bridgy-fed/app.yaml

# https://cloud.google.com/appengine/docs/standard/reference/app-yaml?tab=python

# application: bridgy-federated

runtime: python311

# default_expiration: 1h

# https://cloud.google.com/appengine/docs/standard/python3/runtime#entrypoint_best_practices
# https://docs.gunicorn.org/en/latest/settings.html#timeout
entrypoint: gunicorn --workers 1 --threads 30 --timeout 60 -b :$PORT app:app

# background: https://github.com/snarfed/bridgy/issues/578
# https://github.com/snarfed/bridgy/issues/1051
automatic_scaling:
  max_idle_instances: 1
  target_cpu_utilization: .9
  min_pending_latency: 500ms
  max_concurrent_requests: 30

inbound_services:
- warmup

vpc_access_connector:
  name: projects/bridgy-federated/locations/us-central1/connectors/bridgy-fed

env_variables:
  PDS_HOST: fed.brid.gy

  # # sandbox
  # PLC_HOST: plc.bsky-sandbox.dev
  # APPVIEW_HOST: api.bsky-sandbox.dev
  # BGS_HOST: bgs.bsky-sandbox.dev
  # MOD_SERVICE_HOST: ?
  # MOD_SERVICE_DID: ?

  # prod
  PLC_HOST: plc.directory
  APPVIEW_HOST: api.bsky.app
  BGS_HOST: bsky.network
  MOD_SERVICE_HOST: mod.bsky.app
  MOD_SERVICE_DID: did:plc:ar7c4by46qjdydhdevvrndac
  # ...or test against labeler.dholms.xyz / did:plc:vzxheqfwpbi3lxbgdh22js66

handlers:

# static
- url: /static
  static_dir: static
  secure: always

- url: /oauth_dropins_static
  static_dir: oauth_dropins_static

- url: /fonts
  static_dir: oauth_dropins_fonts

- url: /favicon.ico
  static_files: static/favicon.ico
  upload: static/favicon.ico
  secure: always

- url: /robots.txt
  static_files: static/robots.txt
  upload: static/robots.txt
  secure: always

- url: /.well-known/security.txt
  static_files: static/security.txt
  upload: static/security.txt
  secure: always

# dynamic
- url: .*
  script: auto
  secure: always
minor noop config/deps tweaks 2023-09-21 20:17:43 +00:00			`# https://cloud.google.com/appengine/docs/standard/reference/app-yaml?tab=python`
initial setup 2017-08-12 23:51:48 +00:00
rename: bridgy-activitypub => bridgy-federated ...merging with bridgy-ostatus! 2017-08-14 14:56:49 +00:00			`# application: bridgy-federated`
temporarily disable actually deleting Followers on AP Delete requests mastodon.social sends Deletes for every Bridgy Fed account, all at basically the same time, and we have many Follower objects, so we have to do this table scan for each one, so the requests take a long time and end up spawning extra App Engine instances that we get billed for. and the Delete requests are almost never for followers we have. TODO: revisit this and do it right. 2020-10-11 15:32:55 +00:00
upgrade to 3.11 2023-09-21 15:44:06 +00:00			`runtime: python311`
temporarily disable actually deleting Followers on AP Delete requests mastodon.social sends Deletes for every Bridgy Fed account, all at basically the same time, and we have many Follower objects, so we have to do this table scan for each one, so the requests take a long time and end up spawning extra App Engine instances that we get billed for. and the Delete requests are almost never for followers we have. TODO: revisit this and do it right. 2020-10-11 15:32:55 +00:00
migrate to the app engine standard python 3 runtime! https://cloud.google.com/appengine/docs/standard/python3/python-differences https://cloud.google.com/appengine/docs/standard/python/migrate-to-python3/ 2019-12-26 06:20:57 +00:00			`# default_expiration: 1h`
initial setup 2017-08-12 23:51:48 +00:00
migrate to the app engine standard python 3 runtime! https://cloud.google.com/appengine/docs/standard/python3/python-differences https://cloud.google.com/appengine/docs/standard/python/migrate-to-python3/ 2019-12-26 06:20:57 +00:00			`# https://cloud.google.com/appengine/docs/standard/python3/runtime#entrypoint_best_practices`
			`# https://docs.gunicorn.org/en/latest/settings.html#timeout`
bump pending latency down to 500ms, threads up to 30, for link preview DOSes for #378 2023-01-22 15:46:06 +00:00			`entrypoint: gunicorn --workers 1 --threads 30 --timeout 60 -b :$PORT app:app`
initial setup 2017-08-12 23:51:48 +00:00
app config autoscaling changes to try to keep instance count down snarfed/bridgy#1051 2021-07-01 20:27:26 +00:00			`# background: https://github.com/snarfed/bridgy/issues/578`
flask: start porting render.py 2021-07-06 03:54:23 +00:00			`# https://github.com/snarfed/bridgy/issues/1051`
app config autoscaling changes to try to keep instance count down snarfed/bridgy#1051 2021-07-01 20:27:26 +00:00			`automatic_scaling:`
			`max_idle_instances: 1`
			`target_cpu_utilization: .9`
bump pending latency down to 500ms, threads up to 30, for link preview DOSes for #378 2023-01-22 15:46:06 +00:00			`min_pending_latency: 500ms`
app config autoscaling changes to try to keep instance count down snarfed/bridgy#1051 2021-07-01 20:27:26 +00:00			`max_concurrent_requests: 30`

turn on App Engine warmup requests https://cloud.google.com/appengine/docs/standard/reference/app-yaml?tab=python#inbound_services 2022-11-15 19:36:38 +00:00			`inbound_services:`
			`- warmup`

start using memorystore memcached for ndb global cache 2024-06-04 22:13:53 +00:00			`vpc_access_connector:`
			`name: projects/bridgy-federated/locations/us-central1/connectors/bridgy-fed`

app config: add env vars: PLC_HOST, APPVIEW_HOST 2023-09-23 22:01:06 +00:00			`env_variables:`
switch prod arroba env vars to point to ATProto federation sandbox https://atproto.com/blog/federation-developer-sandbox 2023-09-28 21:42:44 +00:00			`PDS_HOST: fed.brid.gy`

switch app service from Bluesky sandbox to prod 2024-02-29 00:16:10 +00:00			`# # sandbox`
			`# PLC_HOST: plc.bsky-sandbox.dev`
			`# APPVIEW_HOST: api.bsky-sandbox.dev`
			`# BGS_HOST: bgs.bsky-sandbox.dev`
ATroto.send: for flag activities, send createReport to mod service for snarfed/granary#596. background: * https://docs.bsky.app/docs/advanced-guides/moderation#reporting * https://github.com/bluesky-social/atproto/discussions/2350#discussioncomment-8847613 * https://github.com/snarfed/granary/issues/596 2024-04-26 20:59:04 +00:00			`# MOD_SERVICE_HOST: ?`
			`# MOD_SERVICE_DID: ?`
switch app service from Bluesky sandbox to prod 2024-02-29 00:16:10 +00:00
			`# prod`
			`PLC_HOST: plc.directory`
			`APPVIEW_HOST: api.bsky.app`
			`BGS_HOST: bsky.network`
ATroto.send: for flag activities, send createReport to mod service for snarfed/granary#596. background: * https://docs.bsky.app/docs/advanced-guides/moderation#reporting * https://github.com/bluesky-social/atproto/discussions/2350#discussioncomment-8847613 * https://github.com/snarfed/granary/issues/596 2024-04-26 20:59:04 +00:00			`MOD_SERVICE_HOST: mod.bsky.app`
			`MOD_SERVICE_DID: did:plc:ar7c4by46qjdydhdevvrndac`
			`# ...or test against labeler.dholms.xyz / did:plc:vzxheqfwpbi3lxbgdh22js66`
app config: add env vars: PLC_HOST, APPVIEW_HOST 2023-09-23 22:01:06 +00:00
initial setup 2017-08-12 23:51:48 +00:00			`handlers:`

			`# static`
			`- url: /static`
			`static_dir: static`
add secure: always to static file routes 2017-08-19 20:30:54 +00:00			`secure: always`
initial setup 2017-08-12 23:51:48 +00:00
switch oauth_dropins symlink to oauth_dropins_static, drop it from repo it's now local clone only. this avoids import confusion, ie whether importing oauth_dropins uses the virtualenv's installed version or the symlinked files directly, which eg ran oauth-dropins's tests along with granary's/bridgy's, and caused Circle breakages like https://app.circleci.com/pipelines/github/snarfed/granary/767/workflows/21608f75-bb99-47dc-83ef-78d4f4793ed1/jobs/2819 corresponds to snarfed/granary@00294822d61765235a17eeb72ccd74dc2c231abb, snarfed/bridgy@b3f50d82489e85b14a8ef58a3abd0714cae85b4d 2021-08-06 18:19:33 +00:00			`- url: /oauth_dropins_static`
			`static_dir: oauth_dropins_static`
minor config changes for let's encrypt certbot, stub index.html 2017-08-16 14:47:21 +00:00
lots of UI tweaks 2022-11-13 07:19:09 +00:00			`- url: /fonts`
			`static_dir: oauth_dropins_fonts`

start on home page html, style, and assets 2017-08-18 14:31:31 +00:00			`- url: /favicon.ico`
			`static_files: static/favicon.ico`
			`upload: static/favicon.ico`
add secure: always to static file routes 2017-08-19 20:30:54 +00:00			`secure: always`
start on home page html, style, and assets 2017-08-18 14:31:31 +00:00
			`- url: /robots.txt`
			`static_files: static/robots.txt`
			`upload: static/robots.txt`
add secure: always to static file routes 2017-08-19 20:30:54 +00:00			`secure: always`
initial setup 2017-08-12 23:51:48 +00:00
add /.well-known/security.txt https://securitytxt.org/ 2024-01-22 20:55:34 +00:00			`- url: /.well-known/security.txt`
			`static_files: static/security.txt`
			`upload: static/security.txt`
			`secure: always`

initial setup 2017-08-12 23:51:48 +00:00			`# dynamic`
migrate to the app engine standard python 3 runtime! https://cloud.google.com/appengine/docs/standard/python3/python-differences https://cloud.google.com/appengine/docs/standard/python/migrate-to-python3/ 2019-12-26 06:20:57 +00:00			`- url: .*`
			`script: auto`
webfinger: handle /.well-known/webfinger, salmon link bug fix 2017-08-27 18:53:48 +00:00			`secure: always`