prog1764
bab18e8129
- SECRET_KEY: только из env (DJANGO_SECRET_KEY), без дефолта приложение не стартует - DEBUG: только DJANGO_DEBUG=1; ALLOWED_HOSTS из env - AUTH_PASSWORD_VALIDATORS: стандартные 4 валидатора (мин. длина 8) - django-axes: подключён (бэкенд, middleware, лимит 5 попыток, кулдаун 1ч) - consent_given: обязательное согласие на обработку ПД в форме
110 lines
3.2 KiB
Python
110 lines
3.2 KiB
Python
"""Development settings for the teacher consultation website."""
|
|
import os
|
|
from pathlib import Path
|
|
|
|
|
|
BASE_DIR = Path(__file__).resolve().parent.parent
|
|
|
|
# --- Секреты только из окружения: без env приложение не стартует ---
|
|
SECRET_KEY = os.environ.get("DJANGO_SECRET_KEY")
|
|
if not SECRET_KEY:
|
|
raise RuntimeError(
|
|
"DJANGO_SECRET_KEY не задан. Установите переменную окружения "
|
|
"(например: python -c \"from django.core.management.utils "
|
|
"import get_random_secret_key; print(get_random_secret_key())\")."
|
|
)
|
|
|
|
DEBUG = os.environ.get("DJANGO_DEBUG") == "1"
|
|
|
|
ALLOWED_HOSTS = [
|
|
host.strip()
|
|
for host in os.environ.get("DJANGO_ALLOWED_HOSTS", "127.0.0.1,localhost").split(",")
|
|
if host.strip()
|
|
]
|
|
|
|
INSTALLED_APPS = [
|
|
"django.contrib.admin",
|
|
"django.contrib.auth",
|
|
"django.contrib.contenttypes",
|
|
"django.contrib.sessions",
|
|
"django.contrib.messages",
|
|
"django.contrib.staticfiles",
|
|
"axes",
|
|
"consultations",
|
|
]
|
|
|
|
MIDDLEWARE = [
|
|
"django.middleware.security.SecurityMiddleware",
|
|
"django.contrib.sessions.middleware.SessionMiddleware",
|
|
"django.middleware.common.CommonMiddleware",
|
|
"django.middleware.csrf.CsrfViewMiddleware",
|
|
"django.contrib.auth.middleware.AuthenticationMiddleware",
|
|
"axes.middleware.AxesMiddleware",
|
|
"django.contrib.messages.middleware.MessageMiddleware",
|
|
"django.middleware.clickjacking.XFrameOptionsMiddleware",
|
|
]
|
|
|
|
# --- django-axes: защита от брутфорса логина ---
|
|
AXES_FAILURE_LIMIT = 5
|
|
AXES_COOLOFF_TIME = 1 # часы
|
|
AXES_RESET_ON_SUCCESS = True
|
|
|
|
ROOT_URLCONF = "config.urls"
|
|
|
|
TEMPLATES = [
|
|
{
|
|
"BACKEND": "django.template.backends.django.DjangoTemplates",
|
|
"DIRS": [],
|
|
"APP_DIRS": True,
|
|
"OPTIONS": {
|
|
"context_processors": [
|
|
"django.template.context_processors.request",
|
|
"django.contrib.auth.context_processors.auth",
|
|
"django.contrib.messages.context_processors.messages",
|
|
],
|
|
},
|
|
},
|
|
]
|
|
|
|
WSGI_APPLICATION = "config.wsgi.application"
|
|
ASGI_APPLICATION = "config.asgi.application"
|
|
|
|
# django-axes: бэкенд аутентификации для защиты от брутфорса
|
|
AUTHENTICATION_BACKENDS = [
|
|
"axes.backends.AxesStandaloneBackend",
|
|
"django.contrib.auth.backends.ModelBackend",
|
|
]
|
|
|
|
DATABASES = {
|
|
"default": {
|
|
"ENGINE": "django.db.backends.sqlite3",
|
|
"NAME": BASE_DIR / "db.sqlite3",
|
|
}
|
|
}
|
|
|
|
AUTH_PASSWORD_VALIDATORS = [
|
|
{
|
|
"NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator",
|
|
},
|
|
{
|
|
"NAME": "django.contrib.auth.password_validation.MinimumLengthValidator",
|
|
"OPTIONS": {"min_length": 8},
|
|
},
|
|
{
|
|
"NAME": "django.contrib.auth.password_validation.CommonPasswordValidator",
|
|
},
|
|
{
|
|
"NAME": "django.contrib.auth.password_validation.NumericPasswordValidator",
|
|
},
|
|
]
|
|
|
|
LANGUAGE_CODE = "ru-ru"
|
|
TIME_ZONE = "Europe/Astrakhan"
|
|
USE_I18N = True
|
|
USE_TZ = True
|
|
|
|
STATIC_URL = "static/"
|
|
STATICFILES_DIRS = [BASE_DIR / "static"]
|
|
|
|
DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"
|