restructure: move backend into backend/

backend/app/main.py

@@ -0,0 +1,77 @@
+from fastapi import Depends, FastAPI
+from fastapi.middleware.cors import CORSMiddleware
+from sqlalchemy import text
+
+from .auth import require_api_key
+from .config import get_settings
+from .database import engine
+from .errors import APIError, api_error_handler
+from .routers import (
+    customers,
+    device,
+    nas,
+    nasreload,
+    radacct,
+    radcheck,
+    radgroupcheck,
+    radgroupreply,
+    radpostauth,
+    radreply,
+    radusergroup,
+    vlan,
+)
+
+settings = get_settings()
+
+app = FastAPI(
+    title="FreeRADIUS REST API",
+    description="RESTful CRUD over the FreeRADIUS SQL schema. "
+    "All endpoints require the `X-API-Key` header.",
+    version="1.0.0",
+)
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=settings.cors_origin_list,
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
+app.add_exception_handler(APIError, api_error_handler)
+
+
+# ---- unauthenticated meta endpoints ----
+@app.get("/", tags=["meta"])
+def root():
+    return {"service": "freeradius-rest-api", "docs": "/docs", "health": "/health"}
+
+
+@app.get("/health", tags=["meta"])
+def health():
+    try:
+        with engine.connect() as conn:
+            conn.execute(text("SELECT 1"))
+        db_ok = True
+    except Exception:
+        db_ok = False
+    return {"status": "ok" if db_ok else "degraded", "database": "up" if db_ok else "down"}
+
+
+# ---- authenticated resource routers ----
+protected = [Depends(require_api_key)]
+for module in (
+    customers,
+    nas,
+    radcheck,
+    radreply,
+    radgroupcheck,
+    radgroupreply,
+    radusergroup,
+    vlan,
+    device,
+    radacct,
+    radpostauth,
+    nasreload,
+):
+    app.include_router(module.router, dependencies=protected)