3560dcb802
First step of the folder/video refactor. Adds an app-local SQLite DB at
data/app.db with schema for nested folders (max 2 levels enforced in
code, not SQL) and user-editable globally-unique video IDs.
- src/db.ts: open + WAL + schema (folders, videos) + partial unique
index for top-level folder names (NULL parent_id case)
- One-shot disk-tree migration: on first start scans data/folders/*
and seeds folder rows; reads each {videoId}/meta.json to seed video
rows. Skips invalid/missing meta gracefully.
- Wired into app.ts startup before routes mount.
- gitignore: data/app.db* (DB + WAL/journal sidecars).
Schema only — no routes or store.ts changes yet. Next step swaps the
file-based store calls to DB-backed equivalents.
Smoke-tested on the current data dir: 3 folders migrated, 0 videos
(folders were empty). Build (npx tsc) passes.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
93 lines
2.9 KiB
TypeScript
93 lines
2.9 KiB
TypeScript
import 'dotenv/config'
|
|
import express from 'express'
|
|
import session from 'express-session'
|
|
import path from 'node:path'
|
|
import fsp from 'node:fs/promises'
|
|
import { dataDir, foldersDir, jobsDir, tmpDir, publicDir, viewsDir } from './paths.js'
|
|
import { publicRouter } from './routes/public.js'
|
|
import { opRouter } from './routes/op.js'
|
|
import { initDatabase } from './db.js'
|
|
|
|
async function ensureDirs(): Promise<void> {
|
|
for (const dir of [dataDir, foldersDir, jobsDir, tmpDir]) {
|
|
await fsp.mkdir(dir, { recursive: true })
|
|
}
|
|
}
|
|
|
|
async function main(): Promise<void> {
|
|
await ensureDirs()
|
|
// SQLite 스키마 보장 + 비어 있으면 기존 디스크 트리에서 마이그레이션.
|
|
await initDatabase()
|
|
|
|
const PORT = Number(process.env.PORT ?? 3000)
|
|
const HOST = process.env.HOST ?? '127.0.0.1'
|
|
|
|
const app = express()
|
|
app.set('view engine', 'ejs')
|
|
app.set('views', viewsDir)
|
|
app.set('trust proxy', 1)
|
|
|
|
app.use(express.urlencoded({ extended: true }))
|
|
app.use(express.json({ limit: '4mb' }))
|
|
|
|
// EJS 에서 <script> 안에 JSON 을 박을 때 XSS / U+2028 / U+2029 가 깨지는 걸 막는 헬퍼.
|
|
// 사용 예: <script>window.X = <%- jsonForScript(x) %></script>
|
|
app.use((_req, res, next) => {
|
|
res.locals.jsonForScript = (value: unknown): string => {
|
|
return JSON.stringify(value)
|
|
.replace(/</g, '\\u003c')
|
|
.replace(/>/g, '\\u003e')
|
|
.replace(/&/g, '\\u0026')
|
|
.replace(/\u2028/g, '\\u2028')
|
|
.replace(/\u2029/g, '\\u2029')
|
|
}
|
|
next()
|
|
})
|
|
|
|
app.use(session({
|
|
secret: process.env.SESSION_SECRET ?? 'make-video-site-dev-secret',
|
|
resave: false,
|
|
saveUninitialized: false,
|
|
cookie: {
|
|
httpOnly: true,
|
|
sameSite: 'lax',
|
|
maxAge: 1000 * 60 * 60 * 8
|
|
}
|
|
}))
|
|
|
|
// account.json 직접 노출 차단
|
|
app.use((req, res, next) => {
|
|
if (/^\/account\.json/i.test(req.path)) {
|
|
res.status(404).send('Not Found')
|
|
return
|
|
}
|
|
next()
|
|
})
|
|
|
|
app.use('/static', express.static(publicDir))
|
|
|
|
app.use('/', publicRouter)
|
|
app.use('/', opRouter)
|
|
|
|
app.use((err: unknown, _req: express.Request, res: express.Response, _next: express.NextFunction) => {
|
|
console.error(err)
|
|
const message = err instanceof Error ? err.message : '알 수 없는 오류'
|
|
if (res.headersSent) return
|
|
res.status(500).send(`서버 오류: ${message}`)
|
|
})
|
|
|
|
const server = app.listen(PORT, HOST, () => {
|
|
console.log(`[server] http://${HOST}:${PORT}`)
|
|
console.log(`[server] views: ${path.relative(process.cwd(), viewsDir)}`)
|
|
})
|
|
// 10GB 같은 큰 영상 업로드가 Node 의 기본 requestTimeout(5분) 에 걸려 끊기는 걸 막는다.
|
|
// 0 = 무제한. 필요하면 HTTP_REQUEST_TIMEOUT_MS 환경변수로 조정.
|
|
server.requestTimeout = Number(process.env.HTTP_REQUEST_TIMEOUT_MS ?? 0)
|
|
// 헤더 단계 타임아웃은 짧게 유지(기본 60초). 0 으로 해버리면 slowloris 류에 취약.
|
|
}
|
|
|
|
main().catch((err) => {
|
|
console.error(err)
|
|
process.exit(1)
|
|
})
|