feat!: migrate from PostgreSQL to SQLite with persistent Docker volume

BREAKING CHANGE: PostgreSQL is no longer supported. SQLite is the sole
database provider, configured via DB_PATH env var (default: /data/meetup_bot.db).

Database:
- Remove postgres branch from get_db_config(), add DB_PATH env var
- Enable WAL mode via raw sqlite3 connection after PonyORM mapping
- Remove psycopg2-binary and testcontainers[postgres] dependencies

Docker:
- Rename Dockerfile.web to Dockerfile, delete Dockerfile.dev
- Add /data directory with appuser permissions in Dockerfile
- Remove postgres service from docker-compose.yml
- Replace pgdata volume with db_data:/data for SQLite persistence

CI:
- Delete smoke-test.yml workflow
- Remove DB_HOST, DB_NAME, DB_PORT from pytest.yml env blocks
- Update Dockerfile references in docker.yml workflow

Tests:
- Consolidate 6 unit test files into test_unit.py
- Move test_smoke.py into test_integration.py
- Rewrite test_e2e.py to use tempfile SQLite instead of PostgresContainer
- Add DISABLE_IP_WHITELIST env var and set DEV=false in e2e env to
  properly test unauthenticated request rejection from localhost
- Remove DEV=true workaround from conftest.py, set DB_PATH to temp path

Cleanup:
- Delete heroku.yml
- Update .env.example, README.md, architecture.md, devcontainer.json,
  taskfiles/docker.yml, taskfiles/pytest.yml

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: pythoninthegrass

.devcontainer/devcontainer.json

@@ -4,7 +4,7 @@
 	"name": "Dev Environment",
 	// "build": {
 	// 	"context": "..",
-	// 	"dockerfile": "../Dockerfile.web"
+	// 	"dockerfile": "../Dockerfile"
 	// },
   "service": "meetup-bot",
   "workspaceFolder": "/app",

.env.example

@@ -1,5 +1,5 @@
 ALGORITHM=HS256
-DEV=false
+DB_PATH=/data/meetup_bot.db
 APP_TOKEN=xapp-apptoken
 AUTH_BASE_URL=https://secure.meetup.com/oauth2/authorize
 BOT_USER_TOKEN=xoxb-botusertoken
@@ -10,11 +10,7 @@ CLIENT_ID=securesuperkey
 CLIENT_SECRET=secretsecuresuper
 CSV_FN=/tmp/output.csv
 DAYS=7
-DB_HOST=localoraws
-DB_NAME=herokuawsstring
 DB_PASS=anothercredgoeshere
-DB_PORT=5432
-DB_URL=ridiculousdbconnection
 DB_USER=someuser
 ENDPOINT=emoji.list
 HEROKU_APP=herokuapp

.github/workflows/docker.yml

@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        dockerfile: [Dockerfile.web]
+        dockerfile: [Dockerfile]
     concurrency:
       group: ${{ github.workflow }}-${{ github.event.workflow_run.head_branch || github.ref }}
       cancel-in-progress: true

.github/workflows/pytest.yml

@@ -26,10 +26,7 @@ env:
   CLIENT_SECRET: ${{ secrets.CLIENT_SECRET }}
   CSV_FN: ${{ vars.CSV_FN }}
   DAYS: ${{ vars.DAYS }}
-  DB_HOST: ${{ secrets.DB_HOST }}
-  DB_NAME: ${{ secrets.DB_NAME }}
   DB_PASS: ${{ secrets.DB_PASS }}
-  DB_PORT: ${{ vars.DB_PORT }}
   DB_USER: ${{ secrets.DB_USER }}
   JSON_FN: ${{ vars.JSON_FN }}
   PORT: ${{ vars.PORT }}
@@ -63,10 +60,7 @@ jobs:
           CLIENT_SECRET: ${{ env.CLIENT_SECRET }}
           CSV_FN: ${{ env.CSV_FN }}
           DAYS: ${{ env.DAYS }}
-          DB_HOST: ${{ env.DB_HOST }}
-          DB_NAME: ${{ env.DB_NAME }}
           DB_PASS: ${{ env.DB_PASS }}
-          DB_PORT: ${{ env.DB_PORT }}
           DB_USER: ${{ env.DB_USER }}
           JSON_FN: ${{ env.JSON_FN }}
           PORT: ${{ env.PORT }}

.github/workflows/smoke-test.yml

@@ -82,6 +82,8 @@ RUN adduser \
     --uid "${UID}" \
     ${USER_NAME}
 
+RUN mkdir -p /data && chown 10001:10001 /data
+
 USER ${USER_NAME}
 
 WORKDIR /app

Dockerfile.web DockerfileDockerfile.web renamed to Dockerfile

@@ -24,7 +24,6 @@ Use Meetup Pro API to send Slack messages before events occur.
 ## Minimum Requirements
 
 * [Python 3.11+](https://www.python.org/downloads/)
-* [Heroku CLI](https://devcenter.heroku.com/articles/heroku-cli)
 * [Create a Meetup API key](https://secure.meetup.com/meetup_api/key/)
 * Slack
   * [Create a Slack app](https://api.slack.com/apps)
@@ -96,7 +95,7 @@ devbox run test
 cd ./app
 
 # build image
-docker build -f Dockerfile.web --progress=plain -t meetup_bot:latest .
+docker build -f Dockerfile --progress=plain -t meetup_bot:latest .
 
 # run image
 docker run --name meetup_bot -it --rm --env-file .env -p 3000:3000 meetup_bot bash

Dockerfile.dev

@@ -28,30 +28,17 @@ class UserInfo(db.Entity):
     email = Optional(str)
 
 
-def get_db_config(dev=None):
-    """Return provider-specific bind kwargs based on DEV env var."""
-    if dev is None:
-        dev = config("DEV", default="false").lower() in ("true", "1", "yes")
-
-    if dev:
-        return {
-            "provider": "sqlite",
-            "filename": str(APP_DIR / "db.sqlite"),
-            "create_db": True,
-        }
-
+def get_db_config():
+    """Return SQLite bind kwargs."""
+    db_path = config("DB_PATH", default="/data/meetup_bot.db")
     return {
-        "provider": "postgres",
-        "user": config("DB_USER"),
-        "password": config("DB_PASS").strip('"'),
-        "host": config("DB_HOST"),
-        "database": config("DB_NAME"),
-        "port": config("DB_PORT", default=5432, cast=int),
-        "sslmode": config("DB_SSLMODE", default="prefer"),
+        "provider": "sqlite",
+        "filename": db_path,
+        "create_db": True,
     }
 
 
-def init_db(dev=None):
+def init_db():
     """Bind the shared Database instance and generate mappings.
 
     Safe to call multiple times; subsequent calls are no-ops.
@@ -60,7 +47,14 @@ def init_db(dev=None):
     if _initialized:
         return
 
-    db_config = get_db_config(dev=dev)
+    db_config = get_db_config()
     db.bind(**db_config)
     db.generate_mapping(create_tables=True)
+
+    import sqlite3
+
+    conn = sqlite3.connect(db_config["filename"])
+    conn.execute("PRAGMA journal_mode=WAL")
+    conn.close()
+
     _initialized = True

README.md

@@ -75,6 +75,9 @@
 """
 
 
+DISABLE_IP_WHITELIST = config("DISABLE_IP_WHITELIST", default=False, cast=bool)
+
+
 class IPConfig(BaseModel):
     whitelist: list[str] = ["localhost", "127.0.0.1"]
     public_ips: list[str] = []
@@ -232,7 +235,7 @@ async def get_current_active_user(current_user: User | None = Depends(get_curren
 
 
 async def ip_whitelist_or_auth(request: Request, current_user: User | None = Depends(get_current_active_user)):
-    if DEV or is_ip_allowed(request):
+    if DEV or (not DISABLE_IP_WHITELIST and is_ip_allowed(request)):
         return {"bypass_auth": True}
 
     if current_user is None: