Config to db merge

[j-chmielewski]

No description provided.

[Copilot]

Pull request overview

This PR continues the “config to DB” migration by moving additional runtime-configured settings into the settings DB row, ensuring runtime defaults are initialized from DB state, and exposing new settings sections in the web UI for VPN stats retention/purge and enrollment/password reset timeouts.

Changes:

• Add DB-backed settings initialization (initialize_runtime_defaults) to generate/validate secret_key and derive webauthn_rp_id, and remove legacy grpc_url settings plumbing.
• Add new web settings pages/routes for “VPN stats” and “Enrollment”, plus a new “Auth cookie timeout (days)” field on the Instance settings page.
• Update migrations and tests to align with DB-backed settings and updated initialization helpers.

Reviewed changes

Copilot reviewed 21 out of 21 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
web/src/shared/api/types.ts	Adds SettingsTimeoutsAndMaintenance and extends the Settings type with new timeout/purge fields.
web/src/routes/_authorized/_default/settings/vpn-stats.tsx	Adds route entry for the new VPN stats settings page.
web/src/routes/_authorized/_default/settings/enrollment.tsx	Adds route entry for the new Enrollment settings page.
web/src/routeTree.gen.ts	Updates generated route tree to include the new settings routes.
web/src/pages/settings/SettingsVpnStatsPage/SettingsVpnStatsPage.tsx	Implements UI + PATCH for stats purge frequency/threshold and disable toggle.
web/src/pages/settings/SettingsInstancePage/SettingsInstancePage.tsx	Adds auth_cookie_timeout_days to schema/defaults and UI.
web/src/pages/settings/SettingsIndexPage/tabs/SettingsGeneralTab.tsx	Adds navigation entries to the new settings pages.
web/src/pages/settings/SettingsEnrollmentPage/SettingsEnrollmentPage.tsx	Implements UI + PATCH for enrollment/password reset token + session timeouts.
migrations/20260227091211_[2.0.0]_settings_in_db.up.sql	Removes grpc_url column addition; keeps other settings-in-DB columns.
migrations/20260227091211_[2.0.0]_settings_in_db.down.sql	Removes grpc_url column drop to match the updated up migration.
crates/defguard_proxy_manager/src/servers/enrollment.rs	Updates tests to use Settings::initialize_runtime_defaults.
crates/defguard_core/tests/integration/common.rs	Adjusts test config/setup to DB-backed settings and changes initialize_users signature.
crates/defguard_core/tests/integration/api/common/mod.rs	Updates caller to new initialize_users signature.
crates/defguard_core/tests/integration/api/acl.rs	Updates caller to new initialize_users signature.
crates/defguard_core/src/lib.rs	Hardcodes admin password for dev env init to match removed config field.
crates/defguard_core/src/enterprise/directory_sync/tests.rs	Updates settings initialization and admin user initialization.
crates/defguard_common/src/db/models/settings.rs	Implements runtime defaults init, secret key generation changes, removes grpc_url, refactors config-application logic, adds tests.
crates/defguard_common/src/config.rs	Removes/changes deprecated config fields to align with DB settings (e.g., auth_cookie_timeout now optional, removes default_admin_password and grpc_url).
crates/defguard/src/main.rs	Reorders startup to initialize current settings and apply runtime defaults at appropriate points.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.