release / govulncheck (push) Successful in 28s
release / web (push) Successful in 1m18s
release / go (push) Successful in 1m35s
release / android (push) Successful in 4m45s
release / Build signed APK (push) Successful in 4m57s
release / integration (push) Successful in 5m3s
release / Attach APK to the Release (tag releases only) (push) Skipped
release / Build + push container image (push) Successful in 1m14s
release / Verify release artifacts (tag releases only) (push) Skipped
Minstrel keeps credentials it has to read back: indexer, Prowlarr and download-client keys and passwords, the AcoustID key, cover-art and tag provider keys, the SMTP password, and each user's ListenBrainz token and Subsonic password. They were stored in the clear; they are now sealed with AES-256-GCM under a per-column HKDF key derived from the stream secret, each value bound to its row. - internal/secret: Seal/Open/Reveal, and Columns, the one list of sealed columns (a backup will leave them out). Install takes the master key at startup; SealStored seals any value still in the clear, so an existing database is brought over in place on the first boot. - Every write seals and every read opens: acquire (one read path, getService / usableServices), acoustid settings, SMTP, ListenBrainz, Subsonic auth and password generation, cover-art and tag provider settings. - A value that does not open (the stream secret changed) is logged and reads as unset, to be entered again in Settings. docs/security.md says so. - Tests: secret unit tests (wrong owner/purpose/key, malformed, no key), a SealStored integration test over all eight columns plus a schema check that each listed column exists, and the existing tests now assert sealed storage. dbtest installs a test key for integration tests. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
216 lines
6.9 KiB
Go
216 lines
6.9 KiB
Go
// Package acquire turns the configured indexers and download clients into
|
|
// working clients.
|
|
//
|
|
// ONE BUILDER PER KIND. SourceFor makes a search source from a row and
|
|
// DownloadClient makes a download client, path mapping included. The grab,
|
|
// the importer, the stall watchdog and the settings page's Test all build
|
|
// through them, so a Test that passes vouches for the path real traffic takes.
|
|
// Clients are rebuilt from the row on every use, so a changed address or a new
|
|
// key takes effect on the next call.
|
|
package acquire
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/jackc/pgx/v5"
|
|
"github.com/jackc/pgx/v5/pgxpool"
|
|
|
|
"git.fabledsword.com/bvandeusen/minstrel/internal/db/dbq"
|
|
"git.fabledsword.com/bvandeusen/minstrel/internal/downloader"
|
|
"git.fabledsword.com/bvandeusen/minstrel/internal/exchange"
|
|
"git.fabledsword.com/bvandeusen/minstrel/internal/indexer"
|
|
"git.fabledsword.com/bvandeusen/minstrel/internal/prowlarr"
|
|
"git.fabledsword.com/bvandeusen/minstrel/internal/secret"
|
|
)
|
|
|
|
// Kinds: which list a row appears in.
|
|
const (
|
|
KindSearch = "search"
|
|
KindDownload = "download"
|
|
)
|
|
|
|
// Jobs a row can do. An exchange row does each its switch allows; every
|
|
// other row does the one its kind names.
|
|
const (
|
|
JobSearch = "search"
|
|
JobDownload = "download"
|
|
JobEnrichment = "enrichment"
|
|
)
|
|
|
|
// Protocols: which client a row builds.
|
|
const (
|
|
ProtocolProwlarr = "prowlarr"
|
|
ProtocolTorznab = "torznab"
|
|
ProtocolQBittorrent = "qbittorrent"
|
|
ProtocolExchange = "exchange"
|
|
)
|
|
|
|
// DefaultCategory files everything Minstrel adds to a download client.
|
|
const DefaultCategory = "minstrel"
|
|
|
|
// addable is what a new row of a protocol starts as.
|
|
type addable struct {
|
|
kind string
|
|
label string
|
|
category string
|
|
timeoutMs int32
|
|
perHour int32
|
|
}
|
|
|
|
// catalogue is every protocol an admin can add. Exchange starts unpaced
|
|
// (it searches its own database); the others at 120 searches an hour, which
|
|
// keeps a Prowlarr's indexers under the rate most trackers allow.
|
|
var catalogue = map[string]addable{
|
|
ProtocolProwlarr: {kind: KindSearch, label: "Prowlarr", timeoutMs: 60000, perHour: 120},
|
|
ProtocolTorznab: {kind: KindSearch, label: "Torznab feed", timeoutMs: 30000, perHour: 120},
|
|
ProtocolQBittorrent: {kind: KindDownload, label: "qBittorrent", category: DefaultCategory, timeoutMs: 15000, perHour: 0},
|
|
ProtocolExchange: {kind: KindDownload, label: "FabledExchange", category: DefaultCategory, timeoutMs: 30000, perHour: 0},
|
|
}
|
|
|
|
// Addable says whether protocol is one an admin can add.
|
|
func Addable(protocol string) bool {
|
|
_, ok := catalogue[protocol]
|
|
return ok
|
|
}
|
|
|
|
// Searches says whether a row is a search source.
|
|
func Searches(row dbq.AcquisitionService) bool {
|
|
if row.Protocol == ProtocolExchange {
|
|
return row.ServesSearch
|
|
}
|
|
return row.Kind == KindSearch
|
|
}
|
|
|
|
// Fetches says whether a row is a download client.
|
|
func Fetches(row dbq.AcquisitionService) bool {
|
|
if row.Protocol == ProtocolExchange {
|
|
return row.ServesDownloads
|
|
}
|
|
return row.Kind == KindDownload
|
|
}
|
|
|
|
// Searcher is a search source.
|
|
type Searcher interface {
|
|
Search(ctx context.Context, q indexer.Query) ([]indexer.Result, error)
|
|
}
|
|
|
|
// Fetcher fetches a result's .torrent through the source that offered it.
|
|
type Fetcher interface {
|
|
Download(ctx context.Context, r indexer.Result) ([]byte, error)
|
|
}
|
|
|
|
// Source is one configured search source.
|
|
type Source struct {
|
|
Code string
|
|
Label string
|
|
// PerHour is the most searches the schedule sends it an hour; 0 = unpaced.
|
|
PerHour int
|
|
Search Searcher
|
|
// Fetch is nil for a source whose results are all magnets.
|
|
Fetch Fetcher
|
|
}
|
|
|
|
// SourceFor builds the search source a row describes.
|
|
func SourceFor(row dbq.AcquisitionService) Source {
|
|
src := Source{Code: row.Code, Label: row.Label, PerHour: int(row.SearchesPerHour)}
|
|
timeout := msDuration(row.TimeoutMs)
|
|
switch row.Protocol {
|
|
case ProtocolProwlarr:
|
|
c := &prowlarr.Client{Config: prowlarr.Config{
|
|
Code: row.Code, BaseURL: row.BaseUrl, APIKey: row.ApiKey, Timeout: timeout,
|
|
}}
|
|
src.Search, src.Fetch = c, c
|
|
case ProtocolExchange:
|
|
src.Search = ExchangeFor(row)
|
|
default:
|
|
c := &indexer.Torznab{Config: indexer.TorznabConfig{
|
|
Code: row.Code, FeedURL: row.BaseUrl, APIKey: row.ApiKey, Timeout: timeout,
|
|
}}
|
|
src.Search, src.Fetch = c, c
|
|
}
|
|
return src
|
|
}
|
|
|
|
// ExchangeFor builds the search and enrichment client for an exchange row.
|
|
func ExchangeFor(row dbq.AcquisitionService) *exchange.Client {
|
|
return &exchange.Client{
|
|
Code: row.Code,
|
|
Config: exchange.Config{
|
|
BaseURL: row.BaseUrl, APIKey: row.ApiKey, Timeout: msDuration(row.TimeoutMs),
|
|
},
|
|
}
|
|
}
|
|
|
|
// DownloadClient builds the download client a row describes, wrapped in its
|
|
// path mapping.
|
|
func DownloadClient(row dbq.AcquisitionService) (downloader.Driver, error) {
|
|
d, err := downloader.For(row.Protocol, downloader.Config{
|
|
BaseURL: row.BaseUrl, Username: row.Username, Password: row.Password,
|
|
APIKey: row.ApiKey, Category: row.Category, Timeout: msDuration(row.TimeoutMs),
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return downloader.Mapped(d, downloader.PathMap{Local: row.LocalPath, Remote: row.RemotePath}), nil
|
|
}
|
|
|
|
// DownloadClientFor builds the download client a grab went to, by the code
|
|
// of its acquisition_services row.
|
|
func DownloadClientFor(ctx context.Context, pool *pgxpool.Pool, code string) (downloader.Driver, error) {
|
|
row, err := getService(ctx, dbq.New(pool), code)
|
|
if err != nil {
|
|
if errors.Is(err, pgx.ErrNoRows) {
|
|
return nil, fmt.Errorf("the download client %q is no longer set up", code)
|
|
}
|
|
return nil, err
|
|
}
|
|
return DownloadClient(row)
|
|
}
|
|
|
|
// Sources builds every enabled search source.
|
|
func Sources(ctx context.Context, pool *pgxpool.Pool) ([]Source, error) {
|
|
rows, err := usableServices(ctx, dbq.New(pool), JobSearch)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
out := make([]Source, len(rows))
|
|
for i, r := range rows {
|
|
out[i] = SourceFor(r)
|
|
}
|
|
return out, nil
|
|
}
|
|
|
|
// getService and usableServices are the only reads of a full
|
|
// acquisition_services row. They hand back the credentials opened, so the
|
|
// clients built from a row are given the key and password themselves.
|
|
func getService(ctx context.Context, q *dbq.Queries, code string) (dbq.AcquisitionService, error) {
|
|
row, err := q.GetAcquisitionService(ctx, code)
|
|
if err != nil {
|
|
return row, err
|
|
}
|
|
return revealed(row), nil
|
|
}
|
|
|
|
func usableServices(ctx context.Context, q *dbq.Queries, job string) ([]dbq.AcquisitionService, error) {
|
|
rows, err := q.ListUsableAcquisitionServices(ctx, job)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
for i := range rows {
|
|
rows[i] = revealed(rows[i])
|
|
}
|
|
return rows, nil
|
|
}
|
|
|
|
// revealed is row with its sealed credentials opened.
|
|
func revealed(row dbq.AcquisitionService) dbq.AcquisitionService {
|
|
row.ApiKey = secret.Reveal(secret.AcquisitionAPIKey.Purpose(), row.Code, row.ApiKey)
|
|
row.Password = secret.Reveal(secret.AcquisitionPassword.Purpose(), row.Code, row.Password)
|
|
return row
|
|
}
|
|
|
|
func msDuration(ms int32) time.Duration { return time.Duration(ms) * time.Millisecond }
|