, + pub bind_addr: Option, + pub database_path: Option, + pub media_root: Option, + pub prowlarr_url: Option, + pub prowlarr_api_key: Option, + pub transmission_url: Option, + pub tmdb_api_key: Option, + pub jellyfin_url: Option, + pub jellyfin_api_key: Option, + pub ntfy_url: Option, +} + +impl EnvOverrides { + pub fn from_env() -> Self { + Self { + config_file: std::env::var(ENV_CONFIG_FILE).ok(), + bind_addr: std::env::var(ENV_BIND_ADDR).ok(), + database_path: std::env::var(ENV_DATABASE_PATH).ok(), + media_root: std::env::var(ENV_MEDIA_ROOT).ok(), + prowlarr_url: std::env::var(ENV_PROWLARR_URL).ok(), + prowlarr_api_key: std::env::var(ENV_PROWLARR_API_KEY).ok(), + transmission_url: std::env::var(ENV_TRANSMISSION_URL).ok(), + tmdb_api_key: std::env::var(ENV_TMDB_API_KEY).ok(), + jellyfin_url: std::env::var(ENV_JELLYFIN_URL).ok(), + jellyfin_api_key: std::env::var(ENV_JELLYFIN_API_KEY).ok(), + ntfy_url: std::env::var(ENV_NTFY_URL).ok(), + } + } +} + +/// Resolved bootstrap configuration. See DESIGN.md §10. +#[derive(Debug, Clone, PartialEq, Eq)] +pub struct Config { + pub bind_addr: SocketAddr, + pub database_path: PathBuf, + pub media_root: PathBuf, + pub prowlarr_url: String, + pub prowlarr_api_key: Option, + pub transmission_url: String, + pub tmdb_api_key: Option, + pub jellyfin_url: String, + pub jellyfin_api_key: Option, + pub ntfy_url: String, +} + +impl Config { + /// Load from the process environment, and an optional TOML file named by + /// `$ARR_CONFIG_FILE`. No file is not an error — every non-secret field + /// has a default. + pub fn load() -> Result { + Self::resolve(EnvOverrides::from_env()) + } + + fn resolve(env: EnvOverrides) -> Result { + let file = match &env.config_file { + Some(path) => ConfigFile::load(Path::new(path))?, + None => ConfigFile::default(), + }; + + let bind_addr = match &env.bind_addr { + Some(raw) => parse_bind_addr(raw, ENV_BIND_ADDR)?, + None => file + .bind_addr + .unwrap_or_else(|| DEFAULT_BIND_ADDR.parse().expect("valid default bind_addr")), + }; + + Ok(Self { + bind_addr, + database_path: env + .database_path + .map(PathBuf::from) + .or(file.database_path) + .unwrap_or_else(|| PathBuf::from(DEFAULT_DATABASE_PATH)), + media_root: env + .media_root + .map(PathBuf::from) + .or(file.media_root) + .unwrap_or_else(|| PathBuf::from(DEFAULT_MEDIA_ROOT)), + prowlarr_url: env + .prowlarr_url + .or(file.prowlarr_url) + .unwrap_or_else(|| DEFAULT_PROWLARR_URL.to_string()), + prowlarr_api_key: env.prowlarr_api_key, + transmission_url: env + .transmission_url + .or(file.transmission_url) + .unwrap_or_else(|| DEFAULT_TRANSMISSION_URL.to_string()), + tmdb_api_key: env.tmdb_api_key, + jellyfin_url: env + .jellyfin_url + .or(file.jellyfin_url) + .unwrap_or_else(|| DEFAULT_JELLYFIN_URL.to_string()), + jellyfin_api_key: env.jellyfin_api_key, + ntfy_url: env + .ntfy_url + .or(file.ntfy_url) + .unwrap_or_else(|| DEFAULT_NTFY_URL.to_string()), + }) + } +} + +fn parse_bind_addr(raw: &str, env: &'static str) -> Result { + raw.parse().map_err(|source| ConfigError::InvalidBindAddr { + env, + input: raw.to_string(), + source, + }) +} + +#[cfg(test)] +#[allow(clippy::unwrap_used)] +mod tests { + use super::*; + + #[test] + fn empty_environment_resolves_to_defaults() { + let config = Config::resolve(EnvOverrides::default()).unwrap(); + assert_eq!(config.bind_addr, DEFAULT_BIND_ADDR.parse().unwrap()); + assert_eq!(config.database_path, PathBuf::from(DEFAULT_DATABASE_PATH)); + assert_eq!(config.media_root, PathBuf::from(DEFAULT_MEDIA_ROOT)); + assert_eq!(config.prowlarr_url, DEFAULT_PROWLARR_URL); + assert_eq!(config.transmission_url, DEFAULT_TRANSMISSION_URL); + assert_eq!(config.jellyfin_url, DEFAULT_JELLYFIN_URL); + assert_eq!(config.ntfy_url, DEFAULT_NTFY_URL); + assert_eq!(config.prowlarr_api_key, None); + assert_eq!(config.tmdb_api_key, None); + assert_eq!(config.jellyfin_api_key, None); + } + + #[test] + fn missing_config_file_is_not_an_error() { + let dir = tempfile::tempdir().unwrap(); + let path = dir.path().join("does-not-exist.toml"); + let env = EnvOverrides { + config_file: Some(path.to_string_lossy().into_owned()), + ..EnvOverrides::default() + }; + let config = Config::resolve(env).unwrap(); + assert_eq!(config.bind_addr, DEFAULT_BIND_ADDR.parse().unwrap()); + assert!(!path.exists(), "resolve must not create the file"); + } + + #[test] + fn config_file_overrides_defaults() { + let dir = tempfile::tempdir().unwrap(); + let path = dir.path().join("arr.toml"); + std::fs::write( + &path, + r#" +bind_addr = "127.0.0.1:1" +media_root = "/tank/media" +prowlarr_url = "http://prowlarr.internal:9696" +"#, + ) + .unwrap(); + let env = EnvOverrides { + config_file: Some(path.to_string_lossy().into_owned()), + ..EnvOverrides::default() + }; + let config = Config::resolve(env).unwrap(); + assert_eq!(config.bind_addr, "127.0.0.1:1".parse().unwrap()); + assert_eq!(config.media_root, PathBuf::from("/tank/media")); + assert_eq!(config.prowlarr_url, "http://prowlarr.internal:9696"); + // Untouched fields still default. + assert_eq!(config.transmission_url, DEFAULT_TRANSMISSION_URL); + } + + #[test] + fn env_overrides_file() { + let dir = tempfile::tempdir().unwrap(); + let path = dir.path().join("arr.toml"); + std::fs::write(&path, "bind_addr = \"127.0.0.1:1\"\n").unwrap(); + let env = EnvOverrides { + config_file: Some(path.to_string_lossy().into_owned()), + bind_addr: Some("0.0.0.0:9999".into()), + ..EnvOverrides::default() + }; + let config = Config::resolve(env).unwrap(); + assert_eq!(config.bind_addr, "0.0.0.0:9999".parse().unwrap()); + } + + #[test] + fn secrets_come_only_from_env() { + let env = EnvOverrides { + prowlarr_api_key: Some("secret-1".into()), + tmdb_api_key: Some("secret-2".into()), + jellyfin_api_key: Some("secret-3".into()), + ..EnvOverrides::default() + }; + let config = Config::resolve(env).unwrap(); + assert_eq!(config.prowlarr_api_key.as_deref(), Some("secret-1")); + assert_eq!(config.tmdb_api_key.as_deref(), Some("secret-2")); + assert_eq!(config.jellyfin_api_key.as_deref(), Some("secret-3")); + } + + #[test] + fn a_secret_in_the_config_file_is_a_parse_error() { + let dir = tempfile::tempdir().unwrap(); + let path = dir.path().join("arr.toml"); + std::fs::write(&path, "prowlarr_api_key = \"leaked\"\n").unwrap(); + let env = EnvOverrides { + config_file: Some(path.to_string_lossy().into_owned()), + ..EnvOverrides::default() + }; + assert!(matches!( + Config::resolve(env), + Err(ConfigError::TomlDecode(_)) + )); + } + + #[test] + fn invalid_env_bind_addr_returns_diagnostic() { + let env = EnvOverrides { + bind_addr: Some("not-an-addr".into()), + ..EnvOverrides::default() + }; + let err = Config::resolve(env).unwrap_err(); + match err { + ConfigError::InvalidBindAddr { env, input, .. } => { + assert_eq!(env, ENV_BIND_ADDR); + assert_eq!(input, "not-an-addr"); + } + other => panic!("expected InvalidBindAddr, got {other:?}"), + } + } +} diff --git a/crates/arr-daemon/src/main.rs b/crates/arr-daemon/src/main.rs index f9ef7f5..c7b5fdf 100644 --- a/crates/arr-daemon/src/main.rs +++ b/crates/arr-daemon/src/main.rs @@ -1,5 +1,18 @@ //! arr — reconcile loop and process entry point. See DESIGN.md §8. -fn main() { - println!("arr"); +mod config; + +use std::process::ExitCode; + +fn main() -> ExitCode { + match config::Config::load() { + Ok(config) => { + println!("arr starting, bind_addr={}", config.bind_addr); + ExitCode::SUCCESS + } + Err(err) => { + eprintln!("arr: {err}"); + ExitCode::FAILURE + } + } }