feat(gateway): API Key 인증 + HTTPS (Caddy) 보안 강화

- gateway.py: auth middleware — /api/* 엔드포인트에 Bearer token 필수
- Caddyfile: Let's Encrypt 자동 HTTPS 리버스 프록시
- docker-compose.yml: Caddy 추가, Gateway 포트 내부 전용
- config.py: GATEWAY_API_KEY 설정 추가
- .env: 키 생성 명령어 가이드 포함
This commit is contained in:
Variet Worker
2026-03-11 19:49:24 +09:00
parent 6dbbb57fa7
commit 95da3e9307
5 changed files with 57 additions and 7 deletions

View File

@@ -43,6 +43,7 @@ class Config:
# Bot mode: 'local' (file-based bridge) or 'remote' (HTTP polling — future)
BOT_MODE: str = os.getenv("BOT_MODE", "local")
REMOTE_BRIDGE_URL: str = os.getenv("REMOTE_BRIDGE_URL", "")
GATEWAY_API_KEY: str = os.getenv("GATEWAY_API_KEY", "")
@classmethod
def validate(cls) -> list[str]: