-
Notifications
You must be signed in to change notification settings - Fork 0
/
settings.py
249 lines (222 loc) · 9.35 KB
/
settings.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
import os
from pathlib import Path
from config.read_env import read_env
###############
# 全体設定▽
# SECURITY WARNING: don't run with debug turned on in production!
DEBUG = True
# 認証設定
IS_USE_EMAIL_CERTIFICATION = False # メール送信でメールアドレスを認証する
IS_USE_SOCIAL_LOGIN = False # ソーシャルログインを有効にする
IS_USE_RECAPTCHA = False # RECAPTCHA を有効にする
# 管理者へのメール通知設定
# 問い合わせがきた際やアカウントブロック(config.security.AccessSecurityMiddleware)が発生した際など
IS_NOTIFICATION_ADMIN = False
# EMAIL_SERVICE(SendGrid/Gmail etc)
IS_USE_EMAIL_SERVICE = False
# USE GCP
IS_USE_GCS = False # Cloud Strage を利用する
IS_USE_GC_SQL = False # Cloud SQL を利用する
# USE Asure OpenAI Service
IS_USE_AZURE_OPENAI = False
# 全体設定△
###############
# Build paths inside the project like this: BASE_DIR / 'subdir'.
BASE_DIR = Path(__file__).resolve().parent.parent
# LOAD SECRET STEEINGS
env = read_env(BASE_DIR)
# SECURITY WARNING: keep the secret key used in production secret!
SECRET_KEY = env.get_value('DJANGO_SECRET_KEY',str)
# [LOAD security] Encryption.py
try:
from .security.Encryption import *
except ImportError:
pass
# ALLOWED_HOSTS
if os.getenv('GAE_APPLICATION', None) or os.getenv('GAE_INSTANCE', None):
ALLOWED_HOSTS = env.get_value('ALLOWED_HOSTS',str).split(',') # , 区切りで複数指定可能. スペース開けないこと
CSRF_TRUSTED_ORIGINS = [env.get_value('FRONTEND_URL',str)]
else:
ALLOWED_HOSTS = [env.get_value('ALLOWED_HOSTS_DEBUG',str)]
# Application definition
INSTALLED_APPS = [
# CREATE APPS
'accounts.apps.AccountsConfig', # First Migrate is only 'makemigrations accounts'
'apps.access_security.apps.AccessSecurityConfig',
'apps.summernote.apps.SummernoteConfig',
'apps.user_properties.apps.UserPropertiesConfig',
'apps.inquiry.apps.InquiryConfig',
# Sample 動作確認用
'sample.apps.SampleConfig',
# DEFAULT or INSTALL APPS
'django.contrib.admin',
'django.contrib.auth',
'django.contrib.contenttypes',
'django.contrib.sessions',
'django.contrib.messages',
'django.contrib.staticfiles',
'common.lib.axes.apps.AxesConfig', # ADD django-axes
'common.lib.social_django.apps.PythonSocialAuthConfig', # ADD social-auth-app-django
'encrypted_fields', # ADD django-searchable-encrypted-fields
'storages', # ADD django-storages
'extra_views', # ADD django-extra-views
'import_export', # ADD django-import-export
'sorl.thumbnail', # ADD ImageFile Resize
'django_cleanup', # ADD django-cleanup(DELETE OLD IMAGE/ NOT DELETE MODEL DECORATE '@cleanup.ignore')
'templatetags.apps.TemplatetagsConfig', # Custom Template Filter
]
# [LOAD security.admin_protect] AdminProtectSetting.py
try:
from .admin_protect.AdminProtectSetting import *
except ImportError:
pass
# MIDDLEWARE
MIDDLEWARE = [
'django.contrib.sessions.middleware.SessionMiddleware',
'django.middleware.common.CommonMiddleware',
'django.middleware.csrf.CsrfViewMiddleware',
'django.contrib.auth.middleware.AuthenticationMiddleware',
'django.contrib.messages.middleware.MessageMiddleware',
'django.middleware.clickjacking.XFrameOptionsMiddleware',
'django.middleware.security.SecurityMiddleware',
'config.security.AccessSecurityMiddleware.AccessSecurityMiddleware', # ADD Custom AccessSecurityMiddleware
'common.lib.social_django.middleware.SocialAuthExceptionMiddleware', # ADD social-auth-app-django
'config.acsess_logic.AccessPasswordLogicMiddleware.AccessPasswordLogicMiddleware', # ADD Custom AccessPasswordLogicMiddleware
'config.acsess_logic.AccessUseridLogicMiddleware.AccessUseridLogicMiddleware', # ADD Custom AccessUseridLogicMiddleware
# 'config.acsess_logic.AccessBusinessLogicMiddleware.AccessBusinessLogicMiddleware', # ADD Custom AccessBusinessLogicMiddleware
'config.admin_protect.AdminProtect.AdminProtect', # ADD AdminProtect **MUST BEFORE AXES**
'common.lib.axes.middleware.AxesMiddleware', # ADD django-axes **MUST BOTTOM**
]
# ADD social-auth-app-django
AUTHENTICATION_BACKENDS = (
'common.lib.axes.backends.AxesBackend', # ADD django-axes **MUST TOP**
'common.lib.social_core.backends.google.GoogleOAuth2', # Google OAuth2
'django.contrib.auth.backends.ModelBackend', # backends **MUST BUTTOM**
)
ROOT_URLCONF = 'config.urls'
TEMPLATES = [
{
'BACKEND': 'django.template.backends.django.DjangoTemplates',
'DIRS': [
os.path.join(BASE_DIR, 'templates'),
],
'APP_DIRS': True,
'OPTIONS': {
'context_processors': [
'django.template.context_processors.debug',
'django.template.context_processors.request',
'django.contrib.auth.context_processors.auth',
'django.contrib.messages.context_processors.messages',
'common.lib.social_django.context_processors.backends', # ADD social-auth-app-django
'common.lib.social_django.context_processors.login_redirect', # ADD social-auth-app-django
'django.template.context_processors.media', # ADD USE TEMPLATE {{ MEDIA_URL }}
"templatetags.context_processors.FRONTEND_URL" # USE {{FRONTEND_URL}}
],
'libraries': {
# Custom Template Simple Tag
'access_dict': 'templatetags.common.AccessDict',
'access_list': 'templatetags.common.AccessList',
'calculation_Add': 'templatetags.common.Calculation',
'calculation_Multiplication': 'templatetags.common.Calculation',
'calculation_Division': 'templatetags.common.Calculation',
# Custom Template Filter
'json_loads': 'templatetags.common.JsonUtils',
},
},
},
]
if DEBUG:
# templates で {{DEBUG}} を使えるようにする
TEMPLATES[0]['OPTIONS']['context_processors'] += 'templatetags.context_processors.IS_DEBUG',
WSGI_APPLICATION = 'config.wsgi.application'
# [LOAD extra_settings] Database.py
try:
from .extra_settings.Database import *
except ImportError:
pass
# [LOAD security] PasswordHashers.py
try:
from .security.PasswordHashers import *
except ImportError:
pass
# Password validation
AUTH_PASSWORD_VALIDATORS = [
{ "NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator", },
{ "NAME": "django.contrib.auth.password_validation.MinimumLengthValidator",
'OPTIONS': {'min_length': 8,}, },
{ "NAME": "django.contrib.auth.password_validation.CommonPasswordValidator", },
{ "NAME": "django.contrib.auth.password_validation.NumericPasswordValidator", },
# Custom Password Validation
{ "NAME": "config.password_validation.CustomValidator02", },
]
# SUCSESS LOGIN AND LOGPUT REDIRECT PATH
LOGIN_URL = 'accounts:login'
LOGIN_REDIRECT_URL = 'home'
LOGOUT_REDIRECT_URL = 'accounts:login'
# Internationalization
LANGUAGE_CODE = 'ja' # 言語設定
TIME_ZONE = 'Asia/Tokyo' # タイムゾーン設定
USE_I18N = True
USE_L10N = True
USE_TZ = True
# AUTH USER MODELS
AUTH_USER_MODEL = 'accounts.CustomUser'
# Default primary key field type
DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"
# [LOAD security] DeployBase.py
try:
from .security.DeployBase import *
except ImportError:
pass
# [LOAD security] DjangoAxes.py
try:
from .security.DjangoAxes import *
except ImportError:
pass
# [LOAD security] rePATCHA.py
if IS_USE_RECAPTCHA:
try:
from .security.rePATCHA import *
except ImportError:
pass
# [LOAD extra_settings] EmailBackend.py
try:
from .extra_settings.EmailBackend import *
except ImportError:
pass
# [LOAD extra_settings] FrontendURL.py
try:
from .extra_settings.FrontendURL import *
except ImportError:
pass
# [LOAD extra_settings] Llms.py
try:
from .extra_settings.Llms import *
except ImportError:
pass
# [LOAD extra_settings] LoginSessionAge.py
try:
from .extra_settings.LoginSessionAge import *
except ImportError:
pass
# [LOAD extra_settings] ProxySettings.py
try:
from .extra_settings.ProxySettings import *
except ImportError:
pass
# [SocialLogin extra_settings] SocialLogin.py
if IS_USE_SOCIAL_LOGIN:
try:
from .extra_settings.SocialLogin import *
except ImportError:
pass
# [LOAD extra_settings] StaticMediaFiles.py
try:
from .extra_settings.StaticMediaFiles import *
except ImportError:
pass
# [LOAD extra_settings] TokenAge.py
try:
from .extra_settings.TokenAge import *
except ImportError:
pass