config.py

"""
Application configuration settings
"""
import os
from pathlib import Path

from dotenv import load_dotenv

load_dotenv()

# Base directory — always relative to this file, regardless of working directory
BASE_DIR = Path(__file__).resolve().parent

# Initial access vectors
EGG = b'\x55\x55\x55\x55'
TXT_FILE_PATH = os.path.join(BASE_DIR, "implant_output", "url.txt")

# Map / uploads configuration
MAP_DIR = os.path.join(BASE_DIR, "map")
UPLOADS_DIR = os.path.join(BASE_DIR, "uploads")
MAP_FILE_PATH = os.path.join(MAP_DIR, "map.json")

# File paths
IMPLANT_OUTPUT_DIR = os.path.join(BASE_DIR, "implant_output")

# Application settings
DEBUG = os.getenv("DEBUG", "False").lower() == "true"
TESTING = os.getenv("TESTING", "False").lower() == "true"

# Database settings
DATABASE_URL = os.getenv("DATABASE_URL", "mongodb://localhost:27017")
DATABASE_NAME = os.getenv("DATABASE_NAME", "sliver_api")

# JWT settings — env var name matches example.env / .env
SECRET_KEY = os.getenv("JWT_SECRET_KEY", "your-secret-key-here")
ALGORITHM = os.getenv("JWT_ALGORITHM", "HS256")
ACCESS_TOKEN_EXPIRE_MINUTES = int(os.getenv("ACCESS_TOKEN_EXPIRE_MINUTES", "30"))

# GeoIP settings
GEOIP_DB_PATH = os.path.join(BASE_DIR, "GeoLite2-City.mmdb")

# API settings
BACKEND_URL = os.getenv("BACKEND_URL", "http://localhost:8000")

# Rate limiting
RATE_LIMIT_REQUESTS_PER_MINUTE = int(os.getenv("RATE_LIMIT_REQUESTS_PER_MINUTE", "60"))

# CORS settings
CORS_ORIGINS = os.getenv("CORS_ORIGINS", "*").split(",")

# Ignored endpoints for tracking
IGNORED_ENDPOINTS = {
    "/api/user/activity",
    "/api/user/page-visit",
    "/auth/verify",
    "/health",
    "/sessions",
    "/jobs",
    "/connected",
    "/operators",
    "/users",
}