""" Django settings for poizonstore project. Generated by 'django-admin startproject' using Django 4.2.2. For more information on this file, see https://docs.djangoproject.com/en/4.2/topics/settings/ For the full list of settings and their values, see https://docs.djangoproject.com/en/4.2/ref/settings/ """ import os from pathlib import Path import sentry_sdk from django.core.exceptions import ImproperlyConfigured from dotenv import load_dotenv load_dotenv() # Build paths inside the project like this: BASE_DIR / 'subdir'. BASE_DIR = Path(__file__).resolve().parent.parent def get_secret(setting): """Get the secret variable or return explicit exception.""" try: return os.environ[setting] except KeyError: error_msg = f'Set the {setting} environment variable' raise ImproperlyConfigured(error_msg) # Quick-start development settings - unsuitable for production # See https://docs.djangoproject.com/en/4.2/howto/deployment/checklist/ # SECURITY WARNING: keep the secret key used in production secret! SECRET_KEY = get_secret("SECRET_KEY") # External API settings CDEK_CLIENT_ID = get_secret("CDEK_CLIENT_ID") CDEK_CLIENT_SECRET = get_secret("CDEK_CLIENT_SECRET") POIZON_TOKEN = get_secret("POIZON_TOKEN") CURRENCY_GETGEOIP_API_KEY = get_secret("CURRENCY_GETGEOIP_API_KEY") EXTERNAL_API_TIMEOUT_SEC = 60 # Telegram bot TG_BOT_TOKEN = get_secret("TG_BOT_TOKEN") # SECURITY WARNING: don't run with debug turned on in production! DEBUG = bool(int(os.environ.get("DJANGO_DEBUG") or 0)) DISABLE_CORS = True ALLOWED_HOSTS = get_secret('ALLOWED_HOSTS').split(',') INTERNAL_IPS = ["127.0.0.1", 'localhost'] CORS_ALLOWED_ORIGINS = [ "http://poizonstore.com", "https://poizonstore.com", "http://crm-poizonstore.ru", "https://crm-poizonstore.ru", "http://localhost:8001", "https://localhost:8001", ] if DISABLE_CORS: CORS_ALLOW_ALL_ORIGINS = True # Required for "Login via Telegram" popup # Source: https://stackoverflow.com/a/73240366/24046062 SECURE_CROSS_ORIGIN_OPENER_POLICY = 'same-origin-allow-popups' AUTH_USER_MODEL = 'account.User' PHONENUMBER_DEFAULT_REGION = 'RU' # Application definition INSTALLED_APPS = [ 'django.contrib.admin', 'django.contrib.auth', 'django.contrib.contenttypes', 'django.contrib.sessions', 'django.contrib.messages', 'django.contrib.staticfiles', 'corsheaders', 'django_cleanup.apps.CleanupSelectedConfig', 'rest_framework', 'rest_framework.authtoken', 'djoser', 'debug_toolbar', 'django_filters', 'mptt', 'account', 'store', 'tg_bot' ] MIDDLEWARE = [ 'corsheaders.middleware.CorsMiddleware', 'debug_toolbar.middleware.DebugToolbarMiddleware', 'django.middleware.security.SecurityMiddleware', 'django.contrib.sessions.middleware.SessionMiddleware', 'django.middleware.common.CommonMiddleware', # 'django.middleware.csrf.CsrfViewMiddleware', 'django.contrib.auth.middleware.AuthenticationMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.middleware.clickjacking.XFrameOptionsMiddleware', ] ROOT_URLCONF = 'poizonstore.urls' TEMPLATES = [ { 'BACKEND': 'django.template.backends.django.DjangoTemplates', 'DIRS': [], 'APP_DIRS': True, 'OPTIONS': { 'context_processors': [ 'django.template.context_processors.debug', 'django.template.context_processors.request', 'django.contrib.auth.context_processors.auth', 'django.contrib.messages.context_processors.messages', ], }, }, ] WSGI_APPLICATION = 'poizonstore.wsgi.application' # Database # https://docs.djangoproject.com/en/4.2/ref/settings/#databases DATABASES = { 'default': { 'ENGINE': 'django.db.backends.sqlite3', 'NAME': BASE_DIR / 'db.sqlite3', } } # Password validation # https://docs.djangoproject.com/en/4.2/ref/settings/#auth-password-validators AUTH_PASSWORD_VALIDATORS = [ { 'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator', }, { 'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator', }, { 'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator', }, { 'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator', }, ] REST_FRAMEWORK = { 'COERCE_DECIMAL_TO_STRING': False, 'DATETIME_FORMAT': '%d.%m.%Y %H:%M:%S', # Use Django's standard `django.contrib.auth` permissions, # or allow read-only access for unauthenticated users. 'DEFAULT_PERMISSION_CLASSES': [ 'rest_framework.permissions.IsAuthenticated' ], 'DEFAULT_AUTHENTICATION_CLASSES': ['rest_framework.authentication.TokenAuthentication'], 'DEFAULT_FILTER_BACKENDS': ['django_filters.rest_framework.DjangoFilterBackend'], 'DEFAULT_PAGINATION_CLASS': 'utils.drf.StandardResultsSetPagination' } DJOSER = { 'TOKEN_MODEL': 'rest_framework.authtoken.models.Token', 'SERIALIZERS': { 'user': 'account.serializers.UserSerializer', 'current_user': 'account.serializers.UserSerializer', 'user_create': 'account.serializers.UserCreateSerializer', 'token_create': 'account.serializers.TokenCreateSerializer', }, } # Internationalization # https://docs.djangoproject.com/en/4.2/topics/i18n/ LANGUAGE_CODE = 'ru-RU' TIME_ZONE = 'Europe/Moscow' USE_I18N = True USE_TZ = True # Static files (CSS, JavaScript, Images) # https://docs.djangoproject.com/en/4.2/howto/static-files/ STATIC_URL = 'static/' STATICFILES_DIRS = [os.path.join(BASE_DIR, 'static')] STATIC_ROOT = os.path.join(BASE_DIR, 'assets') MEDIA_URL = "/media/" MEDIA_ROOT = os.path.join(BASE_DIR, "media") # Default primary key field type # https://docs.djangoproject.com/en/4.2/ref/settings/#default-auto-field DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField' CHECKLIST_ID_LENGTH = 10 REFERRAL_CODE_LENGTH = 10 COMMISSION_OVER_150K = 1.1 # Logging SENTRY_DSN = "https://96106e3f938badc86ecb2e502716e496@o4506163299418112.ingest.sentry.io/4506163300663296" if not DEBUG: sentry_sdk.init( dsn=SENTRY_DSN, # Set traces_sample_rate to 1.0 to capture 100% # of transactions for performance monitoring. traces_sample_rate=1.0, # Set profiles_sample_rate to 1.0 to profile 100% # of sampled transactions. # We recommend adjusting this value in production. profiles_sample_rate=1.0, ) # Celery BROKER_URL = 'redis://localhost:6379/2' CELERY_RESULT_BACKEND = BROKER_URL CELERY_BROKER_URL = BROKER_URL CELERY_ACCEPT_CONTENT = ['application/json'] CELERY_TASK_SERIALIZER = 'json' CELERY_RESULT_SERIALIZER = 'json' CELERY_TIMEZONE = TIME_ZONE # Bonus program # TODO: move to GlobalSettings? BONUS_PROGRAM_CONFIG = { "amounts": { "signup": 150, "default_purchase": 50, "referral": 500, } }