Merge branch 'development' into switch-to-poetry

docker-compose.yml

@@ -6,9 +6,19 @@ services:
       - "15432:5432"
     env_file:
       dev-env-db
+    read_only: true
     volumes:
       - "pg_data:/var/lib/postgresql/data"
-      - "./docker/db/dev/init-user-db.sql:/docker-entrypoint-initdb.d/init-user-db.sql"
+      - "/var/run/postgresql"
+      - "./docker/db/dev/init-user-db.sql:/docker-entrypoint-initdb.d/init-user-db.sql:ro"
+    cap_drop:
+      - ALL
+    cap_add:
+      - CAP_CHOWN
+      - CAP_DAC_READ_SEARCH
+      - CAP_FOWNER
+      - CAP_SETGID
+      - CAP_SETUID
   app:
     image: devdaydresden/devday_website_app:latest_dev
     build:
@@ -35,6 +45,8 @@ services:
       - "devday_static:/app/static"
     tmpfs:
       - /tmp
+    cap_drop:
+      - ALL
     depends_on:
       - db
 

docs/Makefile

@@ -0,0 +1,11 @@
+SVG_DIAGRAMS := $(patsubst %.puml,%.svg,$(wildcard *.puml))
+
+all: $(SVG_DIAGRAMS)
+
+$(SVG_DIAGRAMS): %.svg: %.puml
+	plantuml -tsvg $<
+
+clean:
+	rm -f $(SVG_DIAGRAMS)
+
+.PHONY: all clean

docs/meetup-slides-2022-10-12.md

@@ -0,0 +1,88 @@
+---
+author: Jan Dittberner
+date: 12.10.2022
+paging: Seite %d von %d
+---
+
+```
+making of
+ ____               ____              
+|  _ \  _____   __ |  _ \  __ _ _   _ 
+| | | |/ _ \ \ / / | | | |/ _` | | | |
+| |_| |  __/\ V /  | |_| | (_| | |_| |
+|____/ \___| \_/   |____/ \__,_|\__, |
+                                |___/ 
+website
+```
+
+**SECO-Meetup** https://seco.rocks/
+
+---
+
+# Agenda
+
+## Architekturüberblick
+
+## Technologiestack
+
+## Entwicklung + Hands-On/Demo
+
+## Mögliche neue Architektur
+
+## Q&A + Mitmachmöglichkeiten
+
+---
+
+# Architekturüberblick
+
+[Diagramme](https://github.com/jandd/devday_website/tree/architecture-diagrams/docs)
+
+---
+
+# Technologiestack
+
+- Ansible (Deployment)
+- Angular (Twitterwall)
+- Bootstrap (CSS framework)
+- [Django](https://www.djangoproject.com/)
+- [Django CMS](https://www.django-cms.org/)
+- Docker
+- Gulp (Builder für CSS und JavaScript)
+- HashiCorp Vault (Credential management)
+- Postfix
+- PostgreSQL 🐘
+- Python 🐍
+- nginx
+- sass (CSS precompiler)
+- uWSGI
+
+---
+
+# Entwicklung
+
+[Code repository](https://github.com/devdaydresden/devday_website)
+
+## Demo / Hands-On
+
+---
+
+# Mögliche neue Architektur
+
+---
+
+# Q&A
+
+## Wie weiter
+
+- Dev Day ist ein Mitmach-Projekt
+
+  - Kuratoren gesucht
+  - Weitere Entwickler für Webseite gesucht (Frontend Angular & Backend Python + Django)
+  - Ideen für SpeakerInnen, Sessions, Rahmenprogramm und Sponsoren? Her damit! 😎
+
+- [Issue tracker](https://github.com/devdaydresden/devday_website/issues)
+
+## Kontakt
+
+- [Ihr wollt beim Dev Day mitmachen?](mailto:info@devday.de)
+- [Ihr habt Detailfragen zur Webseite?](mailto:jan.dittberner@t-systems.com)

docs/system_context.puml

@@ -0,0 +1,48 @@
+@startuml
+!include <C4/C4_Context.puml>
+
+title Context diagram Dev Day Website
+
+Enterprise_Boundary(MMSBT, "T-Systems MMS BT&E") {
+  System(ReverseProxy, "Reverse Proxy", "MMS reverse proxy")
+  System_Boundary(DevDay, "Dev Day applications") {
+    System(DevDayWebsite, "Dev Day website", "Dev Day Website application")
+    System(TwitterWall, "Dev Day Twitterwall", "Dev Day Twitter wall")
+  }
+  System(Vault, "Vault", "Hashicorp Vault Secret Manager")
+  System(PostgreSQL, "PostgreSQL", "PostgreSQL database")
+  System(TMS, "Mail system", "technical mail system")
+
+  Person(DevDayAdmin, "Dev Day admin")
+}
+
+System(TwitterAPI, "Twitter API", "Twitter's public API endpoints")
+
+Person(DevDayTeam, "Dev Day team member")
+Person(DevDaySpeaker, "Dev Day speaker (potential and selected speakers)")
+Person(DevDaySponsor, "Dev Day sponsor")
+Person(DevDayAttendee, "Dev Day attendee")
+Person(DevDayCommittee, "Dev Day program committee")
+
+System(ScreenAtDevDay, "Twitter Wall screen", "Large Twitter wall screen at the Dev Day venue")
+
+Rel_D(ReverseProxy, DevDayWebsite, "forward user traffic")
+Rel_D(ReverseProxy, TwitterWall, "forward user traffic")
+
+Rel(ScreenAtDevDay, ReverseProxy, "Get Twitter wall content")
+
+Rel(DevDayWebsite, Vault, "fetch secrets")
+Rel(DevDayWebsite, PostgreSQL, "read and write application data")
+Rel(DevDayWebsite, TwitterAPI, "fetch Dev Day related tweets")
+Rel(DevDayWebsite, TMS, "send bulk and individual mails")
+
+Rel_R(TwitterWall, DevDayWebsite, "get tweet information")
+
+Rel(DevDayAdmin, DevDayWebsite, "administration and configuration")
+Rel(DevDayTeam, ReverseProxy, "content editing, mail editing")
+Rel(DevDaySponsor, ReverseProxy, "request sponsorship")
+Rel(DevDaySpeaker, ReverseProxy, "add and modify talks")
+Rel(DevDayAttendee, ReverseProxy, "register for events, workshops, manage profile")
+Rel(DevDayCommittee, ReverseProxy, "evaluate and choose sessions")
+
+@enduml

docs/system_context_new.puml

@@ -0,0 +1,73 @@
+@startuml
+!include <C4/C4_Context.puml>
+
+title Context diagram Dev Day Website Neu
+
+Enterprise_Boundary(DEVDAY, "Dev Day infrastructure") {
+  System_Boundary(Applications, "Applications") {
+    System(DevDayPWA, "Dev Day website", "Progressive web application")
+    System(DevDayAPI, "Dev Day API", "Dev Day API (i.e. attendee management, mail, twitter proxy)")
+    System(TwitterWall, "Dev Day Twitterwall", "Dev Day Twitter wall")
+    System(Pretalx, "Pretalx", "Talk management")
+    System(CMS, "WordPress", "WordPress CMS")
+  }
+
+  System_Boundary(Backend, "Backend Services") {
+    System(Vault, "Vault", "Hashicorp Vault Secret Manager")
+    System(PostgreSQL, "PostgreSQL", "PostgreSQL database")
+    System(TMS, "Mail system", "technical mail system")
+    System(MariaDB, "MariaDB")
+    System(Redis, "Redis")
+  }
+}
+
+System_Boundary(ExternalSystems, "External Systems") {
+  System(TwitterAPI, "Twitter API", "Twitter's public API endpoints")
+  System(ScreenAtDevDay, "Twitter Wall screen", "Large Twitter wall screen at the Dev Day venue")
+}
+
+Person(DevDayAdmin, "Dev Day admin")
+Person(DevDayTeam, "Dev Day team member")
+Person(DevDayContentTeam, "Dev Day content team member")
+Person(DevDaySpeaker, "Dev Day speaker (potential and selected speakers)")
+Person(DevDaySponsor, "Dev Day sponsor")
+Person(DevDayAttendee, "Dev Day attendee")
+Person(DevDayCommittee, "Dev Day program committee")
+
+Rel(DevDayPWA, DevDayAPI, "API")
+Rel(DevDayPWA, Pretalx, "API")
+Rel(DevDayPWA, CMS, "API")
+Rel(DevDayPWA, TMS, "send bulk and individual mails")
+
+Rel(ScreenAtDevDay, TwitterWall, "Get Twitter wall content")
+
+Rel(DevDayAPI, Pretalx, "reservations, favourites via API")
+Rel(DevDayAPI, Vault, "fetch secrets")
+Rel(DevDayAPI, PostgreSQL, "read and write application data")
+Rel(DevDayAPI, TwitterAPI, "fetch Dev Day related tweets")
+
+Rel(CMS, MariaDB, "read and write data")
+
+Rel(Pretalx, PostgreSQL, "read and write data")
+Rel(Pretalx, Redis, "cache and task data")
+
+Rel(TwitterWall, DevDayAPI, "get tweet information")
+
+Rel(DevDayAdmin, DevDayAPI, "administration and configuration")
+Rel(DevDayAdmin, Pretalx, "administration and configuration")
+
+Rel(DevDayTeam, DevDayPWA, "attendee management, mail editing")
+Rel(DevDayTeam, Pretalx, "speaker and session management")
+
+Rel(DevDayContentTeam, CMS, "content editing, mail editing")
+
+Rel(DevDaySponsor, DevDayPWA, "request sponsorship")
+
+Rel(DevDaySpeaker, Pretalx, "add and modify talks")
+Rel(DevDaySpeaker, DevDayPWA, "act as attendee")
+
+Rel(DevDayAttendee, DevDayPWA, "register for events, workshops, manage profile")
+
+Rel(DevDayCommittee, Pretalx, "evaluate and choose sessions")
+
+@enduml