diff options
Diffstat (limited to 'settings.py')
| -rw-r--r-- | settings.py | 266 |
1 files changed, 266 insertions, 0 deletions
diff --git a/settings.py b/settings.py new file mode 100644 index 0000000..aa946da --- /dev/null +++ b/settings.py @@ -0,0 +1,266 @@ +# Django settings for git-refinery-web project. +# +# Based on settings.py from the Django project template +# Copyright (c) Django Software Foundation and individual contributors. + +DEBUG = False + +ADMINS = ( + # ('Your Name', 'your_email@example.com'), +) + +MANAGERS = ADMINS + +# Avoid specific paths (added by paule) +import os +BASE_DIR = os.path.dirname(__file__) + +DATABASES = { + 'default': { + 'ENGINE': 'django.db.backends.', # Add 'postgresql_psycopg2', 'postgresql', 'mysql', 'sqlite3' or 'oracle'. + 'NAME': '', # Or path to database file if using sqlite3 (full path recommended). + 'USER': '', # Not used with sqlite3. + 'PASSWORD': '', # Not used with sqlite3. + 'HOST': '', # Set to empty string for localhost. Not used with sqlite3. + 'PORT': '', # Set to empty string for default. Not used with sqlite3. + } +} + +# Local time zone for this installation. Choices can be found here: +# http://en.wikipedia.org/wiki/List_of_tz_zones_by_name +# although not all choices may be available on all operating systems. +# On Unix systems, a value of None will cause Django to use the same +# timezone as the operating system. +# If running in a Windows environment this must be set to the same as your +# system time zone. +TIME_ZONE = 'Europe/London' + +# Language code for this installation. All choices can be found here: +# http://www.i18nguy.com/unicode/language-identifiers.html +LANGUAGE_CODE = 'en-us' + +SITE_ID = 1 + +# If you set this to False, Django will make some optimizations so as not +# to load the internationalization machinery. +USE_I18N = True + +# If you set this to False, Django will not format dates, numbers and +# calendars according to the current locale +USE_L10N = True + +# Absolute filesystem path to the directory that will hold user-uploaded files. +# Example: "/home/media/media.lawrence.com/media/" +MEDIA_ROOT = '' + +# URL that handles the media served from MEDIA_ROOT. Make sure to use a +# trailing slash. +# Examples: "http://media.lawrence.com/media/", "http://example.com/media/" +MEDIA_URL = '' + +# Absolute path to the directory static files should be collected to. +# Don't put anything in this directory yourself; store your static files +# in apps' "static/" subdirectories and in STATICFILES_DIRS. +# Example: "/home/media/media.lawrence.com/static/" +STATIC_ROOT = '' + +# URL prefix for static files. +# Example: "http://media.lawrence.com/static/" +STATIC_URL = '/static/' + +# URL prefix for admin static files -- CSS, JavaScript and images. +# Make sure to use a trailing slash. +# Examples: "http://foo.com/static/admin/", "/static/admin/". +ADMIN_MEDIA_PREFIX = '/static/admin/' + +# Additional locations of static files +STATICFILES_DIRS = ( + # Put strings here, like "/home/html/static" or "C:/www/django/static". + # Always use forward slashes, even on Windows. + # Don't forget to use absolute paths, not relative paths. +) + +# List of finder classes that know how to find static files in +# various locations. +STATICFILES_FINDERS = ( + 'django.contrib.staticfiles.finders.FileSystemFinder', + 'django.contrib.staticfiles.finders.AppDirectoriesFinder', +# 'django.contrib.staticfiles.finders.DefaultStorageFinder', +) + +# Make this unique, and don't share it with anybody. +SECRET_KEY = '' + +MIDDLEWARE = ( + 'django.contrib.sessions.middleware.SessionMiddleware', + 'django.middleware.common.CommonMiddleware', + 'django.middleware.csrf.CsrfViewMiddleware', + 'django.contrib.auth.middleware.AuthenticationMiddleware', + 'django.contrib.messages.middleware.MessageMiddleware', + 'django.middleware.clickjacking.XFrameOptionsMiddleware', + 'django.middleware.security.SecurityMiddleware', + 'axes.middleware.AxesMiddleware', + 'gitrefinery.middleware.LoginRequiredMiddleware', + 'gitrefinery.middleware.SessionIdleTimeoutMiddleware', + 'csp.middleware.CSPMiddleware', +) + +# content security policy +# https://django-csp.readthedocs.io/en/latest/index.html +CSP_DEFAULT_SRC = ("'self'", "'unsafe-inline'") + +# Session timeout settings +SESSION_COOKIE_AGE = 24*60*60 # session expiry time (s) +SESSION_IDLE_TIMEOUT = 30*60 # idle logout time (s) + +# Clickjacking protection +X_FRAME_OPTIONS = 'DENY' + +ROOT_URLCONF = 'urls' + +TEMPLATES = [ + { + 'BACKEND': 'django.template.backends.django.DjangoTemplates', + 'DIRS': [ + BASE_DIR + "/templates", + ], + 'APP_DIRS': True, + 'OPTIONS': { + 'context_processors': [ + 'django.contrib.auth.context_processors.auth', + 'django.template.context_processors.debug', + 'django.template.context_processors.i18n', + 'django.template.context_processors.media', + 'django.template.context_processors.static', + 'django.template.context_processors.tz', + 'django.contrib.messages.context_processors.messages', + 'django.template.context_processors.request', + 'gitrefinery.context_processors.gitrefinery_context', + ], + }, + }, +] + +INSTALLED_APPS = ( + 'django.contrib.auth', + 'django.contrib.contenttypes', + 'django.contrib.sessions', + 'django.contrib.sites', + 'django.contrib.messages', + 'django.contrib.staticfiles', + 'django.contrib.admin', + 'django_registration', + 'captcha', + 'axes', + # Uncomment the next line to enable admin documentation: + # 'django.contrib.admindocs', + 'gitrefinery', +) + +AUTHENTICATION_BACKENDS = [ + 'axes.backends.AxesBackend', + 'django.contrib.auth.backends.ModelBackend', +] + +# Password validation +AUTH_PASSWORD_VALIDATORS = [ + { + 'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator', + }, + { + 'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator', + 'OPTIONS': { + 'min_length': 8, + } + }, + { + 'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator', + }, + { + 'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator', + }, + { + 'NAME': 'password_validation.ComplexityValidator', + }, +] + +# A sample logging configuration. The only tangible logging +# performed by this configuration is to send an email to +# the site admins on every HTTP 500 error. +# See http://docs.djangoproject.com/en/dev/topics/logging for +# more details on how to customize your logging configuration. +LOGGING = { + 'version': 1, + 'disable_existing_loggers': False, + 'handlers': { + 'mail_admins': { + 'level': 'ERROR', + 'class': 'django.utils.log.AdminEmailHandler' + } + }, + 'loggers': { + 'django.request': { + 'handlers': ['mail_admins'], + 'level': 'ERROR', + 'propagate': True, + }, + } +} + +from django.contrib.messages import constants as messages +MESSAGE_TAGS = { + messages.SUCCESS: 'alert-success', + messages.INFO: 'alert-info', + messages.WARNING: 'alert-warning', + messages.ERROR: 'alert-danger', +} + +# Base directory where new repositories will be fetched +REPO_BASE_DIR = '' + +# Registration settings +ACCOUNT_ACTIVATION_DAYS = 2 +EMAIL_HOST = 'localhost' +EMAIL_PORT = 1025 +DEFAULT_FROM_EMAIL = 'noreply@example.com' +LOGIN_REDIRECT_URL = '/gitrefinery' + +# Install flite & sox and set these to enable audio for CAPTCHA challenges (for accessibility) +#CAPTCHA_FLITE_PATH = "/usr/bin/flite" +#CAPTCHA_SOX_PATH = "/usr/bin/sox" + +CACHES = { + 'default': { + 'BACKEND': 'django.core.cache.backends.locmem.LocMemCache', + }, + 'axes_cache': { + 'BACKEND': 'django.core.cache.backends.dummy.DummyCache', + } +} +AXES_CACHE = "axes_cache" +AXES_LOCKOUT_TEMPLATE = "registration/account_lockout.html" +AXES_FAILURE_LIMIT = 4 +AXES_COOLOFF_TIME = 1 +ALLOWED_HOSTS=['*'] + +LOGIN_EXEMPT_URLS = ( + '^/accounts/register/', + '^accounts/reset/(?P<uidb64>[0-9A-Za-z_\-]+)/(?P<token>[0-9A-Za-z]{1,3}-[0-9A-Za-z]{1,20})/' + '^/accounts/password_reset/', + '^/accounts/reset/fail/', + '^/accounts/lockout/', + '^admin/', + '^', + '^repositories/', + '^repo/(?P<slug>[-\w]+)/', + '^release/(?P<pk>[-\w]+)/', + '^release/(?P<pk>[-\w]+)/oneline/', + '^release/(?P<pk>[-\w]+)/notes/', + '^stats/', + '^stats/csv/', + '^ajax/categorychecklist/(?P<repository>[-\w]+)/', +) + +SECURE_HSTS_INCLUDE_SUBDOMAINS = True +SECURE_HSTS_PRELOAD = True +SECURE_HSTS_SECONDS = 3600 |