chore: add ci/cd

Author: fiqrikm18

.env.example

@@ -1,15 +1,20 @@
 APP_NAME=Todo Modulith API
 APP_ENV=production
 
-DATABASE_URL=postgresql+asyncpg://postgres:postgres@127.0.0.1:5432/todo_db
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=
+POSTGRES_DB=todo_db
+REDIS_PASSWORD=
+
+DATABASE_URL=
 DATABASE_POOL_SIZE=20
 DATABASE_MAX_OVERFLOW=10
 DATABASE_POOL_TIMEOUT=30
 DATABASE_POOL_RECYCLE=3600
 
-REDIS_URL=redis://:password@127.0.0.1:6379/0
+REDIS_URL=
 
-SECRET_KEY=your-super-secret-production-key-here
+SECRET_KEY=
 
 MAX_REQUEST_SIZE_MB=5242880 #5mb
 

README.md

@@ -230,8 +230,13 @@ Expected values:
 
 ```env
 APP_NAME=Todo Modulith API
-DATABASE_URL=postgresql+asyncpg://postgres:postgres@db:5432/todo_db
-SECRET_KEY=your-super-secret-production-key-here
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=
+POSTGRES_DB=todo_db
+REDIS_PASSWORD=
+DATABASE_URL=
+REDIS_URL=
+SECRET_KEY=
 ALGORITHM=HS256
 JWT_ISSUER=todo-modulith-api
 JWT_AUDIENCE=todo-modulith-client
@@ -242,7 +247,7 @@ REFRESH_TOKEN_EXPIRE_MINUTES=10080
 For local development without Docker, point `DATABASE_URL` at your local PostgreSQL host, for example:
 
 ```env
-DATABASE_URL=postgresql+asyncpg://postgres:postgres@localhost:5432/todo_db
+DATABASE_URL=postgresql+asyncpg://postgres@localhost:5432/todo_db
 ```
 
 ## Local Setup

docker-compose.yml

@@ -11,8 +11,8 @@ services:
       - .env
     environment:
       APP_ENV: production
-      DATABASE_URL: postgresql+asyncpg://${POSTGRES_USER:-postgres}:${POSTGRES_PASSWORD:-postgres}@db:5432/${POSTGRES_DB:-todo_db}
-      REDIS_URL: redis://:${REDIS_PASSWORD:-redis-password}@redis:6379/0
+      DATABASE_URL: postgresql+asyncpg://${POSTGRES_USER:-postgres}:${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env}@db:5432/${POSTGRES_DB:-todo_db}
+      REDIS_URL: redis://:${REDIS_PASSWORD:?Set REDIS_PASSWORD in .env}@redis:6379/0
     depends_on:
       db:
         condition: service_healthy
@@ -36,7 +36,7 @@ services:
     restart: unless-stopped
     environment:
       POSTGRES_USER: ${POSTGRES_USER:-postgres}
-      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env}
       POSTGRES_DB: ${POSTGRES_DB:-todo_db}
     volumes:
       - postgres_data:/var/lib/postgresql/data
@@ -55,7 +55,7 @@ services:
         "--appendonly",
         "yes",
         "--requirepass",
-        "${REDIS_PASSWORD:-redis-password}",
+        "${REDIS_PASSWORD:?Set REDIS_PASSWORD in .env}",
       ]
     volumes:
       - redis_data:/data
@@ -65,7 +65,7 @@ services:
           "CMD",
           "redis-cli",
           "-a",
-          "${REDIS_PASSWORD:-redis-password}",
+          "${REDIS_PASSWORD:?Set REDIS_PASSWORD in .env}",
           "ping",
         ]
       interval: 10s

src/core/config/setting.py

@@ -12,11 +12,11 @@ class Settings(BaseSettings):
     APP_ENV: str = Field(alias="APP_ENV", default="development")
     DATABASE_URL: str = Field(
         alias="DATABASE_URL",
-        default="postgresql+asyncpg://user:password@localhost:5432/todo_db",
+        default="postgresql+asyncpg://postgres@localhost:5432/todo_db",
     )
     REDIS_URL: str = Field(
         alias="REDIS_URL",
-        default="redis://:eYVX7EwVmmxKPCDmwMtyKVge8oLd2t81@127.0.0.1:6379/0",
+        default="redis://127.0.0.1:6379/0",
     )
     SECRET_KEY: str = Field(alias="SECRET_KEY", default=DEFAULT_SECRET_KEY)
     ALGORITHM: str = Field(alias="ALGORITHM", default="HS256")

src/core/dependency/auth.py

@@ -1,20 +1,19 @@
 from uuid import UUID
 
 from fastapi import Depends, HTTPException, Request, status
-from fastapi.security import HTTPBearer
+from fastapi.security import OAuth2PasswordBearer
 from sqlalchemy.ext.asyncio import AsyncSession
 
 from src.core.database.postgres.session import get_db
 from src.modules.user.infrastructure.repositories.user_repository import (
     SQLAlchemyUserRepository,
 )
 
-# oauth2_scheme = OAuth2PasswordBearer(
-#     tokenUrl="/api/v1/auth/login",
-#     refreshUrl="/api/v1/auth/refresh",
-# )
-
-oauth2_scheme = HTTPBearer(scheme_name="Authorization", auto_error=False)
+oauth2_scheme = OAuth2PasswordBearer(
+    tokenUrl="/api/v1/auth/login",
+    refreshUrl="/api/v1/auth/refresh",
+    auto_error=False,
+)
 
 
 async def get_current_user(

src/core/dependency/rate_limit.py

@@ -1,5 +1,6 @@
-from fastapi import HTTPException, Request
+from fastapi import Request
 from fastapi_limiter import FastAPILimiter
+from fastapi_limiter.depends import RateLimiter
 
 from src.core.config.setting import get_settings
 from src.core.database.redis.client import get_redis_client
@@ -54,20 +55,5 @@ async def apply_global_rate_limit(request: Request):
     times = int(times_str)
     seconds = 60 if "minute" in period else 1
 
-    # Get identifier for this request
-    identifier = await custom_identifier(request)
-
-    # Check rate limit
-    is_rate_limited = await FastAPILimiter.redis.incr(
-        f"fastapi-limiter:{identifier}:{request.scope.get('path')}"
-    )
-
-    # Set expiry on first request
-    if is_rate_limited == 1:
-        await FastAPILimiter.redis.expire(
-            f"fastapi-limiter:{identifier}:{request.scope.get('path')}", seconds
-        )
-
-    # Check if rate limit exceeded
-    if is_rate_limited > times:
-        raise HTTPException(status_code=429, detail="Rate limit exceeded")
+    limiter = RateLimiter(times=times, seconds=seconds)
+    await limiter(request)