feat(services): backend service registry foundation (encryption, definitions, CRUD)

PR 1 of 4 for the runtime service registry change.

- Add Fernet encryption helper (services/secrets.py) with a required
  MANAGE_ENCRYPTION_KEY; validate it on startup.
- Add closed integrations/ registry with Pydantic config + widget-config
  definitions for grafana, prometheus, jellyfin, nextcloud, and ssh_tasks.
- Add services + service_task_runs tables and SettingsStore CRUD with
  cascade-delete (defensive until widgets carry service_id).
- Add /api/services/types and /api/services/instances CRUD (encrypted secrets,
  secrets_set flags only; never plaintext).
- Declare cryptography as a direct dependency.
- Require MANAGE_ENCRYPTION_KEY in compose + .env.example + README.
- Add 25 backend tests (registry, encryption, CRUD, cascade, task-run history).

Verification: ruff clean; pytest 225 passed; frontend lint/build green.

This commit is contained in:

Developer

2026-06-22 12:56:03 +00:00

parent d1819c0186

commit 8cdeadd6dd

20 changed files with 1470 additions and 0 deletions

									
										backend/pyproject.toml
									
		+1
		
												View File
												
				@@ -15,6 +15,7 @@ dependencies = [

				  "python-multipart>=0.0.9",

				  "prometheus-client>=0.21",

				  "python-json-logger>=2.0",

				  "cryptography>=42.0",

				]

				[project.optional-dependencies]