Oauth

.github/workflows/workflow.yml

@@ -1,38 +1,38 @@
-name: Python CI
+name: Checks
 
 on:
   push:
-    branches: ["dev", "master"]
+    branches:
+      - master
+      - dev
   pull_request:
-    branches: ["dev", "master"]
+    branches:
+      - master
+      - dev
 
 permissions:
   contents: read
 
 jobs:
-  build:
+  lint:
+    name: Lint & type-check (Python ${{ matrix.python-version }})
     runs-on: ubuntu-latest
 
     strategy:
+      fail-fast: false
       matrix:
-        python-version: ["3.12", "3.13"]
+        python-version: ["3.13"]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        with:
+          persist-credentials: false
 
-      - name: Set up Python
-        uses: actions/setup-python@v5
+      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
         with:
           python-version: ${{ matrix.python-version }}
-          cache: "pip"
-
-      - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install .[dev]
-
-      - name: Ruff
-        run: ruff check .
 
-      - name: Mypy
-        run: mypy .
+      - run: uv sync --group dev
+      - run: uv run ruff check src
+      - run: uv run ruff format --check src
+      - run: uv run mypy . --strict

Dockerfile

@@ -3,7 +3,7 @@ FROM python:3.13-slim-bookworm AS python-base
 ENV PYTHONUNBUFFERED=1 \
     PYTHONDONTWRITEBYTECODE=1 \
     PIP_NO_CACHE_DIR=1 \
-    APP_PATH=/prodik \
+    APP_PATH=/conode \
     UV_VERSION=0.9.22
 
 ENV VIRTUAL_ENV="$APP_PATH/.venv"

README.md

@@ -1 +1 @@
-Fun, useless (maybe), interactive project +_+
+Fun, useless (maybe), interactive project +_+

deploy/init.sql

@@ -0,0 +1,27 @@
+-- Initialize user and database for KeyCloak
+
+CREATE ROLE keycloak
+WITH
+    LOGIN
+    PASSWORD 'keycloakPassword';
+
+CREATE DATABASE keycloak
+    OWNER keycloak
+    ENCODING 'UTF8'
+    TEMPLATE template0;
+
+\connect keycloak;
+
+GRANT ALL PRIVILEGES ON DATABASE keycloak TO keycloak;
+
+GRANT ALL ON SCHEMA public TO keycloak;
+ALTER SCHEMA public OWNER TO keycloak;
+
+ALTER DEFAULT PRIVILEGES IN SCHEMA public
+GRANT ALL ON TABLES TO keycloak;
+
+ALTER DEFAULT PRIVILEGES IN SCHEMA public
+GRANT ALL ON SEQUENCES TO keycloak;
+
+ALTER DEFAULT PRIVILEGES IN SCHEMA public
+GRANT ALL ON FUNCTIONS TO keycloak;

deploy/keycloak.env

@@ -0,0 +1,8 @@
+KC_DB=postgres
+KC_DB_USERNAME=keycloak
+KC_DB_URL_HOST=postgres
+KC_DB_URL_PORT=5432
+KC_BOOTSTRAP_ADMIN_USERNAME=keycloak
+KC_BOOTSTRAP_ADMIN_PASSWORD=keycloakPassword
+KC_DB_PASSWORD=keycloakPassword
+KC_HEALTH_ENABLED=true