New Database

start.py

@@ -1,23 +1,72 @@
-import sys, os
+"""Production WSGI entrypoint for Gunicorn (and plain `python start.py`).
+
+- Creates the Flask app and initializes the PostgreSQL schema (with the
+  schema-version migration gate).
+- Starts the background scheduler ONLY in the process that wins the
+  PostgreSQL advisory lock, so multiple Gunicorn workers never duplicate
+  alarms / reminders / weather jobs.
+- Prints the Root temp password (when one was generated or is still pending).
+
+Gunicorn usage (see Dockerfile / docker-compose.yml):
+    gunicorn --workers 2 --threads 2 --bind 0.0.0.0:5000 start:app
+"""
+import os
+import sys
+
 sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
+
 from backend.app import create_app
-from backend.scheduler import start_scheduler
+from backend.scheduler import (
+    start_scheduler, stop_scheduler, try_acquire_scheduler_lock, start_watchdog,
+)
 from backend.models import _EMITTED_PASSWORDS, get_auth_config
 
-db_path = os.environ.get("FLASK_DB_PATH", os.path.join(os.path.dirname(__file__), "data.db"))
-app = create_app(db_path=db_path)
-start_scheduler(app)
+# PostgreSQL connection string (kept as the historical DB_PATH config key).
+db_url = os.environ.get("DATABASE_URL",
+                        "postgresql://iot:iot@db:5432/iot_dboard")
 
-# Print temp password if it wasn't already emitted during DB init
-with app.app_context():
-    if not _EMITTED_PASSWORDS:
-        cfg = get_auth_config()
-        pw = cfg.get("temp_password", "")
-        if pw and cfg.get("must_configure_mfa"):
-            print(f"\n{'='*50}", file=sys.stderr)
-            print(f"  🔐 临时密码 (重启后仍有效): {pw}", file=sys.stderr)
-            print(f"  ⚠️  请使用此密码登录并配置双因素认证", file=sys.stderr)
-            print(f"{'='*50}\n", file=sys.stderr)
+app = create_app(db_path=db_url)
 
-bind_host = os.environ.get("FLASK_BIND", "127.0.0.1")
-app.run(host=bind_host, port=5000, debug=False, threaded=True)
+
+def _print_temp_password():
+    with app.app_context():
+        if not _EMITTED_PASSWORDS:
+            cfg = get_auth_config()
+            pw = cfg.get("temp_password", "")
+            if pw and cfg.get("must_configure_mfa"):
+                print(f"\n{'='*50}", file=sys.stderr)
+                print(f"  🔐 临时密码: {pw}", file=sys.stderr)
+                print(f"  ⚠️  请使用此密码登录并配置双因素认证", file=sys.stderr)
+                print(f"{'='*50}\n", file=sys.stderr)
+        else:
+            for pw in _EMITTED_PASSWORDS:
+                print(f"\n{'='*50}", file=sys.stderr)
+                print(f"  🔐 Root 初始临时密码: {pw}", file=sys.stderr)
+                print(f"  ⚠️  请使用此密码登录 Root 并配置双因素认证", file=sys.stderr)
+                print(f"{'='*50}\n", file=sys.stderr)
+
+
+_print_temp_password()
+
+
+def _maybe_start_scheduler():
+    """Start the scheduler if this process wins the advisory lock."""
+    if os.environ.get("FLASK_DISABLE_SCHEDULER", "").lower() in ("1", "true", "yes"):
+        return
+    if try_acquire_scheduler_lock(db_url):
+        start_scheduler(app)
+        app.logger.info("Scheduler started (advisory lock acquired)")
+
+
+_maybe_start_scheduler()
+if os.environ.get("FLASK_DISABLE_SCHEDULER", "").lower() not in ("1", "true", "yes"):
+    start_watchdog(app, db_url)
+
+
+if __name__ == "__main__":
+    import atexit
+    atexit.register(stop_scheduler)
+    DEBUG = os.environ.get("FLASK_DEBUG", "").lower() in ("1", "true", "yes")
+    bind_host = os.environ.get("FLASK_BIND", "127.0.0.1")
+    app.run(host=bind_host, port=int(os.environ.get("FLASK_PORT", "5000")),
+            debug=DEBUG, threaded=True)