from .base_settings import * from django.utils.translation import gettext_lazy as _ from decouple import config SECRET_KEY = config('SECRET_KEY', default=SECRET_KEY) # SECURITY WARNING: don't run with debug turned on in production! DEBUG = config('DEBUG', default=DEBUG, cast=bool) ALLOWED_HOSTS = ['*'] INSTALLED_APPS += [ # pip installed apps 'drf_spectacular', 'oauth2_provider', 'rest_framework', 'corsheaders', 'crispy_forms', 'crispy_bootstrap5', 'django_filters', 'jalali_date', # 'django_minio_backend', 'django_minio_backend.apps.DjangoMinioBackendConfig', # local apps 'utils', 'apps.users', 'apps.gooyal_oauth2', ] MIDDLEWARE = [ 'django.middleware.security.SecurityMiddleware', 'django.contrib.sessions.middleware.SessionMiddleware', 'corsheaders.middleware.CorsMiddleware', 'django.middleware.common.CommonMiddleware', # 'django.middleware.locale.LocaleMiddleware', 'django.middleware.csrf.CsrfViewMiddleware', 'django.contrib.auth.middleware.AuthenticationMiddleware', 'oauth2_provider.middleware.OAuth2TokenMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.middleware.clickjacking.XFrameOptionsMiddleware', ] OAUTH2_PROVIDER_APPLICATION_MODEL = "gooyal_oauth2.Application" OAUTH2_PROVIDER_ACCESS_TOKEN_MODEL = "gooyal_oauth2.AccessToken" OAUTH2_PROVIDER_ID_TOKEN_MODEL = "gooyal_oauth2.IDToken" OAUTH2_PROVIDER_GRANT_MODEL = "gooyal_oauth2.Grant" OAUTH2_PROVIDER_REFRESH_TOKEN_MODEL = "gooyal_oauth2.RefreshToken" BASE_OAUTH2_PROVIDER_PUBLIC_URL = config("BASE_OAUTH2_PROVIDER_PUBLIC_URL") BASE_OAUTH2_PROVIDER_PRIVATE_URL = config("BASE_OAUTH2_PROVIDER_PRIVATE_URL") CLIENT_ID = config('CLIENT_ID') CLIENT_SECRET = config('CLIENT_SECRET') SCOPES = config('SCOPES', default='') OAUTH2_PROVIDER = { # this is the list of available scopes # 'SCOPES_BACKEND_CLASS': 'apps.gooyal_oauth2.scopes.Scopes', # 'SCOPES': {'read': 'Read scope', # 'write': 'Write scope', # 'groups': 'Access to your groups', # 'introspection': 'Introspect token scope'}, 'OAUTH2_VALIDATOR_CLASS': 'apps.gooyal_oauth2.validators.OAuth2Validator', 'RESOURCE_SERVER_INTROSPECTION_URL': BASE_OAUTH2_PROVIDER_PRIVATE_URL + '/introspect/', # 'RESOURCE_SERVER_AUTH_TOKEN': '3yUqsWtwKYKHnfivFcJu', # OR this but not both: 'RESOURCE_SERVER_INTROSPECTION_CREDENTIALS': (CLIENT_ID, CLIENT_SECRET), } REST_FRAMEWORK = { 'DEFAULT_AUTHENTICATION_CLASSES': ( 'oauth2_provider.contrib.rest_framework.OAuth2Authentication', 'rest_framework.authentication.SessionAuthentication', ), 'DEFAULT_PERMISSION_CLASSES': ( 'rest_framework.permissions.IsAuthenticated', ), 'DEFAULT_PAGINATION_CLASS': 'rest_framework.pagination.LimitOffsetPagination', 'PAGE_SIZE': 200, "DEFAULT_SCHEMA_CLASS": "drf_spectacular.openapi.AutoSchema", } TEMPLATES[0]['DIRS'] += [BASE_DIR / 'templates'] AUTHENTICATION_BACKENDS = ( 'oauth2_provider.backends.OAuth2Backend', 'django.contrib.auth.backends.ModelBackend', ) DATABASES = { 'default': { "ENGINE": "django.contrib.gis.db.backends.postgis", 'NAME': config('DB_NAME'), 'USER': config('DB_USER'), 'PASSWORD': config('DB_PASSWORD'), 'HOST': config('DB_HOST', '127.0.0.1'), 'PORT': config('DB_PORT', ''), } } USE_L10N = True LOCALE_PATHS = [ BASE_DIR / 'locale', ] MEDIA_URL = 'media/' MEDIA_ROOT = BASE_DIR / 'media' if DEBUG == True: STATICFILES_DIRS = ( BASE_DIR / 'static', ) else: STATIC_ROOT = BASE_DIR / 'static' LOGIN_URL = '/users/login/request/' LOGIN_REDIRECT_URL = '/' CRISPY_ALLOWED_TEMPLATE_PACKS = "bootstrap5" CRISPY_TEMPLATE_PACK = "bootstrap5" SPECTACULAR_SETTINGS = { 'TITLE': 'merchants', 'DESCRIPTION': 'service api reference', 'VERSION': '1.0.0', 'SERVE_INCLUDE_SCHEMA': False, # OTHER SETTINGS "PARSER_WHITELIST": ["rest_framework.parsers.JSONParser"], } AUTH_USER_MODEL = 'users.User' CORS_ORIGIN_ALLOW_ALL = True CORS_ALLOW_ALL_ORIGINS = True CSRF_TRUSTED_ORIGINS = ['http://*', 'https://*', 'http://*.gooyal.com', 'https://*.gooyal.com'] JALALI_DATE_DEFAULTS = { 'Strftime': { 'date': '%Y/%m/%d', 'datetime': '%H:%M:%S _ %Y/%m/%d', } } CACHES = { "default": { "BACKEND": "django_redis.cache.RedisCache", "LOCATION": config('BASE_REDIS_URL'), "OPTIONS": { "CLIENT_CLASS": "django_redis.client.DefaultClient", } } } LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'formatters': { # 'verbose': { # 'format': '{levelname} AT: {asctime} LINE: {lineno} LOGGER: {name} FILE: {pathname} MESSAGE: {message}', # 'style': '{', # }, # 'simple': { # 'format': '{levelname} {message}', # 'style': '{', # }, 'loki': { 'class': "utils.logs.LokiFormatter", # required }, }, 'handlers': { 'loki': { 'level': 'DEBUG', # Log level. Required 'class': 'utils.logs.LokiHandler', # Required 'formatter': 'loki', # Loki formatter. Required 'timeout': 1, # Post request timeout, default is 0.5. Optional 'url': 'https://loki.winsoo.ir/loki/api/v1/push', # Loki url. Defaults to localhost. Optional. # 'auth': ("user", "password"), # Basic auth to authenticate with loki. Default is None (i.e. no auth). Optional 'tags': { "app": "ads", "env": "production" }, # Tags / Labels to attach to the log. Optional, but strongly encoraged to use. 'mode': 'thread', # Push mode. Can be 'sync' or 'thread'. Sync is blocking, thread is non-blocking. Defaults to sync. Optional. }, # 'file': { # 'level': 'DEBUG', # 'class': 'logging.handlers.TimedRotatingFileHandler', # 'filename': 'logs/app.log', # 'formatter': 'verbose', # "when": 'D', # "backupCount": 5, # }, }, 'loggers': { 'django': { 'handlers': ['loki'], 'level': 'INFO', }, # 'root': { # 'handlers': ['file'], # 'level': 'DEBUG', # 'propagate': True, # }, }, } from datetime import timedelta from typing import List, Tuple STORAGES = { "default": { "BACKEND": "django_minio_backend.models.MinioBackend", }, "staticfiles": { # "BACKEND": "django_minio_backend.models.MinioBackendStatic", # "BACKEND": "django.core.files.storage.FileSystemStorage", "BACKEND": "django.contrib.staticfiles.storage.StaticFilesStorage", }, } MINIO_ENDPOINT = config('MINIO_ENDPOINT', default='drive.gooyal.com') MINIO_USE_HTTPS = config('MINIO_USE_HTTPS', default=True, cast=bool) MINIO_EXTERNAL_ENDPOINT = config('MINIO_EXTERNAL_ENDPOINT', default='drive.gooyal.com') # Default is same as MINIO_ENDPOINT MINIO_EXTERNAL_ENDPOINT_USE_HTTPS = config('MINIO_EXTERNAL_ENDPOINT_USE_HTTPS', default=True, cast=bool) # Default is same as MINIO_USE_HTTPS MINIO_REGION = None # Default is set to None MINIO_ACCESS_KEY = config('MINIO_ACCESS_KEY') MINIO_SECRET_KEY = config('MINIO_SECRET_KEY') MINIO_URL_EXPIRY_HOURS = timedelta(days=1) # Default is 7 days (longest) if not defined MINIO_CONSISTENCY_CHECK_ON_START = False MINIO_MEDIA_FILES_BUCKET = config('MINIO_MEDIA_FILES_BUCKET') # replacement for MEDIA_ROOT # MINIO_STATIC_FILES_BUCKET = 'my-static-files-bucket' # replacement for STATIC_ROOT MINIO_PRIVATE_BUCKETS = [ 'default', ] MINIO_PUBLIC_BUCKETS = [ 'default-public', MINIO_MEDIA_FILES_BUCKET ] MINIO_POLICY_HOOKS: List[Tuple[str, dict]] = [] MINIO_BUCKET_CHECK_ON_SAVE = True # Default: True // Creates bucket if missing, then save # Custom HTTP Client (OPTIONAL) import os import certifi import urllib3 timeout = timedelta(minutes=5).seconds ca_certs = os.environ.get('SSL_CERT_FILE') or certifi.where() MINIO_HTTP_CLIENT: urllib3.poolmanager.PoolManager = urllib3.PoolManager( timeout=urllib3.util.Timeout(connect=timeout, read=timeout), maxsize=10, cert_reqs='CERT_REQUIRED', ca_certs=ca_certs, retries=urllib3.Retry( total=5, backoff_factor=0.2, status_forcelist=[500, 502, 503, 504] ) )