Store API keys and secrets encrypted in the SQLite database via the existing Vault module (AES-256-GCM). The only external dependency is SECRET_KEY_BASE — everything else lives in the portable DB file. - Add encrypted_value column to settings table with new "encrypted" type - Add put_secret/get_secret/delete_setting/secret_hint to Settings context - Add Secrets module to load encrypted config into Application env at startup - Add Stripe.Setup module with connect/disconnect/verify_api_key flow - Auto-creates webhook endpoints via Stripe API in production - Detects localhost and shows Stripe CLI instructions for dev - Add admin credentials page at /admin/settings with guided setup: - Not configured: single Secret key input with dashboard link - Connected (production): status display, webhook info, disconnect - Connected (dev): Stripe CLI instructions, manual signing secret input - Remove Stripe env vars from dev.exs and runtime.exs - Fix CSSCache test startup crash (handle_continue instead of init) - Add nav link for Credentials page 507 tests, 0 failures. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
48 lines
1.6 KiB
Elixir
48 lines
1.6 KiB
Elixir
defmodule SimpleshopTheme.Application do
|
|
# See https://hexdocs.pm/elixir/Application.html
|
|
# for more information on OTP Applications
|
|
@moduledoc false
|
|
|
|
use Application
|
|
|
|
@impl true
|
|
def start(_type, _args) do
|
|
children = [
|
|
SimpleshopThemeWeb.Telemetry,
|
|
SimpleshopTheme.Repo,
|
|
{Ecto.Migrator,
|
|
repos: Application.fetch_env!(:simpleshop_theme, :ecto_repos), skip: skip_migrations?()},
|
|
# Load encrypted secrets from DB into Application env
|
|
{Task, &SimpleshopTheme.Secrets.load_all/0},
|
|
{DNSCluster, query: Application.get_env(:simpleshop_theme, :dns_cluster_query) || :ignore},
|
|
{Phoenix.PubSub, name: SimpleshopTheme.PubSub},
|
|
# Background job processing
|
|
{Oban, Application.fetch_env!(:simpleshop_theme, Oban)},
|
|
# Image variant cache - ensures all variants exist on startup
|
|
SimpleshopTheme.Images.VariantCache,
|
|
# Start to serve requests
|
|
SimpleshopThemeWeb.Endpoint,
|
|
# Theme CSS cache - must start after Endpoint for static_path/1 to work
|
|
SimpleshopTheme.Theme.CSSCache
|
|
]
|
|
|
|
# See https://hexdocs.pm/elixir/Supervisor.html
|
|
# for other strategies and supported options
|
|
opts = [strategy: :one_for_one, name: SimpleshopTheme.Supervisor]
|
|
Supervisor.start_link(children, opts)
|
|
end
|
|
|
|
# Tell Phoenix to update the endpoint configuration
|
|
# whenever the application is updated.
|
|
@impl true
|
|
def config_change(changed, _new, removed) do
|
|
SimpleshopThemeWeb.Endpoint.config_change(changed, removed)
|
|
:ok
|
|
end
|
|
|
|
defp skip_migrations?() do
|
|
# By default, sqlite migrations are run when using a release
|
|
System.get_env("RELEASE_NAME") == nil
|
|
end
|
|
end
|