From 6933ec28be3dac0dc17cd634c663db3b4818caad Mon Sep 17 00:00:00 2001
From: Doan Luu Duc Tai <doan@luuduct.ai>
Date: Fri, 30 Oct 2026 22:36:11 -0500
Subject: Centralize deployment settings in the root environment file

Document public domains, ports, upstreams, chat binding, and backup defaults alongside private settings. Validate shared configuration and render Caddy, cgit, and website links from an explicit public allowlist while preserving one installation environment file.
---
 src/main.rs | 82 ++++++++++++++++++++++++++++++++++++++++++++++---------------
 1 file changed, 62 insertions(+), 20 deletions(-)

(limited to 'src/main.rs')

diff --git a/src/main.rs b/src/main.rs
index 4c528da..7f5bcdc 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -21,6 +21,7 @@ pub(crate) mod images;
 pub(crate) mod process;
 pub(crate) mod project;
 pub(crate) mod release;
+pub(crate) mod render;
 
 use std::path::{Path, PathBuf};
 use std::process::ExitCode;
@@ -65,8 +66,8 @@ enum Action {
     },
     #[command(about = "Start the local development services")]
     Dev {
-        #[arg(long, default_value_t = 8080)]
-        port: u16,
+        #[arg(long)]
+        port: Option<u16>,
     },
     #[command(about = "Start or update services in the selected mode")]
     Up {
@@ -79,6 +80,15 @@ enum Action {
         #[arg(long)]
         online: bool,
     },
+    #[command(
+        about = "Render public Caddy, website, and cgit configuration without starting services"
+    )]
+    Config {
+        #[arg(long)]
+        production: bool,
+        #[arg(long)]
+        port: Option<u16>,
+    },
     #[command(about = "Show service status")]
     Status,
     #[command(about = "Stop services while retaining data")]
@@ -88,8 +98,8 @@ enum Action {
         destination: Option<PathBuf>,
         #[arg(long)]
         include_images: bool,
-        #[arg(long, default_value = archive::RECIPIENT)]
-        recipient: String,
+        #[arg(long)]
+        recipient: Option<String>,
         #[arg(long)]
         key: Option<PathBuf>,
     },
@@ -147,27 +157,17 @@ fn execute(arguments: Cli) -> Result<()> {
         owner_fingerprint,
     } = arguments.command
     {
-        let mut command = project.command("cargo")?;
-        command
-            .args(["run", "--locked", "-p", "stack-chat-server", "--", "--root"])
-            .arg(&project.root);
-        if init {
-            command.arg("--init");
-        }
-        if let Some(fingerprint) = reset_owner {
-            command.arg("--reset-owner").arg(fingerprint);
-        }
-        if owner_fingerprint {
-            command.arg("--owner-fingerprint");
-        }
-        return process::run(&mut command);
+        return chat(&project, init, reset_owner.as_deref(), owner_fingerprint);
     }
+
     let _operation = project.lock()?;
     match arguments.command {
         Action::Dev { port } => {
             let mut settings = project.settings()?;
             settings.mode = Mode::Local;
-            settings.port = port;
+            if let Some(selected_port) = port {
+                settings.port = selected_port;
+            }
             images::prepare(&project, &mut settings)?;
             project.up(&settings)
         }
@@ -193,6 +193,23 @@ fn execute(arguments: Cli) -> Result<()> {
             images::prepare(&project, &mut settings)?;
             project.up(&settings)
         }
+        Action::Config { production, port } => {
+            let mut settings = project.settings()?;
+            settings.mode = if production {
+                Mode::Production
+            } else {
+                Mode::Local
+            };
+            if let Some(selected_port) = port {
+                settings.port = selected_port;
+            }
+            stack_config::initialize_public(&project.root)?;
+            render::prepare(&project, &settings)?;
+            process::line(format_args!(
+                "Public configuration: {}",
+                render::directory(&project, &settings).display()
+            ))
+        }
         Action::Status => project.status(&project.settings()?),
         Action::Down => project.down(&project.settings()?),
         Action::Backup {
@@ -205,11 +222,14 @@ fn execute(arguments: Cli) -> Result<()> {
                 || Ok(project.root.join("var/exports")),
                 |path| absolute(&path),
             )?;
+            let configuration = stack_config::Config::load(&project.root)?;
+            let selected_recipient =
+                recipient.unwrap_or(configuration.value("BACKUP_RECIPIENT")?.to_owned());
             archive::backup(
                 &project,
                 &output,
                 include_images,
-                &recipient,
+                &selected_recipient,
                 key.as_deref(),
             )
         }
@@ -226,6 +246,28 @@ fn execute(arguments: Cli) -> Result<()> {
     }
 }
 
+fn chat(
+    project: &Project,
+    init: bool,
+    reset_owner: Option<&str>,
+    owner_fingerprint: bool,
+) -> Result<()> {
+    let mut command = project.command("cargo")?;
+    command
+        .args(["run", "--locked", "-p", "stack-chat-server", "--", "--root"])
+        .arg(&project.root);
+    if init {
+        command.arg("--init");
+    }
+    if let Some(fingerprint) = reset_owner {
+        command.arg("--reset-owner").arg(fingerprint);
+    }
+    if owner_fingerprint {
+        command.arg("--owner-fingerprint");
+    }
+    process::run(&mut command)
+}
+
 fn absolute(path: &Path) -> Result<PathBuf> {
     Ok(if path.is_absolute() {
         path.to_path_buf()
-- 
cgit v1.2.3