""" Django settings for main project. Generated by 'django-admin startproject' using Django 5.1.4. For more information on this file, see https://docs.djangoproject.com/en/5.1/topics/settings/ For the full list of settings and their values, see https://docs.djangoproject.com/en/5.1/ref/settings/ """ from pathlib import Path from decouple import config # Build paths inside the project like this: BASE_DIR / 'subdir'. BASE_DIR = Path(__file__).resolve().parent.parent # Quick-start development settings - unsuitable for production # See https://docs.djangoproject.com/en/5.1/howto/deployment/checklist/ # SECURITY WARNING: keep the secret key used in production secret! SECRET_KEY = config('SECRET_KEY', default='django-insecure-ync*tk)t*bz3zzbza&xvw6cl+wk6+@gk^@)2)-pp=^&v%@knib') # SECURITY WARNING: don't run with debug turned on in production! DEBUG = config('DEBUG', default=True, cast=bool) ALLOWED_HOSTS = ['*'] # Application definition INSTALLED_APPS = [ 'django.contrib.admin', 'django.contrib.auth', 'django.contrib.contenttypes', 'django.contrib.sessions', 'django.contrib.messages', 'django.contrib.staticfiles', # pip installed apps 'drf_spectacular', 'oauth2_provider', 'rest_framework', 'corsheaders', 'crispy_forms', 'crispy_bootstrap5', 'django_filters', 'jalali_date', # 'django_minio_backend', 'django_minio_backend.apps.DjangoMinioBackendConfig', # local apps 'utils', 'apps.users', 'apps.gooyal_oauth2', 'apps.promotions', ] MIDDLEWARE = [ 'django.middleware.security.SecurityMiddleware', 'django.contrib.sessions.middleware.SessionMiddleware', 'corsheaders.middleware.CorsMiddleware', 'django.middleware.common.CommonMiddleware', # 'django.middleware.locale.LocaleMiddleware', 'django.middleware.csrf.CsrfViewMiddleware', 'django.contrib.auth.middleware.AuthenticationMiddleware', 'oauth2_provider.middleware.OAuth2TokenMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.middleware.clickjacking.XFrameOptionsMiddleware', 'utils.exceptions.ErrorMiddleware', ] ROOT_URLCONF = 'main.urls' TEMPLATES = [ { 'BACKEND': 'django.template.backends.django.DjangoTemplates', 'DIRS': [BASE_DIR / 'templates'], 'APP_DIRS': True, 'OPTIONS': { 'context_processors': [ 'django.template.context_processors.debug', 'django.template.context_processors.request', 'django.contrib.auth.context_processors.auth', 'django.contrib.messages.context_processors.messages', ], }, }, ] WSGI_APPLICATION = 'main.wsgi.application' # Database # https://docs.djangoproject.com/en/5.1/ref/settings/#databases DATABASES = { 'default': { "ENGINE": "django.db.backends.postgresql", 'NAME': config('DB_NAME'), 'USER': config('DB_USER'), 'PASSWORD': config('DB_PASSWORD'), 'HOST': config('DB_HOST', '127.0.0.1'), 'PORT': config('DB_PORT', ''), } } # Password validation # https://docs.djangoproject.com/en/5.1/ref/settings/#auth-password-validators AUTH_PASSWORD_VALIDATORS = [ { 'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator', }, { 'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator', }, { 'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator', }, { 'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator', }, ] # Internationalization # https://docs.djangoproject.com/en/5.1/topics/i18n/ LANGUAGE_CODE = 'en-us' TIME_ZONE = 'UTC' USE_I18N = True USE_TZ = True # Static files (CSS, JavaScript, Images) # https://docs.djangoproject.com/en/5.1/howto/static-files/ STATIC_URL = 'static/' # Default primary key field type # https://docs.djangoproject.com/en/5.1/ref/settings/#default-auto-field DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField' ####################### OAUTH2_PROVIDER_APPLICATION_MODEL = "gooyal_oauth2.Application" OAUTH2_PROVIDER_ACCESS_TOKEN_MODEL = "gooyal_oauth2.AccessToken" OAUTH2_PROVIDER_ID_TOKEN_MODEL = "gooyal_oauth2.IDToken" OAUTH2_PROVIDER_GRANT_MODEL = "gooyal_oauth2.Grant" OAUTH2_PROVIDER_REFRESH_TOKEN_MODEL = "gooyal_oauth2.RefreshToken" OAUTH2_PROVIDER_PUBLIC_URL = config("OAUTH2_PROVIDER_PUBLIC_URL") OAUTH2_PROVIDER_PRIVATE_URL = config("OAUTH2_PROVIDER_PRIVATE_URL") OAUTH2_CLIENT_ID = config('OAUTH2_CLIENT_ID') OAUTH2_CLIENT_SECRET = config('OAUTH2_CLIENT_SECRET') OAUTH2_SCOPES = config('OAUTH2_SCOPES', default='') OAUTH2_PROVIDER = { # this is the list of available scopes # 'SCOPES_BACKEND_CLASS': 'apps.gooyal_oauth2.scopes.Scopes', # 'SCOPES': {'read': 'Read scope', # 'write': 'Write scope', # 'groups': 'Access to your groups', # 'introspection': 'Introspect token scope'}, 'OAUTH2_VALIDATOR_CLASS': 'apps.gooyal_oauth2.validators.OAuth2Validator', 'RESOURCE_SERVER_INTROSPECTION_URL': OAUTH2_PROVIDER_PRIVATE_URL + '/introspect/', # 'RESOURCE_SERVER_AUTH_TOKEN': '3yUqsWtwKYKHnfivFcJu', # OR this but not both: 'RESOURCE_SERVER_INTROSPECTION_CREDENTIALS': (OAUTH2_CLIENT_ID, OAUTH2_CLIENT_SECRET), } REST_FRAMEWORK = { 'DEFAULT_AUTHENTICATION_CLASSES': ( 'oauth2_provider.contrib.rest_framework.OAuth2Authentication', 'rest_framework.authentication.SessionAuthentication', ), 'DEFAULT_PERMISSION_CLASSES': ( 'rest_framework.permissions.IsAuthenticated', ), 'DEFAULT_PAGINATION_CLASS': 'rest_framework.pagination.LimitOffsetPagination', 'PAGE_SIZE': 200, "DEFAULT_SCHEMA_CLASS": "drf_spectacular.openapi.AutoSchema", # 'DEFAULT_THROTTLE_CLASSES': [ # 'rest_framework.throttling.AnonRateThrottle', # ], 'DEFAULT_THROTTLE_RATES': { # 'otp_min': '1/min', # 'otp_day': '20/day', }, 'EXCEPTION_HANDLER': 'utils.exceptions.exception_handler', } AUTHENTICATION_BACKENDS = ( 'oauth2_provider.backends.OAuth2Backend', 'django.contrib.auth.backends.ModelBackend', ) USE_L10N = True LOCALE_PATHS = [ BASE_DIR / 'locale', ] MEDIA_URL = 'media/' MEDIA_ROOT = BASE_DIR / 'media' if DEBUG == True: STATICFILES_DIRS = ( BASE_DIR / 'static', ) else: STATIC_ROOT = BASE_DIR / 'static' LOGIN_URL = '/users/login/request/' LOGIN_REDIRECT_URL = '/' CRISPY_ALLOWED_TEMPLATE_PACKS = "bootstrap5" CRISPY_TEMPLATE_PACK = "bootstrap5" SPECTACULAR_SETTINGS = { 'TITLE': 'service', 'DESCRIPTION': 'service api reference', 'VERSION': '1.0.0', 'SERVE_INCLUDE_SCHEMA': False, # OTHER SETTINGS "PARSER_WHITELIST": ["rest_framework.parsers.JSONParser"], } AUTH_USER_MODEL = 'users.User' CORS_ORIGIN_ALLOW_ALL = True CORS_ALLOW_ALL_ORIGINS = True CSRF_TRUSTED_ORIGINS = ['http://*', 'https://*', 'http://*.gooyal.com', 'https://*.gooyal.com', 'http://*.gooyal.ir', 'https://*.gooyal.ir', ] JALALI_DATE_DEFAULTS = { 'Strftime': { 'date': '%Y/%m/%d', 'datetime': '%H:%M:%S _ %Y/%m/%d', } } CACHES = { "default": { "BACKEND": "django_redis.cache.RedisCache", "LOCATION": config('REDIS_BASE_URL'), "OPTIONS": { "CLIENT_CLASS": "django_redis.client.DefaultClient", } } } LOKI_BASE_PUBLIC_URL = config('LOKI_BASE_PUBLIC_URL', default=None, cast=str) LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'formatters': { 'loki': { 'class': 'utils.logs.LokiFormatter', # required }, }, 'handlers': { 'loki': { 'level': 'DEBUG', # Log level. Required 'class': 'utils.logs.LokiHandler', # Required 'formatter': 'loki', # Loki formatter. Required 'timeout': 1, # Post request timeout, default is 0.5. Optional 'url': f'{LOKI_BASE_PUBLIC_URL}/loki/api/v1/push', # Loki url. Defaults to localhost. Optional. # 'auth': ("user", "password"), # Basic auth to authenticate with loki. Default is None (i.e. no auth). Optional 'tags': {"app": "promotions", "env": "production"}, # Tags / Labels to attach to the log. Optional, but strongly encoraged to use. 'mode': 'thread', # Push mode. Can be 'sync' or 'thread'. Sync is blocking, thread is non-blocking. Defaults to sync. Optional. }, 'console': { 'level': 'DEBUG', 'class': 'logging.StreamHandler', # 'formatter': 'verbose', }, }, 'loggers': { '': { 'handlers': ['console', 'loki'], 'level': 'INFO', 'propagate': True, }, }, } from datetime import timedelta from typing import List, Tuple STORAGES = { "default": { "BACKEND": "django_minio_backend.models.MinioBackend", "OPTIONS": { "MINIO_ENDPOINT": config('MINIO_ENDPOINT', default='drive.gooyal.com'), "MINIO_USE_HTTPS": config('MINIO_USE_HTTPS', default=True, cast=bool), "MINIO_EXTERNAL_ENDPOINT": config('MINIO_EXTERNAL_ENDPOINT', default='drive.gooyal.com'), # Default is same as MINIO_ENDPOINT "MINIO_EXTERNAL_ENDPOINT_USE_HTTPS": config('MINIO_EXTERNAL_ENDPOINT_USE_HTTPS', default=True, cast=bool), # Default is same as MINIO_USE_HTTPS "MINIO_REGION": None, # Default is set to None "MINIO_ACCESS_KEY": config('MINIO_ACCESS_KEY'), "MINIO_SECRET_KEY": config('MINIO_SECRET_KEY'), "MINIO_URL_EXPIRY_HOURS": timedelta(days=1), # Default is 7 days (longest) if not defined "MINIO_CONSISTENCY_CHECK_ON_START": True, "MINIO_DEFAULT_BUCKET": config('MINIO_MEDIA_FILES_BUCKET'), # replacement for MEDIA_ROOT # MINIO_STATIC_FILES_BUCKET = 'my-static-files-bucket' # replacement for STATIC_ROOT "MINIO_PRIVATE_BUCKETS": [ 'default', ], "MINIO_PUBLIC_BUCKETS": [ # 'default-public', config('MINIO_MEDIA_FILES_BUCKET') ], "MINIO_POLICY_HOOKS": [], "MINIO_BUCKET_CHECK_ON_SAVE": True # Default: True // Creates bucket if missing, then save }, }, "staticfiles": { # "BACKEND": "django_minio_backend.models.MinioBackendStatic", # "BACKEND": "django.core.files.storage.FileSystemStorage", "BACKEND": "django.contrib.staticfiles.storage.StaticFilesStorage", }, } MINIO_ENDPOINT = config('MINIO_ENDPOINT', default='drive.gooyal.com') MINIO_USE_HTTPS = config('MINIO_USE_HTTPS', default=True, cast=bool) MINIO_EXTERNAL_ENDPOINT = config('MINIO_EXTERNAL_ENDPOINT', default='drive.gooyal.com') # Default is same as MINIO_ENDPOINT MINIO_EXTERNAL_ENDPOINT_USE_HTTPS = config('MINIO_EXTERNAL_ENDPOINT_USE_HTTPS', default=True, cast=bool) # Default is same as MINIO_USE_HTTPS MINIO_REGION = None # Default is set to None MINIO_ACCESS_KEY = config('MINIO_ACCESS_KEY') MINIO_SECRET_KEY = config('MINIO_SECRET_KEY') MINIO_URL_EXPIRY_HOURS = timedelta(days=1) # Default is 7 days (longest) if not defined MINIO_CONSISTENCY_CHECK_ON_START = True MINIO_MEDIA_FILES_BUCKET = config('MINIO_MEDIA_FILES_BUCKET') # replacement for MEDIA_ROOT # MINIO_STATIC_FILES_BUCKET = 'my-static-files-bucket' # replacement for STATIC_ROOT MINIO_PRIVATE_BUCKETS = [ 'default', ] MINIO_PUBLIC_BUCKETS = [ 'default-public', MINIO_MEDIA_FILES_BUCKET ] MINIO_POLICY_HOOKS: List[Tuple[str, dict]] = [] MINIO_BUCKET_CHECK_ON_SAVE = True # Default: True // Creates bucket if missing, then save # Custom HTTP Client (OPTIONAL) import os import certifi import urllib3 timeout = timedelta(minutes=5).seconds ca_certs = os.environ.get('SSL_CERT_FILE') or certifi.where() MINIO_HTTP_CLIENT: urllib3.poolmanager.PoolManager = urllib3.PoolManager( timeout=urllib3.util.Timeout(connect=timeout, read=timeout), maxsize=10, cert_reqs='CERT_REQUIRED', ca_certs=ca_certs, retries=urllib3.Retry( total=5, backoff_factor=0.2, status_forcelist=[500, 502, 503, 504] ) ) REDIS_BASE_URL = config('REDIS_BASE_URL') CELERY = { "broker_url": REDIS_BASE_URL, "result_backend": REDIS_BASE_URL, } CELERY_TASK_TRACK_STARTED = True CELERY_TASK_TIME_LIMIT = 30 * 60 CELERY_BROKER_URL = REDIS_BASE_URL CELERY_RESULT_BACKEND = REDIS_BASE_URL WALLET_BASE_PUBLIC_URL = config('WALLET_BASE_PUBLIC_URL', default=None, cast=str) WALLET_RIAL = config('WALLET_RIAL', cast=str) WALLET_REWARD = config('WALLET_REWARD', cast=str) NOTIFICATIONS_BASE_PUBLIC_URL = config('NOTIFICATIONS_BASE_PUBLIC_URL', default=None, cast=str)