Files
blackroad-operating-system/backend/app/config.py
Claude 77134e8b09 Fix CORS: Add production domains to ALLOWED_ORIGINS
Updates ALLOWED_ORIGINS to include all BlackRoad domains, fixing the
"Access denied" error when accessing the Railway deployment.

Changes:
1. backend/app/config.py:33 - Updated default ALLOWED_ORIGINS to include:
   - https://blackroad.systems
   - https://www.blackroad.systems
   - https://os.blackroad.systems
   - https://blackroad-operating-system-production.up.railway.app
   - http://localhost:3000,http://localhost:8000 (for local dev)

2. backend/.env.example:27 - Updated template with production domains

This ensures Railway deployments work without requiring manual
environment variable configuration. The CORS middleware will now
accept requests from all BlackRoad domains.

Fixes: "Access denied" errors on production deployments
Related: DNS configuration in ops/domains.yaml
2025-11-17 07:27:22 +00:00

65 lines
1.8 KiB
Python

"""Application configuration"""
from pydantic_settings import BaseSettings
from typing import List
class Settings(BaseSettings):
"""Application settings"""
# Application
APP_NAME: str = "BlackRoad Operating System"
APP_VERSION: str = "1.0.0"
DEBUG: bool = True
ENVIRONMENT: str = "development"
# Database
# Provide sensible defaults so local development and tests can run
# without requiring environment configuration.
DATABASE_URL: str = "sqlite:///./test.db"
DATABASE_ASYNC_URL: str = "sqlite+aiosqlite:///./test.db"
# Redis
REDIS_URL: str = "redis://localhost:6379/0"
# Security
SECRET_KEY: str = "local-dev-secret-key"
ALGORITHM: str = "HS256"
ACCESS_TOKEN_EXPIRE_MINUTES: int = 30
REFRESH_TOKEN_EXPIRE_DAYS: int = 7
WALLET_MASTER_KEY: str = "local-wallet-master-key-32chars-0000"
# CORS
# Include production domains by default to ensure Railway deployments work
ALLOWED_ORIGINS: str = "https://blackroad.systems,https://www.blackroad.systems,https://os.blackroad.systems,https://blackroad-operating-system-production.up.railway.app,http://localhost:3000,http://localhost:8000"
@property
def allowed_origins_list(self) -> List[str]:
return [origin.strip() for origin in self.ALLOWED_ORIGINS.split(",")]
# AWS S3
AWS_ACCESS_KEY_ID: str = ""
AWS_SECRET_ACCESS_KEY: str = ""
AWS_REGION: str = "us-east-1"
S3_BUCKET_NAME: str = "blackroad-files"
# Email
SMTP_HOST: str = "smtp.gmail.com"
SMTP_PORT: int = 587
SMTP_USER: str = ""
SMTP_PASSWORD: str = ""
EMAIL_FROM: str = "noreply@blackroad.com"
# OpenAI
OPENAI_API_KEY: str = ""
# Blockchain
BLOCKCHAIN_DIFFICULTY: int = 4
MINING_REWARD: float = 50.0
class Config:
env_file = ".env"
case_sensitive = True
settings = Settings()