Add centralized constants module and .env configuration support

app/whitelists.py

@@ -18,12 +18,16 @@ import os
 import re
 from typing import Any
 
-# ---------------------------------------------------------------------------
-# Paths
-# ---------------------------------------------------------------------------
-
-_HERE = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
-_DATA_DIR = os.path.join(_HERE, "data")
+from .constants import (
+    CLOUDFLARE_URL_V4,
+    CLOUDFLARE_URL_V6,
+    CLOUDFLARE_V4_FILE,
+    CLOUDFLARE_V6_FILE,
+    OPENFACTORY_FILE,
+    OPENFACTORY_URL,
+    PALOALTO_FILE,
+    PALOALTO_URL,
+)
 
 # ---------------------------------------------------------------------------
 # CIDR extraction regex
@@ -32,23 +36,12 @@ _DATA_DIR = os.path.join(_HERE, "data")
 CIDR_RE = re.compile(
     r"(?<![0-9A-Fa-f:.])([0-9A-Fa-f:.]+/\d{1,3})(?![0-9A-Fa-f:.])")
 
-# ---------------------------------------------------------------------------
-# Provider URLs
-# ---------------------------------------------------------------------------
-
-OPENFACTORY_URL = "https://openfactory.net/geofeed.csv"
-CLOUDFLARE_URL_V4 = "https://www.cloudflare.com/ips-v4"
-CLOUDFLARE_URL_V6 = "https://www.cloudflare.com/ips-v6"
-PALOALTO_URL = "https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
-
 # ---------------------------------------------------------------------------
 # Local file paths (checked first, before remote download)
 # ---------------------------------------------------------------------------
 
-OPENFACTORY_FILE = os.path.join(_DATA_DIR, "openfactory", "geofeed.csv")
-CLOUDFLARE_V4_FILE = os.path.join(_DATA_DIR, "cloudflare", "ips-v4.txt")
-CLOUDFLARE_V6_FILE = os.path.join(_DATA_DIR, "cloudflare", "ips-v6.txt")
-PALOALTO_FILE = os.path.join(_DATA_DIR, "paloalto", "scanner-ips.txt")
+# (paths live in app/constants.py as OPENFACTORY_FILE, CLOUDFLARE_V4_FILE,
+#  CLOUDFLARE_V6_FILE, PALOALTO_FILE; URLs as OPENFACTORY_URL, ...)
 
 # ---------------------------------------------------------------------------
 # Built-in fallback CIDR lists