web - refactor core modules, harden authorization, simplify endpoints

docker-compose.local.yml

@@ -51,6 +51,45 @@ services:
       interval: 5s
       timeout: 5s
       retries: 12
+  
+  scheduler:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    env_file:
+      - .env
+    environment:
+      TZ: Europe/Berlin
+      HOME: /tmp/intranet-worker
+      XDG_CACHE_HOME: /tmp/intranet-worker-cache
+      PLAYWRIGHT_BROWSERS_PATH: /ms-playwright
+
+      DB_HOST: db
+      DB_PORT: "5432"
+
+      CKAL_XLSX_DIR: /data/ckal-xlsx
+      PDF_OUTPUT: /data/pdf/terminuebersicht.pdf
+      DASHBOARD_MONTH_DIR: /var/www/html/intranet_repo/projects/dashboard/month
+
+      CALENDAR_INTERVAL_SECONDS: "60"
+
+      STRATO_SYNC_ENABLED: "false"
+      BRANDSCHUTZ_MAIL_ENABLED: "false"
+
+    command: ["/opt/intranet/docker/scheduler.py"]
+    init: true
+    user: "33:33"
+    shm_size: "512m"
+
+    depends_on:
+      db:
+        condition: service_healthy
+
+    volumes:
+      - dashboard_month:/var/www/html/intranet_repo/projects/dashboard/month
+      - ckal_xlsx:/data/ckal-xlsx
+      - calendar_pdf:/data/pdf
+      - scheduler_state:/data/state
 
 volumes:
   postgres_data:
@@ -61,3 +100,4 @@ volumes:
   dashboard_month:
   ckal_xlsx:
   calendar_pdf:
+  scheduler_state: