add env variable to disable direct invitation links

.env.example

@@ -8,6 +8,7 @@ ADMIN_COOKIE=muelleel
 
 UPLOAD_PATH=/tmp/uploads
 VIDEO_PATH=/tmp/videos
+DIRECT_INVITATION_LINKS_ENABLED=true
 HOMEPAGE_TRAILER_URL=http://localhost:4321/craftattack/video/trailer/embed
 
 TEAMSPEAK_LINK=http://example.com

README.md

@@ -328,7 +328,7 @@ Alle Webhooks:
 ## Environment Variables
 
 | Name                              | Default                    | Beschreibung                                                                                       |
-| ---------------------- | -------------------------- | -------------------------------------------------------------------------------------------------- |
+| --------------------------------- | -------------------------- | -------------------------------------------------------------------------------------------------- |
 | `HOST`                            | `0.0.0.0`                  | Bind-Adresse des Webservers                                                                        |
 | `PORT`                            | `8080`                     | Port des Webservers                                                                                |
 | `ROOT_URL`                        | `http://localhost:4321`    | Vollständige öffentliche URL inklusive Subpath                                                     |
@@ -339,6 +339,7 @@ Alle Webhooks:
 | `ADMIN_COOKIE`                    | `muelleel`                 | Name des Admin-Session-Cookies                                                                     |
 | `UPLOAD_PATH`                     | -                          | Verzeichnis für Report-Anhänge. Ohne Wert sind Uploads deaktiviert                                 |
 | `VIDEO_PATH`                      | -                          | Verzeichnis für Videos. Ohne Wert sind die Video-Routen deaktiviert                                |
+| `DIRECT_INVITATION_LINKS_ENABLED` | `true`                     | Ob direkte Einladungslinks unter `/signup/{code}` erreichbar sind                                  |
 | `HOMEPAGE_TRAILER_URL`            | -                          | URL des Trailers, der auf der Startseite per Iframe eingebettet wird                               |
 | `CACHE_PATH`                      | OS-Temp-Verzeichnis        | Verzeichnis für generierte Caches, z.B. Video Thumbnails                                           |
 | `MAX_UPLOAD_BYTES`                | `20971520`                 | Maximale Gesamtgröße aller Report-Anhänge eines Reports in Bytes                                   |

astro.config.mjs

@@ -41,6 +41,8 @@ export default defineConfig({
       UPLOAD_PATH: envField.string({ context: 'server', access: 'secret', optional: true }),
       VIDEO_PATH: envField.string({ context: 'server', access: 'secret', optional: true }),
 
+      DIRECT_INVITATION_LINKS_ENABLED: envField.boolean({ context: 'server', access: 'secret', default: true }),
+
       MAX_UPLOAD_BYTES: envField.number({ context: 'server', access: 'secret', default: 20 * 1024 * 1024 }),
 
       START_DATE: envField.string({ context: 'server', access: 'secret', default: '1970-01-01' }),

flake.nix

@@ -44,6 +44,7 @@
 
             UPLOAD_PATH = "./.data/uploads";
             VIDEO_PATH = "./.data/videos";
+            DIRECT_INVITATION_LINKS_ENABLED = "true";
             HOMEPAGE_TRAILER_URL = "http://localhost:4321/craftattack/video/out-final-final/embed";
 
             TEAMSPEAK_LINK = "http://example.com";

src/app/admin/directInvitations/DirectInvitations.svelte

@@ -9,6 +9,13 @@
     directInvitations
   } from '@app/admin/directInvitations/directInvitations.ts';
 
+  // props
+  interface Props {
+    linksEnabled: boolean;
+  }
+
+  let { linksEnabled }: Props = $props();
+
   // state
   let directInvitationEditPopupDirectInvitation = $state(null);
   let directInvitationEditPopupOpen = $derived(!!directInvitationEditPopupDirectInvitation);
@@ -59,6 +66,7 @@
   {/snippet}
 
   {#snippet extraActions(directInvitation)}
+    {#if linksEnabled}
       <button
         class="cursor-pointer"
         title={copiedCode === directInvitation.code ? 'Link kopiert' : 'Link kopieren'}
@@ -70,6 +78,7 @@
           <span class="iconify iconify-[heroicons--clipboard]"></span>
         {/if}
       </button>
+    {/if}
   {/snippet}
 </DataTable>
 

src/pages/admin/users/direct_invitations.astro

@@ -1,4 +1,5 @@
 ---
+import { DIRECT_INVITATION_LINKS_ENABLED } from 'astro:env/server';
 import { Session } from '@util/session.ts';
 import { Permissions } from '@util/permissions.ts';
 import { siteUrl } from '@util/url.ts';
@@ -12,5 +13,5 @@ if (!session) return Astro.redirect(siteUrl('admin'));
 
 <AdminLayout title="Direkte Einladungen">
   <SidebarActions slot="actions" client:load />
-  <DirectInvitations client:load />
+  <DirectInvitations linksEnabled={DIRECT_INVITATION_LINKS_ENABLED} client:load />
 </AdminLayout>

src/pages/signup/[...code].astro

@@ -1,9 +1,12 @@
 ---
+import { DIRECT_INVITATION_LINKS_ENABLED } from 'astro:env/server';
 import { db } from '@db/database.ts';
 import Signup from '@app/website/signup/Signup.astro';
 
 const { code } = Astro.params;
 
+if (!DIRECT_INVITATION_LINKS_ENABLED) return new Response(null, { status: 404 });
+
 const directSignup = await db.getDirectSignupByCode({ code: code! });
 if (!directSignup) return new Response(null, { status: 404 });
 ---