furtka-gateway/control_plane/app.py

import argparse
import os
from http.server import ThreadingHTTPServer

from control_plane import accounts
from control_plane.api import Context, Handler
from control_plane.db import Database
from control_plane.wgeasy import WgEasyClient

DEFAULT_BOX_LIMIT = 20
DEFAULT_ROUTE_LIMIT_PER_BOX = 20


def build_context(db: Database | None = None) -> Context:
    mode = os.environ.get("GATEWAY_MODE", "single")
    db = db or Database()

    wgeasy = WgEasyClient(
        base_url=os.environ.get("WG_EASY_URL", "http://host.docker.internal:51821"),
        admin_password=os.environ.get("WG_EASY_ADMIN_PASSWORD", ""),
    )

    single_account_id = None
    if mode == "single":
        single_account_id = accounts.ensure_single_tenant_account(
            db, DEFAULT_BOX_LIMIT, DEFAULT_ROUTE_LIMIT_PER_BOX
        )

    # Shared mode uses one wildcard defaultGeneratedCert for every router
    # (see traefik.shared.yml) rather than a per-router certResolver.
    cert_resolver = "le" if mode == "single" else None

    return Context(
        db=db,
        wgeasy=wgeasy,
        mode=mode,
        cert_resolver=cert_resolver,
        single_account_id=single_account_id,
        box_limit=DEFAULT_BOX_LIMIT,
        route_limit_per_box=DEFAULT_ROUTE_LIMIT_PER_BOX,
    )


def serve(host: str = "0.0.0.0", port: int = 8090) -> None:
    server = ThreadingHTTPServer((host, port), Handler)
    server.ctx = build_context()
    server.serve_forever()


def main() -> None:
    parser = argparse.ArgumentParser(description="furtka-gateway control plane")
    parser.add_argument("--host", default="0.0.0.0")
    parser.add_argument("--port", type=int, default=8090)
    args = parser.parse_args()
    serve(args.host, args.port)


if __name__ == "__main__":
    main()