Deploy Signal Generator app

.env.example

@@ -1,10 +0,0 @@
-# API Security
-API_SECRET=change_this_to_a_secure_random_string
-
-# Database Configuration (TiDB / MySQL)
-DB_HOST=gateway01.us-west-2.prod.aws.tidbcloud.com
-DB_PORT=4000
-DB_USERNAME=your_username
-DB_PASSWORD=your_password
-DB_DATABASE=gotti
-DB_SSL_CA=src/db/isrgrootx1.pem

src/db/local_database.py

@@ -115,20 +115,49 @@ class LocalDatabase:
         # SSL Configuration for TiDB
         ssl_ca = os.getenv('DB_SSL_CA')
         if ssl_ca:
-            # Resolve relative path if needed
-            if not os.path.isabs(ssl_ca):
-                # Assuming src/isrgrootx1.pem is relative to project root
-                # self.db_dir is usually project_root/database
-                # So project root is self.db_dir.parent
-                project_root = Path(__file__).parent.parent.parent
-                ssl_ca_path = project_root / ssl_ca
-                
-                if ssl_ca_path.exists():
-                    self.mysql_config['ssl_ca'] = str(ssl_ca_path)
+            # Handle if the content itself is passed (begins with ---)
+            if "-----BEGIN CERTIFICATE-----" in ssl_ca:
+                try:
+                    import tempfile
+                    # Create a temporary file for the certificate
+                    # We use a fixed location in /tmp relative to workdir if possible or tempfile
+                    # But tempfile is safer. We need it to persist for the process life.
+                    # Be careful about file cleanup, but for a container it's fine.
+                    
+                    # Create a persistent temp file (won't be deleted automatically on close)
+                    # We'll save it to a known location for debugging: /tmp/tidb_ca.pem
+                    tmp_ca_path = Path("/tmp/tidb_ca.pem")
+                    
+                    # If on Windows (local dev), assume execution in app dir
+                    if os.name == 'nt':
+                        tmp_ca_path = Path("tidb_ca.pem")
+
+                    with open(tmp_ca_path, "w", encoding='utf-8') as f:
+                        f.write(ssl_ca)
+                    
+                    self.mysql_config['ssl_ca'] = str(tmp_ca_path)
                     self.mysql_config['ssl_verify_cert'] = True
                     self.mysql_config['ssl_verify_identity'] = True
-                else:
-                    print(f"⚠️  SSL CA file not found at {ssl_ca_path}")
+                    print(f"🔒 Using provided SSL Certificate content (saved to {tmp_ca_path})")
+                except Exception as e:
+                    print(f"⚠️ Failed to write SSL CA content: {e}")
+            else:
+                # Resolve relative path if needed (existing logic)
+                if not os.path.isabs(ssl_ca):
+                    project_root = Path(__file__).parent.parent.parent
+                    ssl_ca_path = project_root / ssl_ca
+                    
+                    if ssl_ca_path.exists():
+                        self.mysql_config['ssl_ca'] = str(ssl_ca_path)
+                        self.mysql_config['ssl_verify_cert'] = True
+                        self.mysql_config['ssl_verify_identity'] = True
+                        print(f"🔒 Using SSL Certificate from file: {ssl_ca_path}")
+                    else:
+                        print(f"⚠️  SSL CA file not found at {ssl_ca_path}")
+                elif os.path.exists(ssl_ca):
+                     self.mysql_config['ssl_ca'] = ssl_ca
+                     self.mysql_config['ssl_verify_cert'] = True
+                     self.mysql_config['ssl_verify_identity'] = True
         
         self.compress = compress