History

mwiegand a5436deaf0 test(datetime): pin tz-aware contract for fixtures (red until UtcDateTime lands) Drops .replace(tzinfo=None) from 8 fixture sites that mirrored the production-side strip convention. Two of these (test_live_state_poller.py test_new_player_opens_session_with_backfilled_join, test_models.py test_user_has_password_changed_at_default) now fail with TypeError when comparing aware in-memory values against naive DB reads -- that failure is intentional and describes the contract commit 2 must satisfy: DB-sourced datetimes return aware UTC. The remaining 6 sites were already cosmetic (fixture-seed only, no aware-vs-DB comparison) but are flipped here so future authors write aware fixtures. The three deliberately-naive sites in test_timeago.py (lines 67, 73, 113) are LEFT untouched -- they exercise _ensure_utc's normalize-up path and are feature tests, not workarounds. See docs/superpowers/specs/2026-05-16-tz-aware-datetime-design.md. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-16 11:55:48 +02:00
..
alembic	feat(l4d2-web): add command_history table for RCON console transcript	2026-05-14 21:26:56 +02:00
l4d2web	fix(csp): allow workshop preview thumbnails from steamusercontent.com	2026-05-16 11:22:30 +02:00
tests	test(datetime): pin tz-aware contract for fixtures (red until UtcDateTime lands)	2026-05-16 11:55:48 +02:00
alembic.ini	chore(l4d2): flatten component layout	2026-05-05 23:47:06 +02:00
pyproject.toml	refactor(repo): uv workspace + hatchling + layout restructure	2026-05-15 22:04:29 +02:00
README.md	refactor(repo): uv workspace + hatchling + layout restructure	2026-05-15 22:04:29 +02:00

README.md

l4d2-web-app

Flask web app for managing L4D2 servers through user-private blueprints.

Key v1 behaviors

Local username/password login; no public signup
Admin-managed overlay catalog
Private blueprints per user
Server creation from blueprints (live-linked; no per-server blueprint overrides)
Async job model with persisted command logs in job_logs
Desired vs actual state model
Live logs for jobs and servers via SSE endpoints
Host operations go through l4d2ctl via a local host command runner, not direct l4d2host imports

Frontend constraints

Server-rendered templates (Jinja)
Vendored HTMX (static/vendor/htmx.min.js)
Custom CSS only
Tokenized, consistent link and accent colors

Development

From the workspace root (../):

uv sync          # creates .venv, installs l4d2host + l4d2web editable, plus dev deps
uv run pytest l4d2web/tests -q

Configuration

The web app reads these settings from the environment:

DATABASE_URL: SQLAlchemy database URL, for example sqlite:////var/lib/left4me/left4me.db.
SECRET_KEY: Flask secret key used for sessions and CSRF-sensitive state.
JOB_WORKER_THREADS: number of background job worker threads.

In the systemd deployment, environment is loaded from /etc/left4me/host.env and /etc/left4me/web.env.

Admin Bootstrap

Create the first admin account with the Flask CLI. Provide the password through LEFT4ME_ADMIN_PASSWORD:

LEFT4ME_ADMIN_PASSWORD='change-me' flask create-user <username> --admin