Add reactions to comments

.gitignore

@@ -138,4 +138,10 @@ dmypy.json
 .pytype/
 
 # Cython debug symbols
-cython_debug/
+cython_debug/
+
+# Old stylesheet backup
+forum/static/old_style.css
+
+.env
+

Dockerfile

@@ -0,0 +1,13 @@
+FROM python:3.11-slim
+
+WORKDIR /app
+
+COPY requirements.txt .
+
+RUN pip install --no-cache-dir -r requirements.txt
+
+COPY . .
+
+EXPOSE 5000
+
+CMD ["gunicorn", "-b", "0.0.0.0:5000", "forum.app:app"]

Documents/Current_Module_Summary.md

@@ -0,0 +1,34 @@
+# CircusCircusLimes — Module Summary
+
+This is a small Flask forum app ("Schooner"). Modules:
+
+## `config.py`
+Flask config class: secret key, SQLite DB URI (`circuscircus.db`), SQLAlchemy settings. Note: secret key is hardcoded (`'kristofer'`), not loaded from env despite the commented-out `load_dotenv`.
+
+## `forum/__init__.py`
+App factory (`create_app`). Builds the Flask app, loads config, registers the `comments` and `routes` blueprints, initializes SQLAlchemy, and creates tables. Comment notes more blueprints (post/subforum routes) may be split out later.
+
+## `forum/app.py`
+Entrypoint. Creates the app via `create_app()`, sets site name/description, wires up `flask_login`'s `LoginManager` with a `user_loader`, seeds default subforums (Forum, Announcements, Bug Reports, General Discussion, Other) on first run via `init_site()`/`add_subforum()`, and defines the `/` index route listing top-level subforums.
+
+## `forum/models.py`
+SQLAlchemy models and shared helpers:
+
+- **`User`** (UserMixin): username/email/password hash, admin flag, relations to posts/comments, password hashing via werkzeug.
+- **`Post`**: title/content/postdate, tied to a user and subforum, has a relative-time cache (`get_time_string`) recalculated every 30s.
+- **`Subforum`**: title/description, self-referential parent/children, list of posts, `hidden` flag.
+- **`Comment`**: content/postdate tied to a user and post, same relative-time caching pattern as `Post`.
+- **Helpers**: `error()` (renders a red-text HTML error string — not escaped, potential XSS if fed user input), `generateLinkPath()` (builds breadcrumb HTML for a subforum chain), and `valid_title`/`valid_content` length validators.
+
+## `forum/routes.py`
+Main blueprint (`rt`) with the bulk of the app's routes: login/logout, account creation, viewing a subforum, the "add post" form, viewing a post with comments, and submitting a new post. Explicit comment in the file flags it as needing to be split into smaller route modules (`post_routes`, `subforum_routes`, etc.).
+
+## `forum/comments.py`
+`comments` blueprint with a single route, `/action_comment`, for posting a comment on a post (login required).
+
+## `forum/user.py`
+Account utility functions: username/password regex validation, and `username_taken`/`email_taken` lookups against the `User` table.
+
+---
+
+**Worth flagging:** the hardcoded `SECRET_KEY`, the unescaped HTML in `error()`, and the author's own TODO to split `routes.py` into per-feature blueprints.

TASKS.md

@@ -0,0 +1,9 @@
+# Tasks
+
+## Active
+
+## Waiting On
+
+## Someday
+
+## Done

_to_delete/.env.example

@@ -0,0 +1,13 @@
+# Copy this file to .env (already gitignored) and fill in real values.
+# .env is loaded automatically by config.py via python-dotenv.
+
+# Any private, unpredictable string. Used by Flask-Login to sign session
+# cookies -- do not commit a real value, and do not reuse the same value
+# across developers/environments if you can avoid it.
+SECRET_KEY=
+
+# Shared MySQL database credentials (see CircusCircusLimes_MySQL_Team_Setup_Guide).
+DB_USER=
+DB_PASSWORD=
+DB_HOST=localhost
+DB_NAME=circuscircuslimes

compose.yaml

@@ -0,0 +1,43 @@
+services:
+  web:
+    build: .
+    container_name: dishcourse-web
+
+    ports:
+      - "${APP_PORT}:5000"
+
+    environment:
+      DB_USER: ${MYSQL_USER}
+      DB_PASSWORD: ${MYSQL_PASSWORD}
+      DB_HOST: db
+      DB_NAME: ${MYSQL_DATABASE}
+
+    depends_on:
+      db:
+        condition: service_healthy
+
+  db:
+    image: mysql:8.4
+    container_name: dishcourse-mysql
+
+    environment:
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
+      MYSQL_DATABASE: ${MYSQL_DATABASE}
+      MYSQL_USER: ${MYSQL_USER}
+      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
+
+    ports:
+      - "127.0.0.1:${DB_PORT}:3306"
+
+    volumes:
+      - dishcourse_mysql_data:/var/lib/mysql
+
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "root", "-p${MYSQL_ROOT_PASSWORD}"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+      start_period: 10s
+
+volumes:
+  dishcourse_mysql_data:

config.py

@@ -2,17 +2,32 @@
 Flask configuration variables.
 """
 from os import environ, path
+from sqlalchemy import URL
 
 basedir = path.abspath(path.dirname(__file__))
 # load_dotenv(path.join(basedir, '.env'))
 
 class Config:
-    """Set Flask configuration from .env file."""
-    # General Config
     SECRET_KEY = 'kristofer'
     FLASK_APP = 'forum.app'
 
-    # Database
-    SQLALCHEMY_DATABASE_URI = 'sqlite:///circuscircus.db'
+    # Reject request bodies over 2.5MB outright (avatar uploads are capped at
+    # 2MB in forum/user.py; this is a blunt server-side backstop so an
+    # oversized upload doesn't even get fully read into memory).
+    MAX_CONTENT_LENGTH = int(2.5 * 1024 * 1024)
+
+    DB_USER = environ.get("DB_USER")
+    DB_PASSWORD = environ.get("DB_PASSWORD")
+    DB_HOST = environ.get("DB_HOST", "localhost")
+    DB_NAME = environ.get("DB_NAME", "circuscircuslimes")
+
+    SQLALCHEMY_DATABASE_URI = URL.create(
+        drivername="mysql+pymysql",
+        username=DB_USER,
+        password=DB_PASSWORD,
+        host=DB_HOST,
+        database=DB_NAME
+    )
+
     SQLALCHEMY_ECHO = False
     SQLALCHEMY_TRACK_MODIFICATIONS = False