Update app/config.py

app/config.py

@@ -1,11 +1,16 @@
-from pydantic_settings import BaseSettings
-from pydantic import Field
-import os
+from pydantic_settings import BaseSettings, SettingsConfigDict
+from pydantic import Field, model_validator
+import os, secrets, pathlib
 
 class Settings(BaseSettings):
+    model_config = SettingsConfigDict(extra='ignore', env_prefix='', case_sensitive=True)
+
     app_name: str = "GrowthOps OS"
     environment: str = "prod"
-    jwt_secret: str = Field(..., alias="JWT_SECRET")
+
+    # 未設定でも起動できるように None を許容し、後段で生成する
+    jwt_secret: str | None = Field(default=None, alias="JWT_SECRET")
+
     port: int = int(os.getenv("PORT", "7860"))
 
     use_internal_postgres: bool = Field(default=False, alias="USE_INTERNAL_POSTGRES")
@@ -13,14 +18,34 @@ class Settings(BaseSettings):
     postgres_password: str = Field(default="app", alias="POSTGRES_PASSWORD")
     postgres_db: str = Field(default="growthops", alias="POSTGRES_DB")
 
-    redis_url: str = "redis://127.0.0.1:6379/0"
+    redis_url: str = Field(default="redis://127.0.0.1:6379/0", alias="REDIS_URL")
     otlp_endpoint: str | None = Field(default=None, alias="OTLP_ENDPOINT")
 
-    class Config:
-        extra = "ignore"
+    @model_validator(mode="after")
+    def _ensure_jwt_secret(self):
+        # 1) 環境変数があればそれを使う
+        if self.jwt_secret:
+            return self
+        # 2) 永続ファイルがあればそれを使う
+        path = pathlib.Path("/data/jwt_secret")
+        if path.exists():
+            self.jwt_secret = path.read_text().strip()
+            return self
+        # 3) 何も無ければ生成して永続化
+        secret = secrets.token_urlsafe(48)
+        try:
+            path.write_text(secret)
+        except Exception:
+            # 書けなくても起動は継続（再起動時に別の鍵になる点に注意）
+            pass
+        self.jwt_secret = secret
+        return self
 
 def build_database_url(settings: Settings) -> str:
     if settings.use_internal_postgres:
-        return f"postgresql+psycopg2://{settings.postgres_user}:{settings.postgres_password}@127.0.0.1:5432/{settings.postgres_db}"
-    # default to SQLite persisted on /data
+        return (
+            f"postgresql+psycopg2://{settings.postgres_user}:"
+            f"{settings.postgres_password}@127.0.0.1:5432/{settings.postgres_db}"
+        )
+    # デフォルトは /data の SQLite（HF の Persistent storage 上）
     return "sqlite+pysqlite:////data/growthops.sqlite3"