import os import dj_database_url from pathlib import Path from dotenv import load_dotenv load_dotenv() BASE_DIR = Path(__file__).resolve().parent.parent SECRET_KEY = os.getenv("DJANGO_SECRET_KEY") DEBUG = os.getenv("DJANGO_DEBUG") == "False" ALLOWED_HOSTS = os.getenv("DJANGO_ALLOWED_HOSTS", "").split(",") INSTALLED_APPS = [ 'jazzmin', 'django.contrib.admin', 'django.contrib.auth', 'django.contrib.contenttypes', 'django.contrib.sessions', 'django.contrib.messages', 'django.contrib.staticfiles', "django.contrib.sites", 'main', 'authentication', 'blog', 'cart', 'dashboard', 'allauth', 'allauth.account', "allauth.socialaccount", 'phonenumber_field', ] MIDDLEWARE = [ 'django.middleware.security.SecurityMiddleware', "whitenoise.middleware.WhiteNoiseMiddleware", 'django.contrib.sessions.middleware.SessionMiddleware', 'django.middleware.common.CommonMiddleware', 'django.middleware.csrf.CsrfViewMiddleware', 'django.contrib.auth.middleware.AuthenticationMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.middleware.clickjacking.XFrameOptionsMiddleware', 'allauth.account.middleware.AccountMiddleware', ] ROOT_URLCONF = 'creativeschool.urls' TEMPLATES = [ { 'BACKEND': 'django.template.backends.django.DjangoTemplates', 'DIRS': [BASE_DIR.joinpath('templates')], 'APP_DIRS': True, 'OPTIONS': { 'context_processors': [ 'django.template.context_processors.debug', 'django.template.context_processors.request', 'django.contrib.auth.context_processors.auth', 'django.contrib.messages.context_processors.messages', 'main.context_processors.categories', ], }, }, ] AUTHENTICATION_BACKENDS = [ 'django.contrib.auth.backends.ModelBackend', 'allauth.account.auth_backends.AuthenticationBackend', ] WSGI_APPLICATION = 'creativeschool.wsgi.application' # Database # https://docs.djangoproject.com/en/3.0/ref/settings/#databases DATABASE_URL = os.getenv("DATABASE_URL") if not DATABASE_URL: raise RuntimeError("DATABASE_URL environment variable is not set") DATABASES = { "default": dj_database_url.parse( DATABASE_URL, conn_max_age=600, ) } # Password validation # https://docs.djangoproject.com/en/3.0/ref/settings/#auth-password-validators AUTH_PASSWORD_VALIDATORS = [ { 'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator', }, { 'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator', }, { 'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator', }, { 'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator', }, ] SITE_ID = 1 LOGIN_REDIRECT_URL = 'main:home' ACCOUNT_AUTHENTICATION_METHOD = 'email' ACCOUNT_EMAIL_REQUIRED = True ACCOUNT_EMAIL_VERIFICATION = 'mandatory' ACCOUNT_USERNAME_REQUIRED = False ACCOUNT_EMAIL_UNIQUE = True EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend' # Internationalization # https://docs.djangoproject.com/en/3.0/topics/i18n/ LANGUAGE_CODE = 'en-us' TIME_ZONE = "Africa/Algiers" USE_I18N = True USE_TZ = True AUTH_USER_MODEL = 'authentication.User' # Static files (CSS, JavaScript, Images) # https://docs.djangoproject.com/en/3.0/howto/static-files/ STATIC_URL = "/static/" STATIC_ROOT = BASE_DIR / "staticfiles" STATICFILES_STORAGE = ( "whitenoise.storage.CompressedManifestStaticFilesStorage" ) MEDIA_URL = "/media/" MEDIA_ROOT = "/app/media" # ========================================= # 📧 Email (via .env) # ========================================= EMAIL_BACKEND = "django.core.mail.backends.smtp.EmailBackend" EMAIL_HOST = os.getenv("EMAIL_HOST") EMAIL_PORT = int(os.getenv("EMAIL_PORT", 587)) EMAIL_USE_TLS = os.getenv("EMAIL_USE_TLS") == "True" EMAIL_HOST_USER = os.getenv("EMAIL_HOST_USER") EMAIL_HOST_PASSWORD = os.getenv("EMAIL_HOST_PASSWORD") DEFAULT_FROM_EMAIL = EMAIL_HOST_USER # ========================================= # HTTPS / Nginx / Coolify # ========================================= #SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https") #SESSION_COOKIE_SECURE = not DEBUG #CSRF_COOKIE_SECURE = not DEBUG #CSRF_TRUSTED_ORIGINS = [ # f"https://{host}" for host in ALLOWED_HOSTS if host #] # Optionnel mais recommandé #SECURE_HSTS_SECONDS = 31536000 if not DEBUG else 0 #SECURE_HSTS_INCLUDE_SUBDOMAINS = not DEBUG #SECURE_HSTS_PRELOAD = not DEBUG CSRF_TRUSTED_ORIGINS = os.getenv( "CSRF_TRUSTED_ORIGINS", "" ).split(",") SECURE_PROXY_SSL_HEADER = ( ("HTTP_X_FORWARDED_PROTO", "https") ) USE_X_FORWARDED_HOST = True SESSION_COOKIE_SECURE = not DEBUG CSRF_COOKIE_SECURE = not DEBUG SECURE_SSL_REDIRECT = not DEBUG