root
3480d04ec3
Add an IPRegionResolver wrapping the ip2region xdb library and attach it to AuditService so each appended event records both the raw IP and a resolved region in a new ops.audit_logs.ip_region column. Loopback and private addresses short-circuit to local labels; missing xdb data or lookup errors degrade silently so auditing keeps working without it. The ops console audit view shows the region beneath the IP. Bundle the v4/v6 xdb data under internal/ops/app/ipregiondata so the resolver works out of the box, with config paths/env overrides for swapping in updated data sets. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
113 lines
3.2 KiB
Go
113 lines
3.2 KiB
Go
package main
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"log"
|
|
"net/http"
|
|
"os"
|
|
"os/signal"
|
|
"syscall"
|
|
"time"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
|
|
"github.com/geo-platform/tenant-api/internal/ops/app"
|
|
opsconfig "github.com/geo-platform/tenant-api/internal/ops/config"
|
|
"github.com/geo-platform/tenant-api/internal/ops/repository"
|
|
"github.com/geo-platform/tenant-api/internal/ops/transport"
|
|
"github.com/geo-platform/tenant-api/internal/shared/observability"
|
|
"github.com/geo-platform/tenant-api/internal/shared/repository/postgres"
|
|
)
|
|
|
|
func main() {
|
|
configPath := "configs/ops-config.yaml"
|
|
if p := os.Getenv("CONFIG_PATH"); p != "" {
|
|
configPath = p
|
|
}
|
|
|
|
cfg, err := opsconfig.Load(configPath)
|
|
if err != nil {
|
|
log.Fatalf("ops-api load config: %v", err)
|
|
}
|
|
|
|
logger, err := observability.NewLogger(cfg.Log.Level, cfg.Log.Format)
|
|
if err != nil {
|
|
log.Fatalf("ops-api init logger: %v", err)
|
|
}
|
|
defer func() { _ = logger.Sync() }()
|
|
|
|
ctx := context.Background()
|
|
pool, err := postgres.NewPool(ctx, cfg.Database)
|
|
if err != nil {
|
|
logger.Sugar().Fatalf("ops-api init postgres: %v", err)
|
|
}
|
|
defer pool.Close()
|
|
|
|
accountsRepo := repository.NewAccountRepository(pool)
|
|
adminUsersRepo := repository.NewAdminUserRepository(pool)
|
|
auditsRepo := repository.NewAuditRepository(pool)
|
|
|
|
ipRegionResolver, err := app.NewIPRegionResolver(cfg.IPRegion.V4XDBPath, cfg.IPRegion.V6XDBPath, logger)
|
|
if err != nil {
|
|
logger.Sugar().Warnf("ops-api ip2region disabled: %v", err)
|
|
}
|
|
defer ipRegionResolver.Close()
|
|
|
|
auditSvc := app.NewAuditService(auditsRepo, logger).WithIPRegionResolver(ipRegionResolver)
|
|
issuer := app.NewTokenIssuer(cfg.JWT.Secret, cfg.JWT.AccessTTL)
|
|
authSvc := app.NewAuthService(accountsRepo, auditSvc, issuer)
|
|
accountSvc := app.NewAccountService(accountsRepo, auditSvc)
|
|
adminUserSvc := app.NewAdminUserService(adminUsersRepo, auditSvc, cfg.AdminUsers.DefaultPlanCode)
|
|
|
|
if err := app.SeedDefaultAdmin(ctx, accountsRepo, app.DefaultAdminSeed{
|
|
Username: cfg.DefaultAdmin.Username,
|
|
Password: cfg.DefaultAdmin.Password,
|
|
DisplayName: cfg.DefaultAdmin.DisplayName,
|
|
Email: cfg.DefaultAdmin.Email,
|
|
}, logger); err != nil {
|
|
logger.Sugar().Fatalf("ops-api seed default admin: %v", err)
|
|
}
|
|
|
|
if cfg.Server.Mode == "release" {
|
|
gin.SetMode(gin.ReleaseMode)
|
|
}
|
|
engine := gin.New()
|
|
|
|
transport.RegisterRoutes(transport.Deps{
|
|
Engine: engine,
|
|
Logger: logger,
|
|
DB: pool,
|
|
Issuer: issuer,
|
|
Auth: authSvc,
|
|
Accounts: accountSvc,
|
|
AdminUsers: adminUserSvc,
|
|
Audits: auditSvc,
|
|
})
|
|
|
|
addr := fmt.Sprintf(":%d", cfg.Server.Port)
|
|
srv := &http.Server{
|
|
Addr: addr,
|
|
Handler: engine,
|
|
ReadHeaderTimeout: 10 * time.Second,
|
|
}
|
|
|
|
logger.Sugar().Infof("ops-api starting on %s", addr)
|
|
go func() {
|
|
if err := srv.ListenAndServe(); err != nil && err != http.ErrServerClosed {
|
|
logger.Sugar().Fatalf("ops-api server: %v", err)
|
|
}
|
|
}()
|
|
|
|
quit := make(chan os.Signal, 1)
|
|
signal.Notify(quit, syscall.SIGINT, syscall.SIGTERM)
|
|
<-quit
|
|
|
|
logger.Info("ops-api shutting down...")
|
|
shutdownCtx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
|
|
defer cancel()
|
|
if err := srv.Shutdown(shutdownCtx); err != nil {
|
|
logger.Sugar().Warnf("ops-api shutdown: %v", err)
|
|
}
|
|
}
|