# pansy

Self-hostable garden planner: drag beds, bags, and containers onto a real-scale field, click into them to place freeform plops of plants, and zoom out to see what's planted where. Go backend + React frontend, one static binary.

See [DESIGN.md](DESIGN.md) for the architecture. Work is tracked in this repo's issues — start from the tracking epic.

## Quickstart

**Prerequisites:** Go 1.26+, Node 20+.

### Develop

Run the Go API and the Vite dev server together (Vite proxies `/api` → the API):

```sh
make dev
```

Then open http://localhost:5173. Or run the two halves in separate terminals for independent restarts:

```sh
make dev-api   # Go API on :8080
make dev-web   # Vite dev server on :5173
```

### Build & run

Produce the single static binary with the web build embedded, then run it:

```sh
make build
./pansy
```

Open http://localhost:8080 — one process serves both the JSON API and the app.

### Test

```sh
make test
```

## Configuration

All configuration is via environment variables; every value has a default, so `./pansy` runs with none set.

| Variable                  | Default            | Description                                                        |
| ------------------------- | ------------------ | ------------------------------------------------------------------ |
| `PANSY_PORT`              | `8080`             | TCP port the HTTP server listens on.                               |
| `PANSY_DB`                | `./pansy.db`       | SQLite database file path (created if absent).                     |
| `PANSY_BASE_URL`          | *(empty)*          | Externally-visible base URL; used to derive the OIDC redirect URI. |
| `PANSY_REGISTRATION`      | `open`             | `open` or `closed` — gates local self-service signup.              |
| `PANSY_LOCAL_AUTH`        | `true`             | Enable local password auth. Set `false` for pure-OIDC.            |
| `PANSY_OIDC_ISSUER`       | *(empty)*          | OIDC issuer/discovery URL (Authentik). Enables SSO when set.       |
| `PANSY_OIDC_CLIENT_ID`    | *(empty)*          | OIDC client ID.                                                    |
| `PANSY_OIDC_CLIENT_SECRET`| *(empty)*          | OIDC client secret.                                                |
| `PANSY_OIDC_BUTTON_LABEL` | `Sign in with SSO` | Label for the OIDC button on the login page.                      |
| `PANSY_TRUSTED_PROXIES`   | *(none)*           | Comma-separated proxy CIDRs/IPs to trust for client-IP resolution. |

Auth variables are read at startup now and consumed as the auth features land (issues #4/#5).