coolify/app/Providers/HorizonServiceProvider.php
Selim Salihovic 2ff0233f47
feat: add configurable Horizon dashboard admin access
Add HORIZON_ALLOWED_EMAILS env var to grant additional users access to
the Horizon dashboard. Root user (User ID 0) always retains access.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-03-31 12:47:08 +02:00

72 lines
2.3 KiB
PHP

<?php
namespace App\Providers;
use App\Contracts\CustomJobRepositoryInterface;
use App\Models\ApplicationDeploymentQueue;
use App\Models\User;
use App\Repositories\CustomJobRepository;
use Illuminate\Support\Facades\Event;
use Illuminate\Support\Facades\Gate;
use Laravel\Horizon\Contracts\JobRepository;
use Laravel\Horizon\Events\JobReserved;
use Laravel\Horizon\HorizonApplicationServiceProvider;
class HorizonServiceProvider extends HorizonApplicationServiceProvider
{
/**
* Register services.
*/
public function register(): void
{
$this->app->singleton(JobRepository::class, CustomJobRepository::class);
$this->app->singleton(CustomJobRepositoryInterface::class, CustomJobRepository::class);
}
/**
* Bootstrap services.
*/
public function boot(): void
{
parent::boot();
Event::listen(function (JobReserved $event) {
$payload = $event->payload->decoded;
$jobName = $payload['displayName'];
if ($jobName === 'App\Jobs\ApplicationDeploymentJob') {
$tags = $payload['tags'];
$id = $payload['id'];
$deploymentQueueId = collect($tags)->first(function ($tag) {
return str_contains($tag, 'App\Models\ApplicationDeploymentQueue');
});
if (blank($deploymentQueueId)) {
return;
}
$deploymentQueueId = explode(':', $deploymentQueueId)[1];
$deploymentQueue = ApplicationDeploymentQueue::find($deploymentQueueId);
$deploymentQueue->update([
'horizon_job_id' => $id,
]);
}
});
}
protected function gate(): void
{
Gate::define('viewHorizon', function ($user) {
$root_user = User::find(0);
// Get additional allowed emails from environment variable
$allowedEmails = array_filter(
array_map('trim', explode(',', env('HORIZON_ALLOWED_EMAILS', '')))
);
// Merge root user email with additional allowed emails
$authorizedEmails = array_merge(
[$root_user->email],
$allowedEmails
);
return in_array($user->email, $authorizedEmails);
});
}
}