modsetter--surfsense/surfsense_web/lib/env-config.ts

/**
 * Environment configuration for the frontend.
 *
 * Docker deployments use same-origin relative browser URLs behind Caddy.
 * NEXT_PUBLIC_* values remain only as build-time fallbacks for packaged clients
 * like Electron, where there is no bundled Caddy origin.
 */

import packageJson from "../package.json";

// Build-time fallback for packaged clients. Docker/runtime deployments default to
// local auth unless AUTH_TYPE/NEXT_PUBLIC_AUTH_TYPE explicitly selects Google.
export const BUILD_TIME_AUTH_TYPE = process.env.NEXT_PUBLIC_AUTH_TYPE || "LOCAL";

// Backend API URL. An empty string is valid in proxy mode and means
// same-origin relative requests (e.g. /api/v1/... and /auth/...).
export const BACKEND_URL = process.env.NEXT_PUBLIC_FASTAPI_BACKEND_URL ?? "";

type BackendUrlParam = string | number | boolean | null | undefined;

/**
 * Build browser-facing backend URLs without breaking proxy mode.
 *
 * In proxy mode BACKEND_URL intentionally stays empty, so callers must keep
 * same-origin relative URLs ("/api/v1/...") and let Caddy route them. When
 * BACKEND_URL is explicitly configured, the same path resolves against that
 * absolute backend origin.
 */
export function buildBackendUrl(path: string, params?: Record<string, BackendUrlParam>): string {
	const backendPath = path.startsWith("/") ? path : `/${path}`;
	const queryParams = new URLSearchParams();

	if (params) {
		for (const [key, value] of Object.entries(params)) {
			if (value !== null && value !== undefined) {
				queryParams.append(key, String(value));
			}
		}
	}

	if (BACKEND_URL) {
		const url = new URL(backendPath, BACKEND_URL);
		for (const [key, value] of queryParams) {
			url.searchParams.append(key, value);
		}
		return url.toString();
	}

	const queryString = queryParams.toString();
	if (!queryString) return backendPath;
	return `${backendPath}${backendPath.includes("?") ? "&" : "?"}${queryString}`;
}

// Server-side backend URL. Relative browser URLs do not work from RSC/API route
// code, so server callers should use Docker DNS or an explicit public backend.
export const SERVER_BACKEND_URL =
	process.env.SURFSENSE_BACKEND_INTERNAL_URL ||
	// TODO: Remove FASTAPI_BACKEND_INTERNAL_URL after the post-Caddy env migration window.
	process.env.FASTAPI_BACKEND_INTERNAL_URL ||
	"http://backend:8000";

// Build-time fallback for packaged clients. Docker runtime reads plain ETL_SERVICE
// through the runtime config provider first, then falls back to this baked value.
export const BUILD_TIME_ETL_SERVICE = process.env.NEXT_PUBLIC_ETL_SERVICE || "DOCLING";

// Build-time fallback for packaged clients. Docker runtime reads plain
// DEPLOYMENT_MODE through the runtime config provider first, then falls back to this baked value.
export const BUILD_TIME_DEPLOYMENT_MODE = process.env.NEXT_PUBLIC_DEPLOYMENT_MODE || "self-hosted";

// App version - defaults to package.json version
// Can be overridden at build time with NEXT_PUBLIC_APP_VERSION for full git tag version
export const APP_VERSION = process.env.NEXT_PUBLIC_APP_VERSION || packageJson.version;

// Global announcement banner. Useful for planned downtime / maintenance notices.
// Toggle on Vercel via NEXT_PUBLIC_GLOBAL_ANNOUNCEMENT_ENABLED ("true" to show) and
// set the copy with NEXT_PUBLIC_GLOBAL_ANNOUNCEMENT_MESSAGE.
export const GLOBAL_ANNOUNCEMENT_ENABLED =
	process.env.NEXT_PUBLIC_GLOBAL_ANNOUNCEMENT_ENABLED === "true";

export const GLOBAL_ANNOUNCEMENT_MESSAGE =
	process.env.NEXT_PUBLIC_GLOBAL_ANNOUNCEMENT_MESSAGE ?? "";