- Session-based login (username/password, 30-day cookie) - SQLite user store with bcrypt password hashing (modernc.org/sqlite) - Per-user upload permission (can_upload flag) - Admin CLI (cmd/admin) for user management: user add/list/delete/set-upload - Upload handler for EPUB/PDF with path-traversal protection - All routes protected by requireAuth middleware; /upload additionally requires requireUpload - Login/logout UI, upload form, logout button in header - New env var: USERS_DB (default: users.db, gitignored) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
42 lines
804 B
Go
42 lines
804 B
Go
package main
|
|
|
|
import (
|
|
"log"
|
|
"net/http"
|
|
"os"
|
|
|
|
"github.com/arnef/ebooks/internal/library"
|
|
"github.com/arnef/ebooks/internal/users"
|
|
"github.com/arnef/ebooks/internal/web"
|
|
)
|
|
|
|
func main() {
|
|
booksDir := getenv("BOOKS_DIR", "books")
|
|
addr := getenv("ADDR", ":8080")
|
|
usersDB := getenv("USERS_DB", "users.db")
|
|
|
|
store, err := users.Open(usersDB)
|
|
if err != nil {
|
|
log.Fatalf("users db: %v", err)
|
|
}
|
|
defer store.Close()
|
|
|
|
lib := library.New(booksDir)
|
|
h := web.NewHandler(lib, store)
|
|
|
|
mux := http.NewServeMux()
|
|
h.RegisterRoutes(mux)
|
|
|
|
log.Printf("ebooks server listening on %s (books dir: %s)", addr, booksDir)
|
|
if err := http.ListenAndServe(addr, mux); err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
}
|
|
|
|
func getenv(key, fallback string) string {
|
|
if v := os.Getenv(key); v != "" {
|
|
return v
|
|
}
|
|
return fallback
|
|
}
|