gault-millau/project/settings/base.py

"""
Django settings for project project.

Generated by 'django-admin startproject' using Django 2.2.2.

For more information on this file, see
https://docs.djangoproject.com/en/2.2/topics/settings/

For the full list of settings and their values, see
https://docs.djangoproject.com/en/2.2/ref/settings/
"""

import os
import sys
from datetime import timedelta

# Build paths inside the project like this: os.path.join(BASE_DIR, ...)
BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
PROJECT_ROOT = os.path.abspath(os.path.join(BASE_DIR, '..'))
PUBLIC_ROOT = os.path.abspath(os.path.join(BASE_DIR, '..', 'media'))

# # insert apps and libs dirs to sys.path
for path in ('apps', ):
    path = os.path.abspath(os.path.join(PROJECT_ROOT, '%s' % path))
    path in sys.path or sys.path.insert(0, path)


# Quick-start development settings - unsuitable for production
# See https://docs.djangoproject.com/en/2.2/howto/deployment/checklist/

# SECURITY WARNING: keep the secret key used in production secret!
SECRET_KEY = 'ta$edl0av6n#-xphew5922npa4f*h8mfv#$@4tids*gbrp17&b'

# SECURITY WARNING: don't run with debug turned on in production!
DEBUG = True

ALLOWED_HOSTS = []


# Application definition

CONTRIB_APPS = [
    'bootstrap_admin',
    'django.contrib.admin',
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.messages',
    'django.contrib.staticfiles',
    'django.contrib.gis',
    'django.contrib.postgres',
]


PROJECT_APPS = [
    'advertisement.apps.AdvertisementConfig',
    'account.apps.AccountConfig',
    'authorization.apps.AuthorizationConfig',
    'booking.apps.BookingConfig',
    'collection.apps.CollectionConfig',
    'establishment.apps.EstablishmentConfig',
    'gallery.apps.GalleryConfig',
    'location.apps.LocationConfig',
    'main.apps.MainConfig',
    'news.apps.NewsConfig',
    'notification.apps.NotificationConfig',
    'partner.apps.PartnerConfig',
    'product.apps.ProductConfig',
    'recipe.apps.RecipeConfig',
    'search_indexes.apps.SearchIndexesConfig',
    'translation.apps.TranslationConfig',
    'configuration.apps.ConfigurationConfig',
    'timetable.apps.TimetableConfig',
    'review.apps.ReviewConfig',
    'comment.apps.CommentConfig',
    'favorites.apps.FavoritesConfig',
    'rating.apps.RatingConfig',
    'tag.apps.TagConfig',
    'report.apps.ReportConfig',
]

EXTERNAL_APPS = [
    'corsheaders',
    'django_elasticsearch_dsl',
    'django_elasticsearch_dsl_drf',
    'django_filters',
    'drf_yasg',
    'fcm_django',
    'easy_thumbnails',
    'rest_framework',
    'rest_framework.authtoken',
    'easy_select2',
    'oauth2_provider',
    'social_django',
    'rest_framework_social_oauth2',
    'django_extensions',
    'rest_framework_simplejwt.token_blacklist',
    'solo',
    'phonenumber_field',
    'timezone_field',
    'storages',
    'sorl.thumbnail',
    'timezonefinder',
    'mptt',
]


INSTALLED_APPS = CONTRIB_APPS + EXTERNAL_APPS + PROJECT_APPS


MIDDLEWARE = [
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.locale.LocaleMiddleware',
    'oauth2_provider.middleware.OAuth2TokenMiddleware',
    'corsheaders.middleware.CorsMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
    'utils.middleware.parse_cookies',
    'utils.middleware.user_last_visit',
    'utils.middleware.user_last_ip',
]

ROOT_URLCONF = 'project.urls'

TEMPLATES = [
    {
        'BACKEND': 'django.template.backends.django.DjangoTemplates',
        'DIRS': [os.path.join(BASE_DIR, 'templates'), ],
        'APP_DIRS': True,
        'OPTIONS': {
            'context_processors': [
                'django.template.context_processors.debug',
                'django.template.context_processors.request',
                'django.contrib.auth.context_processors.auth',
                'django.contrib.messages.context_processors.messages',
                # OAuth
                'social_django.context_processors.backends',
                'social_django.context_processors.login_redirect',
            ],
        },
    },
]

WSGI_APPLICATION = 'project.wsgi.application'


# Database
# https://docs.djangoproject.com/en/2.2/ref/settings/#databases

DATABASES = {
    'default': {
        'ENGINE': 'django.contrib.gis.db.backends.postgis',
        'NAME': os.environ.get('DB_NAME'),
        'USER': os.environ.get('DB_USERNAME'),
        'PASSWORD': os.environ.get('DB_PASSWORD'),
        'HOST': os.environ.get('DB_HOSTNAME'),
        'PORT': os.environ.get('DB_PORT'),
    },
}


# Password validation
# https://docs.djangoproject.com/en/2.2/ref/settings/#auth-password-validators

AUTH_PASSWORD_VALIDATORS = [
    {
        'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
    },
]

PASSWORD_HASHERS = [
    'django.contrib.auth.hashers.PBKDF2PasswordHasher',
    'django.contrib.auth.hashers.PBKDF2SHA1PasswordHasher',
    'django.contrib.auth.hashers.Argon2PasswordHasher',
    'django.contrib.auth.hashers.BCryptPasswordHasher',
    'django.contrib.auth.hashers.BCryptSHA256PasswordHasher',
]

# Account settings
AUTH_USER_MODEL = 'account.User'
LOGIN_URL = 'admin:login'
LOGOUT_URL = 'admin:logout'

# Internationalization
# https://docs.djangoproject.com/en/2.2/topics/i18n/

LANGUAGE_CODE = 'ru-RU'

TIME_ZONE = 'UTC'

USE_I18N = True

USE_L10N = True

USE_TZ = True

LOCALE_PATHS = (
    os.path.abspath(os.path.join(BASE_DIR, 'locale')),
)

AVAILABLE_VERSIONS = {
    # 'future': '1.0.1',
    'current': '1.0.0',
    # 'temp': '1.0.0'
}

# Django Rest Framework
REST_FRAMEWORK = {
    'DEFAULT_FILTER_BACKENDS': (
        'django_filters.rest_framework.DjangoFilterBackend',
    ),
    'PAGE_SIZE': 10,
    'DEFAULT_PAGINATION_CLASS': 'utils.pagination.ProjectMobilePagination',
    'COERCE_DECIMAL_TO_STRING': False,
    'DEFAULT_AUTHENTICATION_CLASSES': (
        # JWT
        'utils.authentication.GMJWTAuthentication',
        # 'rest_framework.authentication.SessionAuthentication',
    ),
    'DEFAULT_VERSIONING_CLASS': 'rest_framework.versioning.AcceptHeaderVersioning',
    'DEFAULT_VERSION': (AVAILABLE_VERSIONS['current'],),
    'ALLOWED_VERSIONS': AVAILABLE_VERSIONS.values(),
    'DEFAULT_PERMISSION_CLASSES': (
        'utils.permissions.IsAuthenticatedAndTokenIsValid',
    ),
    # 'DATETIME_FORMAT': '%m-%d-%Y %H:%M:%S',  # experiment
    # 'DATE_FORMAT': '%s.%f',  # experiment
}

REST_DATE_FORMAT = '%m-%d-%Y'
REST_DATETIME_FORMAT = '%m-%d-%Y %H:%M:%S'

AUTHENTICATION_BACKENDS = (
    # Facebook OAuth2
    'social_core.backends.facebook.FacebookAppOAuth2',
    'social_core.backends.facebook.FacebookOAuth2',

    # django-rest-framework-social-oauth2
    'utils.oauth2.GMOAuth2',

    # Django
    'django.contrib.auth.backends.ModelBackend',
)


CACHES = {
    'default': {
        'BACKEND': 'django.core.cache.backends.locmem.LocMemCache',
    },
    'es_queue': {
        'BACKEND': 'django_redis.cache.RedisCache',
        'LOCATION': 'redis://redis:6379/2'
    }
}

# Override default OAuth2 namespace
DRFSO2_URL_NAMESPACE = 'auth'
SOCIAL_AUTH_URL_NAMESPACE = 'auth'
OAUTH2_SOCIAL_AUTH_BACKEND_NAME = 'facebook'
OAUTH2_SOCIAL_AUTH_GRANT_TYPE = 'convert_token'
OAUTH2_PROVIDER_APPLICATION_MODEL = 'authorization.Application'

# Facebook configuration
SOCIAL_AUTH_FACEBOOK_KEY = os.environ.get('FB_APPLICATION_ID')
SOCIAL_AUTH_FACEBOOK_SECRET = os.environ.get('FB_PRIVATE_KEY')
SOCIAL_AUTH_FACEBOOK_SCOPE = ['email', ]
SOCIAL_AUTH_FACEBOOK_PROFILE_EXTRA_PARAMS = {
    'fields': 'id, name, email',
}

# Booking API configuration
GUESTONLINE_SERVICE = 'https://api-preprod.guestonline.fr/'
GUESTONLINE_TOKEN = 'iiReiYpyojshpPjpmczS'
LASTABLE_SERVICE = 'http://34.251.84.222/'
LASTABLE_TOKEN = '6dfc608ce5e494'
LASTABLE_PROXY = 'socks5://octopod:adgjmptw@94.177.171.154:2080'

# SMS Settings
SMS_EXPIRATION = 5
SMS_SEND_DELAY = 30
SMS_ATTEMPT_LIMIT = 3
# Following items used in several models
# make auto migrations if change
SMS_CODE_LENGTH = 6
SEND_SMS = True
SMS_CODE_SHOW = False


# SMSC Settings
SMS_SERVICE = 'http://smsc.ru/sys/send.php'
SMS_LOGIN = os.environ.get('SMS_LOGIN')
SMS_PASSWORD = os.environ.get('SMS_PASSWORD')
SMS_SENDER = 'GM'


# EMAIL
EMAIL_USE_TLS = True
EMAIL_HOST = 'smtp.mandrillapp.com'
EMAIL_HOST_USER = os.environ.get('EMAIL_HOST_USER')
EMAIL_HOST_PASSWORD = os.environ.get('EMAIL_HOST_PASSWORD')
EMAIL_PORT = 587


# Django Rest Swagger
SWAGGER_SETTINGS = {
    # "DEFAULT_GENERATOR_CLASS": "rest_framework.schemas.generators.BaseSchemaGenerator",
    'JSON_EDITOR': False,
    'SHOW_REQUEST_HEADERS': True,
    'SECURITY_DEFINITIONS': {
        'Basic': {
            'type': 'basic'
        },
        'Token': {
            'type': 'apiKey',
            'name': 'Authorization',
            'in': 'header'
        }
    },

}

REDOC_SETTINGS = {
   'LAZY_RENDERING': False,
}


# CELERY
# RabbitMQ
# BROKER_URL = 'amqp://rabbitmq:5672'
# Redis
# BROKER_URL = 'redis://localhost:6379/1'
BROKER_URL = 'redis://redis:6379/1'
CELERY_RESULT_BACKEND = BROKER_URL
CELERY_BROKER_URL = BROKER_URL
CELERY_ACCEPT_CONTENT = ['application/json']
CELERY_TASK_SERIALIZER = 'json'
CELERY_RESULT_SERIALIZER = 'json'
CELERY_TIMEZONE = TIME_ZONE

# Django FCM (Firebase push notifications)
FCM_DJANGO_SETTINGS = {
    'FCM_SERVER_KEY': (
        "AAAAJcC4Vbc:APA91bGovq7233-RHu2MbZTsuMU4jNf3obOue8s"
        "7qVznx-Xwr_h_R8Nz2Wfhf6hWIXdt99hr6xOH9WRVhxnC5eH96s"
        "6rYnpKEY6OrcVoLtceIR1yRrBZJtklDiSkP7daoeCqsnQmtB2m"
    ),
}


# Thumbnail settings
THUMBNAIL_ALIASES = {
    '': {
        'news_preview': {'size': (300, 260), },
        'news_promo_horizontal_web': {'size': (1900, 600), },
        'news_promo_horizontal_mobile': {'size': (375, 260), },
        'news_tile_horizontal_web': {'size': (300, 275), },
        'news_tile_horizontal_mobile': {'size': (343, 180), },
        'news_tile_vertical_web': {'size': (300, 380), },
        'news_highlight_vertical_web': {'size': (460, 630), },
        'news_editor_web': {'size': (940, 430), },  # при загрузке через контент эдитор
        'news_editor_mobile': {'size': (343, 260), },  # через контент эдитор в мобильном браузерe
        'avatar_comments_web': {'size': (116, 116), },
    }
}

THUMBNAIL_DEFAULT_OPTIONS = {
    'crop': 'smart',
}


# SORL
THUMBNAIL_QUALITY = 85
THUMBNAIL_DEBUG = False
SORL_THUMBNAIL_ALIASES = {
    'news_preview': {'geometry_string': '300x260', 'crop': 'center'},
    'news_description': {'geometry_string': '100x100'},
    'news_promo_horizontal_web': {'geometry_string': '1900x600', 'crop': 'center'},
    'news_promo_horizontal_mobile': {'geometry_string': '375x260', 'crop': 'center'},
    'news_tile_horizontal_web': {'geometry_string': '300x275', 'crop': 'center'},
    'news_tile_horizontal_mobile': {'geometry_string': '343x180', 'crop': 'center'},
    'news_tile_vertical_web': {'geometry_string': '300x380', 'crop': 'center'},
    'news_highlight_vertical_web': {'geometry_string': '460x630', 'crop': 'center'},
    'news_editor_web': {'geometry_string': '940x430', 'crop': 'center'},
    'news_editor_mobile': {'geometry_string': '343x260', 'crop': 'center'},  # при загрузке через контент эдитор
    'avatar_comments_web': {'geometry_string': '116x116', 'crop': 'center'},  # через контент эдитор в мобильном браузерe
    'product_preview': {'geometry_string': '300x260', 'crop': 'center'},
    'establishment_preview': {'geometry_string': '300x260', 'crop': 'center'},
    'establishment_xsmall': {'geometry_string': '60x34', 'crop': 'center'},
    'establishment_small': {'geometry_string': '80x45', 'crop': 'center'},
    'establishment_medium': {'geometry_string': '280x158', 'crop': 'center'},
    'establishment_large': {'geometry_string': '440x248', 'crop': 'center'},
    'establishment_xlarge': {'geometry_string': '640x360', 'crop': 'center'},
    'establishment_detail': {'geometry_string': '2048x1152', 'crop': 'center'},
    'establishment_original': {'geometry_string': '1920x1080', 'crop': 'center'},
    'city_xsmall': {'geometry_string': '70x70', 'crop': 'center'},
    'city_small': {'geometry_string': '140x140', 'crop': 'center'},
    'city_medium': {'geometry_string': '280x280', 'crop': 'center'},
    'city_large': {'geometry_string': '280x280', 'crop': 'center'},
    'city_xlarge': {'geometry_string': '560x560', 'crop': 'center'},
    'city_detail': {'geometry_string': '1120x1120', 'crop': 'center'},
    'city_original': {'geometry_string': '2048x1536', 'crop': 'center'},
    'type_preview': {'geometry_string': '300x260', 'crop': 'center'},
    'collection_image': {'geometry_string': '940x620', 'upscale': False, 'quality': 100},
    'establishment_collection_image': {'geometry_string': '940x620', 'upscale': False, 'quality': 100}
}


# JWT
SIMPLE_JWT = {
    # Increase access token lifetime b.c. front-end dev's cant send multiple
    # requests to API in one HTTP request.
    'ACCESS_TOKEN_LIFETIME': timedelta(days=182),
    'ACCESS_TOKEN_LIFETIME_SECONDS': 15770000,  # 6 months
    'REFRESH_TOKEN_LIFETIME': timedelta(days=182),
    'REFRESH_TOKEN_LIFETIME_SECONDS': 15770000,  # 6 months
    'ROTATE_REFRESH_TOKENS': True,
    'BLACKLIST_AFTER_ROTATION': True,

    'ALGORITHM': 'HS256',
    'SIGNING_KEY': SECRET_KEY,
    'VERIFYING_KEY': None,

    'AUTH_HEADER_TYPES': ('Bearer',),
    'USER_ID_FIELD': 'id',
    'USER_ID_CLAIM': 'user_id',

    'AUTH_TOKEN_CLASSES': ('rest_framework_simplejwt.tokens.AccessToken', ),
    'TOKEN_TYPE_CLAIM': 'token_type',

    'JTI_CLAIM': 'jti',

    'SLIDING_TOKEN_REFRESH_EXP_CLAIM': 'refresh_exp',
    'SLIDING_TOKEN_LIFETIME': timedelta(minutes=5),
    'SLIDING_TOKEN_REFRESH_LIFETIME': timedelta(days=1),
}


# AUTHORIZATION
PASSWORD_RESET_TIMEOUT_DAYS = 1


# TEMPLATES
RESETTING_TOKEN_TEMPLATE = 'account/password_reset_email.html'
NEW_USER_FOR_ESTABLISHMENT_TEAM_TEMPLATE = 'account/invite_est_team_new_user.html'
EXISTING_USER_FOR_ESTABLISHMENT_TEAM_TEMPLATE = 'account/invite_est_team_existing_user.html'
ESTABLISHMENT_TEAM_ROLE_REVOKED_TEMPLATE = 'account/est_team_role_revoked.html'
CHANGE_EMAIL_TEMPLATE = 'account/change_email.html'
CONFIRM_EMAIL_TEMPLATE = 'authorization/confirm_email.html'
NEWS_EMAIL_TEMPLATE = 'news/news_email.html'
NOTIFICATION_PASSWORD_TEMPLATE = 'account/password_change_email.html'
NOTIFICATION_SUBSCRIBE_TEMPLATE = 'notification/update_email.html'


# COOKIES
COOKIES_MAX_AGE = 15730000  # 6 months
SESSION_COOKIE_SAMESITE = None


# CORS
CORS_ORIGIN_ALLOW_ALL = True
CORS_ALLOW_CREDENTIALS = True


# UPLOAD FILES
# Increase upload maximum file size
# Maximum POST data size
DATA_UPLOAD_MAX_MEMORY_SIZE = 5242880  # 5MB
# Maximum uploaded file size
FILE_UPLOAD_MAX_MEMORY_SIZE = 5242880  # 5MB
FILE_UPLOAD_PERMISSIONS = 0o644


# SOLO SETTINGS
# todo: make a separate service (redis?) and update solo_cache
SOLO_CACHE = 'default'
SOLO_CACHE_PREFIX = 'solo'
SOLO_CACHE_TIMEOUT = 300


# REDIRECT URL
SITE_REDIRECT_URL_UNSUBSCRIBE = '/unsubscribe/'

SITE_NAME = 'Gault & Millau'


# Used in annotations for establishments.
DEFAULT_ESTABLISHMENT_PUBLIC_MARK = 10
# Limit output objects (see in pagination classes).
QUERY_OUTPUT_OBJECTS = 12
# Need to restrict objects to sort (3 times more then expected).
LIMITING_QUERY_OBJECTS = QUERY_OUTPUT_OBJECTS * 3


# GEO
# A Spatial Reference System Identifier
GEO_DEFAULT_SRID = 4326

# Static files (CSS, JavaScript, Images)
# https://docs.djangoproject.com/en/2.2/howto/static-files/
STATIC_ROOT = os.path.join(PUBLIC_ROOT, 'static')
STATIC_URL = '/static/'

STATICFILES_DIRS = (
    os.path.join(PROJECT_ROOT, 'static'),
)


# MEDIA
MEDIA_LOCATION = 'media'

PHONENUMBER_DB_FORMAT = 'INTERNATIONAL'
PHONENUMBER_DEFAULT_REGION = "FR"

FALLBACK_LOCALE = 'en-GB'

ESTABLISHMENT_CHOSEN_TAGS = ['gastronomic', 'terrace', 'streetfood', 'business', 'bar_cocktail', 'brunch', 'pop']
NEWS_CHOSEN_TAGS = ['eat', 'drink', 'cook', 'style', 'international', 'event', 'partnership']
ARTISANS_CHOSEN_TAGS = ['butchery', 'bakery', 'patisserie', 'cheese_shop', 'fish_shop', 'ice-cream_maker',
                       'wine_merchant', 'coffe_shop']
RECIPES_CHOSEN_TAGS = ['cook', 'eat', 'drink']

INTERNATIONAL_COUNTRY_CODES = ['www', 'main', 'next']

THUMBNAIL_ENGINE = 'utils.thumbnail_engine.GMEngine'

COOKIE_DOMAIN = None

ELASTICSEARCH_DSL = {}
ELASTICSEARCH_INDEX_NAMES = {}

THUMBNAIL_FORCE_OVERWRITE = True

COUNTRY_CALLING_CODES = {
    "at": 43,  # Austria
    "au": 61,  # Australia
    "be": 32,  # Belgium
    "de": 49,  # Germany
    "gr": 30,  # Greece
    "ge": 995,  # Georgia
    "il": 972,  # Israel
    "it": 39,  # Italy
    "ca": 1,  # Canada
    "lu": 352,  # Luxembourg
    "ma": 212,  # Morocco
    "nl": 31,  # Netherlands
    "ru": 7,  # Russia
    "ro": 40,  # Romania
    "si": 386,  # Slovenia
    "fr": 33,  # France
    "hr": 385,  # Croatia
    "jp": 81,  # Japan
    "aa": 590  # Guyane West Indies
}

CALLING_CODES_ANTILLES_GUYANE_WEST_INDIES = [590, 594, 1758, 596]
DEFAULT_CALLING_CODE_ANTILLES_GUYANE_WEST_INDIES = 590

EMAIL_TECHNICAL_SUPPORT = 'it-report@gaultmillau.com'