Add dassiedrop.env config file support for portable builds

Load KEY=VALUE pairs from dassiedrop.env next to the binary at startup,
before any os.environ.get() calls. System env vars take precedence.
Works on Windows and Linux (frozen binary or running from source).

Includes dassiedrop.env.example with all user-facing options documented
for both Windows and Linux path formats. The example file is bundled in
CI build artifacts and release assets alongside dassiedrop.exe.

A new binary test verifies that HTTP_PORT set only in dassiedrop.env
(not in the process environment) causes the server to bind on that port.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: melevittfl

.github/workflows/build-windows.yml

@@ -42,13 +42,17 @@ jobs:
         uses: actions/upload-artifact@v4
         with:
           name: dassiedrop-windows-${{ steps.version.outputs.version }}
-          path: dist/dassiedrop.exe
+          path: |
+            dist/dassiedrop.exe
+            dassiedrop.env.example
           if-no-files-found: error
 
       - name: Create release asset
         if: startsWith(github.ref, 'refs/tags/')
         uses: softprops/action-gh-release@v2
         with:
-          files: dist/dassiedrop.exe
+          files: |
+            dist/dassiedrop.exe
+            dassiedrop.env.example
           name: DassieDrop ${{ steps.version.outputs.version }}
           generate_release_notes: true

.gitignore

@@ -4,6 +4,7 @@ __pycache__/
 
 .venv/
 .env
+dassiedrop.env
 .codex/
 
 uploads/

dassiedrop.env.example

@@ -0,0 +1,44 @@
+# DassieDrop configuration file
+# Place this file as dassiedrop.env in the same folder as the dassiedrop binary.
+# Environment variables set before launching the binary always take precedence.
+# Format: KEY=VALUE  (no spaces required around =)
+# Comments start with #. A # inside a value is part of the value.
+# Quotes are optional: HOST="0.0.0.0" and HOST=0.0.0.0 are equivalent.
+
+# --- Network ---
+# HTTP_PORT=8000
+# HOST=0.0.0.0
+
+# --- Storage ---
+# Directory where uploaded files are stored.
+# Windows:
+# UPLOAD_DIR=C:\DassieDrop\uploads
+# Linux/macOS:
+# UPLOAD_DIR=/opt/dassiedrop/uploads
+# Maximum total storage in bytes. 0 = unlimited.
+# MAX_TOTAL_STORAGE_BYTES=0
+
+# --- Access Control ---
+# App-level password. Anyone opening the app must enter this. Empty = open access.
+# ACCESS_CODE=
+# Programmatic API key (X-API-Key header). Empty = disabled.
+# API_KEY=
+# Admin password that can access any workspace.
+# WORKSPACE_SUPER_PASSWORD=
+
+# --- Sessions ---
+# SESSION_TTL_SECONDS=604800
+
+# --- HTTPS ---
+# Set to 1 to enable HTTPS. A self-signed certificate is generated automatically.
+# HTTPS=0
+# HTTPS_PORT=8443
+# Hostname for the self-signed certificate. Set to your machine's hostname or LAN IP.
+# HTTPS_SELF_SIGNED_HOST=localhost
+
+# --- Share Links ---
+# Base URL prepended to share links. Useful behind a reverse proxy.
+# SHARE_BASE_URL=
+
+# --- Auto-update check ---
+# UPDATE_CHECK_ENABLED=0

dassiedrop/config.py

@@ -25,6 +25,31 @@
     VERSION_FILE = BASE_DIR / "VERSION"
     _WRITABLE_BASE = BASE_DIR
 
+
+def _load_env_file(path: Path) -> None:
+    try:
+        text = path.read_text(encoding="utf-8-sig")
+    except OSError:
+        return
+    for line in text.splitlines():
+        line = line.strip()
+        if not line or line.startswith("#"):
+            continue
+        if "=" not in line:
+            continue
+        key, _, value = line.partition("=")
+        key = key.strip()
+        if not key:
+            continue
+        value = value.strip()
+        if len(value) >= 2 and value[0] == value[-1] and value[0] in ('"', "'"):
+            value = value[1:-1]
+        if key not in os.environ:
+            os.environ[key] = value
+
+
+_load_env_file(_WRITABLE_BASE / "dassiedrop.env")
+
 UPLOAD_DIR = Path(os.environ.get("UPLOAD_DIR", str(_WRITABLE_BASE / "uploads"))).resolve()
 MAX_FILE_SIZE = 1024 * 1024 * 1024  # 1 GB
 MAX_JSON_BODY_SIZE = int(os.environ.get("MAX_JSON_BODY_SIZE", str(1024 * 1024)))

tests/test_binary.py

@@ -372,6 +372,34 @@ def test_workspace_index_is_written_to_upload_dir(self) -> None:
         payload = json.loads(index_file.read_text(encoding="utf-8"))
         self.assertIn("workspaces", payload)
 
+    def test_env_file_is_loaded(self) -> None:
+        port = _find_free_port()
+        env_file = BINARY.parent / "dassiedrop.env"
+        env_file.write_text(f"HTTP_PORT={port}\n", encoding="utf-8")
+        try:
+            env = {
+                **os.environ,
+                "HOST": "127.0.0.1",
+                "UPLOAD_DIR": str(self._upload_dir),
+                "HTTPS": "",
+            }
+            env.pop("HTTP_PORT", None)
+            env.pop("PORT", None)
+            proc = subprocess.Popen(
+                [str(BINARY)],
+                env=env,
+                stdout=subprocess.DEVNULL,
+                stderr=subprocess.DEVNULL,
+            )
+            self._procs.append(proc)
+            self.assertTrue(
+                _wait_for_server(port),
+                f"Binary did not bind on port {port} from dassiedrop.env — "
+                "env file may not be loaded",
+            )
+        finally:
+            env_file.unlink(missing_ok=True)
+
 
 if __name__ == "__main__":
     unittest.main()