release nouri 1.0.0

2026-04-12 19:18:55 +02:00
parent b0d1cee5f5
commit 325101da99
17 changed files with 769 additions and 45 deletions
@@ -16,10 +16,14 @@ from .constants import (
    BUILDER_OPTIONS,
    DAYPARTS,
    DEFAULT_CATEGORIES,
+    ENERGY_DENSITY_LABELS,
+    ENERGY_DENSITY_OPTIONS,
    ITEM_KIND_LABELS,
    ITEM_KIND_SINGULAR_LABELS,
    NOTIFICATION_CHANNEL_OPTIONS,
    ROLE_LABELS,
+    SUGGESTION_STYLE_LABELS,
+    SUGGESTION_STYLE_OPTIONS,
    VISIBILITY_DESCRIPTIONS,
    VISIBILITY_LABELS,
    WEEKDAY_OPTIONS,
@@ -69,7 +73,9 @@ def create_app() -> Flask:
        PERMANENT_SESSION_LIFETIME=timedelta(days=30),
        SESSION_COOKIE_HTTPONLY=True,
        SESSION_COOKIE_SAMESITE="Lax",
-        APP_VERSION="0.6.0",
+        SESSION_COOKIE_SECURE=os.environ.get("NOURI_SECURE_COOKIES", "0") == "1",
+        APP_VERSION="1.0.0",
+        TIMEZONE=os.environ.get("NOURI_TIMEZONE", "Europe/Berlin"),
        VAPID_PUBLIC_KEY=os.environ.get("NOURI_VAPID_PUBLIC_KEY", ""),
        VAPID_PRIVATE_KEY=os.environ.get("NOURI_VAPID_PRIVATE_KEY", ""),
        VAPID_SUBJECT=os.environ.get("NOURI_VAPID_SUBJECT", "mailto:mail@hnz.io"),
@@ -97,6 +103,10 @@ def create_app() -> Flask:
            "builder_descriptions": BUILDER_DESCRIPTIONS,
            "builder_options": BUILDER_OPTIONS,
            "daypart_suggestions": DAYPARTS,
+            "energy_density_options": ENERGY_DENSITY_OPTIONS,
+            "energy_density_labels": ENERGY_DENSITY_LABELS,
+            "suggestion_style_options": SUGGESTION_STYLE_OPTIONS,
+            "suggestion_style_labels": SUGGESTION_STYLE_LABELS,
            "visibility_labels": VISIBILITY_LABELS,
            "visibility_descriptions": VISIBILITY_DESCRIPTIONS,
            "role_labels": ROLE_LABELS,
@@ -159,6 +169,9 @@ def create_app() -> Flask:
        content_type = response.headers.get("Content-Type", "")
        if content_type.startswith("text/html"):
            response.headers.setdefault("Cache-Control", "no-store, max-age=0")
+        response.headers.setdefault("X-Content-Type-Options", "nosniff")
+        response.headers.setdefault("Referrer-Policy", "same-origin")
+        response.headers.setdefault("X-Frame-Options", "SAMEORIGIN")
        return response

    @app.errorhandler(413)