34b1d8d2a6
Deklarix itself no longer depends on the Anthropic API — that was a separate API key/billing relationship from Claude Code (used to develop Deklarix), which the user did not intend to take on for the product itself. Consideration (Gegenleistung) is no longer guessed from text — it's a required form field now, since only the submitter actually knows whether a business relationship existed. A keyword-only system can't tell a covertly-paid post from a genuinely organic one; they read identically. What internal/extract *can* still determine reliably and deterministically from the caption: whether a disclosure keyword is present (werbung, anzeige, bezahlte partnerschaft, paid partnership, #ad, #werbung, #anzeige, #sponsored, #sponsoredby, #sponsoredpost — case-insensitive), its exact original-case wording, and whether it sits before the platform's "mehr anzeigen" truncation point (~125 chars Instagram, ~150 TikTok — rough estimates, platforms change these without notice, verify before real customer use). internal/extract's Anthropic HTTP client and tool-use schema are gone (client.go/api.go deleted), replaced by engine.go — a stateless Engine with no network calls. extract.Result/ParsePayload keep the exact same JSON shape as before (gegenleistung/kennzeichnung_vorhanden/ kennzeichnung_wortlaut/kennzeichnung_vor_kuerzung), so internal/store and internal/dossier needed no changes at all — only extract itself, the web form/handler (new consideration field), and main.go (no more ANTHROPIC_API_KEY requirement) changed. Trade-off the user was told and accepted: without an LLM, the system can no longer independently catch undisclosed paid content that carries no recognizable keyword at all — that now rests on the submitter's honesty. Creative or implicit disclosure phrasing outside the keyword list also won't be recognized. Verified against a real running instance with zero API keys configured: register -> check (real rule engine, correctly triggered WK-004 for a disclosure placed 130 characters in, past the Instagram threshold) -> archive -> PDF dossier download, all against real Postgres. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
66 lines
3.3 KiB
Bash
Executable File
66 lines
3.3 KiB
Bash
Executable File
#!/bin/bash
|
|
# Deklarix — postinst
|
|
set -e
|
|
|
|
SERVICE_USER="deklarix"
|
|
CONFIG_DIR="/etc/deklarix"
|
|
DATA_DIR="/var/lib/deklarix"
|
|
LOG_DIR="/var/log/deklarix"
|
|
|
|
case "$1" in
|
|
configure)
|
|
# ─── apt-Quelle einrichten/aktualisieren ────────────────────
|
|
# Gleiches Muster wie enconf: Gitea-Debian-Registry, Suite =
|
|
# OS-Codename, Komponente = Kanal (aktuell nur "testing"). Ein
|
|
# bereits gewählter Kanal bleibt über Upgrades hinweg erhalten.
|
|
mkdir -p /etc/apt/keyrings
|
|
curl -fsSL "https://git.netcell-it.de/api/packages/projekte/debian/repository.key" \
|
|
-o /etc/apt/keyrings/deklarix-gitea.asc 2>/dev/null || true
|
|
if [ -f /etc/apt/keyrings/deklarix-gitea.asc ]; then
|
|
DX_CODENAME="$(. /etc/os-release 2>/dev/null; echo "${VERSION_CODENAME:-}")"
|
|
case "$DX_CODENAME" in bookworm|trixie) ;; *) DX_CODENAME="trixie" ;; esac
|
|
DX_CHANNEL="$(grep -oE 'projekte/debian[[:space:]]+[a-z]+[[:space:]]+(stable|testing)' \
|
|
/etc/apt/sources.list.d/deklarix.list 2>/dev/null | awk '{print $NF}' | head -1)"
|
|
case "$DX_CHANNEL" in stable|testing) ;; *) DX_CHANNEL="testing" ;; esac
|
|
echo "deb [signed-by=/etc/apt/keyrings/deklarix-gitea.asc] https://git.netcell-it.de/api/packages/projekte/debian $DX_CODENAME $DX_CHANNEL" \
|
|
> /etc/apt/sources.list.d/deklarix.list
|
|
fi
|
|
|
|
# ─── System-User + Verzeichnisse ────────────────────────────
|
|
if ! id -u "$SERVICE_USER" >/dev/null 2>&1; then
|
|
useradd -r -s /usr/sbin/nologin -d "$DATA_DIR" "$SERVICE_USER"
|
|
fi
|
|
mkdir -p "$DATA_DIR" "$LOG_DIR" "$CONFIG_DIR"
|
|
chown "$SERVICE_USER:$SERVICE_USER" "$DATA_DIR" "$LOG_DIR"
|
|
|
|
# ─── Konfiguration ───────────────────────────────────────────
|
|
# Erstinstall: Vorlage kopieren, nicht scharf schalten (Secrets
|
|
# fehlen noch). Upgrade: bestehende deklarix.env bleibt unberührt.
|
|
if [ ! -f "$CONFIG_DIR/deklarix.env" ]; then
|
|
cp "$CONFIG_DIR/deklarix.env.example" "$CONFIG_DIR/deklarix.env"
|
|
chmod 640 "$CONFIG_DIR/deklarix.env"
|
|
chown "root:$SERVICE_USER" "$CONFIG_DIR/deklarix.env"
|
|
fi
|
|
|
|
systemctl daemon-reload 2>/dev/null || true
|
|
systemctl enable deklarix.service >/dev/null 2>&1 || true
|
|
|
|
# Nicht blind starten — ohne gesetzte DATABASE_URL würde der Dienst
|
|
# nur in eine Restart-Schleife laufen (main.go bricht sonst bewusst
|
|
# mit log.Fatal ab, siehe CLAUDE.md "keine stillen Fallbacks"). Die
|
|
# Vorlage liefert sie auskommentiert aus — ein Treffer hier bedeutet
|
|
# also wirklich "vom Admin gesetzt", nicht den Platzhalter.
|
|
if grep -qE '^DATABASE_URL=.+' "$CONFIG_DIR/deklarix.env" 2>/dev/null; then
|
|
systemctl restart deklarix.service
|
|
else
|
|
echo ""
|
|
echo " → Deklarix installiert, aber noch nicht gestartet."
|
|
echo " DATABASE_URL in $CONFIG_DIR/deklarix.env setzen, dann:"
|
|
echo " systemctl start deklarix"
|
|
echo ""
|
|
fi
|
|
;;
|
|
esac
|
|
|
|
exit 0
|