giuseppe
/
ai-station
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: giuseppe:security/hardcoded-creds
Branches Tags
giuseppe:main
giuseppe:security/hardcoded-creds
giuseppe:feature/refactor-ui
giuseppe:feature/vision-rag
giuseppe:feature/rag-potenziato
giuseppe:upgrade-v2-8-3
giuseppe:upgrade-chainlit-v2
..
compare: giuseppe:main
Branches Tags
giuseppe:security/hardcoded-creds
giuseppe:feature/refactor-ui
giuseppe:main
giuseppe:feature/vision-rag
giuseppe:feature/rag-potenziato
giuseppe:upgrade-v2-8-3
giuseppe:upgrade-chainlit-v2

No commits in common. "security/hardcoded-creds" and "main" have entirely different histories.
security/h ... main

4 changed files with 48 additions and 104 deletions
Show Stats Expand all files Collapse all files

23
.env.example
View File

@ -1,23 +0,0 @@
# AI Station - Environment Variables Template
# Copy this file to .env and fill in your values
# IMPORTANT: Never commit .env to version control!
# === GOOGLE OAUTH ===
OAUTH_GOOGLE_CLIENT_ID=your_client_id_here
OAUTH_GOOGLE_CLIENT_SECRET=your_client_secret_here
# === CHAINLIT CONFIGURATION ===
CHAINLIT_URL=https://ai.dffm.it
CHAINLIT_AUTH_SECRET=generate_a_secure_random_string_here
# === DATABASE ===
# Format: postgresql+asyncpg://username:password@hostname:port/database_name
DATABASE_URL=postgresql+asyncpg://ai_user:your_secure_password@postgres:5432/ai_station
# === AI SERVICES ===
OLLAMA_URL=http://192.168.1.243:11434
QDRANT_URL=http://qdrant:6333
BGE_API_URL=http://192.168.1.243:8001/embed
# === OPTIONAL ===
# GEMINI_API_KEY=your_gemini_api_key_here

1
.gitignore vendored
View File

@ -7,4 +7,3 @@ qdrant_storage/.files/
__pycache__/
.env
.files/
config/user_profiles.json

72
app.py
View File

@ -1,6 +1,5 @@
import os
import re
import json
import uuid
import shutil
import requests
@ -38,15 +37,10 @@ except ImportError:
# =========================
# CONFIG
# =========================
# SECURITY: Fail fast if DATABASE_URL is not set
DATABASE_URL = os.getenv("DATABASE_URL")
if not DATABASE_URL:
raise EnvironmentError(
"DATABASE_URL environment variable is required. "
"Set it via: export DATABASE_URL='postgresql+asyncpg://user:pass@host:5432/db'"
DATABASE_URL = os.getenv(
"DATABASE_URL",
"postgresql+asyncpg://ai_user:secure_password_here@postgres:5432/ai_station",
)
# Service URLs - can be overridden via environment
OLLAMA_URL = os.getenv("OLLAMA_URL", "http://192.168.1.243:11434")
QDRANT_URL = os.getenv("QDRANT_URL", "http://qdrant:6333")
BGE_API_URL = os.getenv("BGE_API_URL", "http://192.168.1.243:8001/embed")
@ -70,24 +64,50 @@ os.makedirs(STORAGE_DIR, exist_ok=True)
os.makedirs(WORKSPACES_DIR, exist_ok=True)
# =========================
# USER PROFILES (loaded from JSON for security)
# USER PROFILES
# =========================
def load_user_profiles() -> Dict[str, Dict]:
"""Load user profiles from JSON config file."""
config_path = os.getenv("USER_PROFILES_PATH", "config/user_profiles.json")
try:
with open(config_path, "r", encoding="utf-8") as f:
config = json.load(f)
return config.get("user_profiles", {})
except FileNotFoundError:
print(f"WARNING: User profiles config not found at {config_path}")
return {}
except json.JSONDecodeError as e:
print(f"WARNING: Invalid JSON in user profiles config: {e}")
return {}
# Load profiles at startup
USER_PROFILES = load_user_profiles()
USER_PROFILES = {
"giuseppe@defranceschi.pro": {
"role": "admin",
"name": "Giuseppe",
"workspace": "admin_workspace",
"rag_collection": "admin_docs",
"capabilities": ["debug", "all"],
"show_code": True,
},
"federica.tecchio@gmail.com": {
"role": "business",
"name": "Federica",
"workspace": "business_workspace",
"rag_collection": "contabilita",
"capabilities": ["basic_chat"],
"show_code": False,
},
"riccardob545@gmail.com": {
"role": "engineering",
"name": "Riccardo",
"workspace": "engineering_workspace",
"rag_collection": "engineering_docs",
"capabilities": ["code"],
"show_code": True,
},
"giuliadefranceschi05@gmail.com": {
"role": "architecture",
"name": "Giulia",
"workspace": "architecture_workspace",
"rag_collection": "architecture_manuals",
"capabilities": ["visual"],
"show_code": False,
},
"giuseppe.defranceschi@gmail.com": {
"role": "architecture",
"name": "Giuseppe",
"workspace": "architecture_workspace",
"rag_collection": "architecture_manuals",
"capabilities": ["visual"],
"show_code": False,
},
}
GUEST_PROFILE = {
"role": "guest",

52
config/user_profiles.json.example
View File

@ -1,52 +0,0 @@
{
"user_profiles": {
"giuseppe@defranceschi.pro": {
"role": "admin",
"name": "Giuseppe",
"workspace": "admin_workspace",
"rag_collection": "admin_docs",
"capabilities": ["debug", "all"],
"show_code": true
},
"federica.tecchio@gmail.com": {
"role": "business",
"name": "Federica",
"workspace": "business_workspace",
"rag_collection": "contabilita",
"capabilities": ["basic_chat"],
"show_code": false
},
"riccardob545@gmail.com": {
"role": "engineering",
"name": "Riccardo",
"workspace": "engineering_workspace",
"rag_collection": "engineering_docs",
"capabilities": ["code"],
"show_code": true
},
"giuliadefranceschi05@gmail.com": {
"role": "architecture",
"name": "Giulia",
"workspace": "architecture_workspace",
"rag_collection": "architecture_manuals",
"capabilities": ["visual"],
"show_code": false
},
"giuseppe.defranceschi@gmail.com": {
"role": "architecture",
"name": "Giuseppe",
"workspace": "architecture_workspace",
"rag_collection": "architecture_manuals",
"capabilities": ["visual"],
"show_code": false
}
},
"guest_profile": {
"role": "guest",
"name": "Guest",
"workspace": "guest",
"rag_collection": "public",
"capabilities": ["basic_chat"],
"show_code": false
}
}