euler-site: the content site and the auth service.

15 lines of Python Raw file Open on GitHub

#!/usr/bin/env python3.14
# -*- coding: utf-8 -*-
"""euler-site: the content site and the auth service (docs/package-guide.md § 1, docs/web-server-guide.md).

It builds on the solver package's domain modules — never its shell — and nothing here imports
the web shell (`euler_webshell`). Each service sub-package is one isolated service: it listens on a unix domain socket
under `/run/euler/`, runs as its own dedicated system user from the
`/opt/euler` system venv, and is reached only through the Caddy edge (or, for
admin planes, a group-gated local socket).

Hard rule: nothing under `euler_site` may import :mod:`solver.config` — the
service users cannot read the repo checkout, and config construction resolves
the *shell's* identity, which a service must not do. Each service reads its own
scoped environment (e.g. `/etc/euler/auth.env`) instead.
"""