305 lines
8.0 KiB
Python
305 lines
8.0 KiB
Python
"""
|
|
Django settings for config project.
|
|
|
|
Generated by 'django-admin startproject' using Django 5.1.7.
|
|
|
|
For more information on this file, see
|
|
https://docs.djangoproject.com/en/5.1/topics/settings/
|
|
|
|
For the full list of settings and their values, see
|
|
https://docs.djangoproject.com/en/5.1/ref/settings/
|
|
"""
|
|
|
|
from pathlib import Path
|
|
|
|
import os
|
|
import environ
|
|
|
|
from datetime import timedelta
|
|
|
|
# Build paths inside the project like this: BASE_DIR / 'subdir'.
|
|
BASE_DIR = Path(__file__).resolve().parent.parent
|
|
|
|
env = environ.Env(DEBUG=(bool, False))
|
|
environ.Env.read_env(os.path.join(BASE_DIR, '.env'))
|
|
|
|
|
|
# Quick-start development settings - unsuitable for production
|
|
# See https://docs.djangoproject.com/en/5.1/howto/deployment/checklist/
|
|
|
|
SECRET_KEY = env('SECRET_KEY')
|
|
|
|
DOMAIN_NAME = 'colio.co.kr'
|
|
DEV_DOMAIN_NAME = env('DEV_DOMAIN_NAME')
|
|
|
|
SOLAPI_API_KEY = env('SOLAPI_API_KEY')
|
|
SOLAPI_API_SECRET = env('SOLAPI_API_SECRET')
|
|
FROM_PHONE_NUMBER = env('FROM_PHONE_NUMBER')
|
|
|
|
DEBUG = env.bool('DEBUG')
|
|
|
|
ALLOWED_HOSTS = ['*']
|
|
|
|
AUTH_USER_MODEL = 'users.User'
|
|
|
|
# Application definition
|
|
|
|
INSTALLED_APPS = [
|
|
'django.contrib.admin',
|
|
'django.contrib.auth',
|
|
'django.contrib.contenttypes',
|
|
'django.contrib.sessions',
|
|
'django.contrib.messages',
|
|
'django.contrib.staticfiles',
|
|
'django.contrib.postgres',
|
|
'django_apscheduler',
|
|
'django_extensions',
|
|
'django_filters',
|
|
'rest_framework',
|
|
'rest_framework_simplejwt',
|
|
'rest_framework_simplejwt.token_blacklist',
|
|
'corsheaders',
|
|
'storages',
|
|
'users',
|
|
'portfolios',
|
|
'projects',
|
|
'codes',
|
|
'notifications',
|
|
'nocodetools',
|
|
'homes',
|
|
]
|
|
|
|
MIDDLEWARE = [
|
|
'corsheaders.middleware.CorsMiddleware',
|
|
'django.middleware.security.SecurityMiddleware',
|
|
'django.contrib.sessions.middleware.SessionMiddleware',
|
|
'django.middleware.common.CommonMiddleware',
|
|
'django.middleware.csrf.CsrfViewMiddleware',
|
|
'django.contrib.auth.middleware.AuthenticationMiddleware',
|
|
'django.contrib.messages.middleware.MessageMiddleware',
|
|
'django.middleware.clickjacking.XFrameOptionsMiddleware',
|
|
]
|
|
|
|
ROOT_URLCONF = 'config.urls'
|
|
|
|
TEMPLATES = [
|
|
{
|
|
'BACKEND': 'django.template.backends.django.DjangoTemplates',
|
|
'DIRS': [],
|
|
'APP_DIRS': True,
|
|
'OPTIONS': {
|
|
'context_processors': [
|
|
'django.template.context_processors.debug',
|
|
'django.template.context_processors.request',
|
|
'django.contrib.auth.context_processors.auth',
|
|
'django.contrib.messages.context_processors.messages',
|
|
],
|
|
},
|
|
},
|
|
]
|
|
|
|
WSGI_APPLICATION = 'config.wsgi.application'
|
|
|
|
|
|
# Database
|
|
# https://docs.djangoproject.com/en/5.1/ref/settings/#databases
|
|
|
|
MONGODB_URI = env("MONGODB_URI")
|
|
MONGODB_NAME = env('MONGODB_NAME')
|
|
|
|
DATABASES = {
|
|
'default': {
|
|
'ENGINE': 'django.db.backends.postgresql',
|
|
'NAME': env("DB_NAME"),
|
|
'USER': env("DB_USER"),
|
|
'PASSWORD': env("DB_PASSWORD"),
|
|
'HOST': env("DB_HOST"),
|
|
'PORT': env("DB_PORT"),
|
|
}
|
|
}
|
|
|
|
# cache
|
|
REDIS_PASSWORD = env("REDIS_PASSWORD")
|
|
|
|
CACHES = {
|
|
'default': {
|
|
'BACKEND': 'django_redis.cache.RedisCache',
|
|
'LOCATION': f'redis://:{REDIS_PASSWORD}@redis:6379/1',
|
|
'OPTIONS': {
|
|
'CLIENT_CLASS': 'django_redis.client.DefaultClient',
|
|
'SERIALIZER': 'django_redis.serializers.json.JSONSerializer',
|
|
},
|
|
"KEY_PREFIX": "colio",
|
|
"TIMEOUT": 60 * 60,
|
|
}
|
|
}
|
|
|
|
# aws s3
|
|
AWS_ACCESS_KEY_ID = env('AWS_ACCESS_KEY_ID')
|
|
AWS_SECRET_ACCESS_KEY = env('AWS_SECRET_ACCESS_KEY')
|
|
AWS_STORAGE_BUCKET_NAME = 'colio-service'
|
|
AWS_S3_REGION_NAME = 'ap-northeast-2'
|
|
|
|
AWS_S3_FILE_OVERWRITE = True # 같은 이름 파일 덮어쓰기
|
|
AWS_DEFAULT_ACL = None # 권한 제어 (None이면 기본 권한)
|
|
AWS_QUERYSTRING_AUTH = False # 서명 없는 URL 사용
|
|
|
|
# DEFAULT_FILE_STORAGE = 'storages.backends.s3boto3.S3Boto3Storage'
|
|
|
|
STORAGES = {
|
|
"default": {
|
|
"BACKEND": "storages.backends.s3boto3.S3Boto3Storage",
|
|
},
|
|
"staticfiles": {
|
|
"BACKEND": "storages.backends.s3boto3.S3StaticStorage",
|
|
},
|
|
}
|
|
|
|
|
|
# Password validation
|
|
# https://docs.djangoproject.com/en/5.1/ref/settings/#auth-password-validators
|
|
|
|
AUTH_PASSWORD_VALIDATORS = [
|
|
{
|
|
'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
|
|
},
|
|
{
|
|
'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
|
|
},
|
|
{
|
|
'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
|
|
},
|
|
{
|
|
'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
|
|
},
|
|
]
|
|
|
|
|
|
# Internationalization
|
|
# https://docs.djangoproject.com/en/5.1/topics/i18n/
|
|
|
|
LANGUAGE_CODE = 'en-us'
|
|
|
|
TIME_ZONE = 'Asia/Seoul'
|
|
|
|
USE_I18N = True
|
|
|
|
USE_TZ = True
|
|
|
|
MEDIA_URL = '/media/'
|
|
|
|
MEDIA_ROOT = os.path.join(BASE_DIR, 'media')
|
|
|
|
STATIC_URL = 'static/'
|
|
|
|
STATIC_ROOT = os.path.join(BASE_DIR, 'static')
|
|
|
|
# Default primary key field type
|
|
# https://docs.djangoproject.com/en/5.1/ref/settings/#default-auto-field
|
|
|
|
DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
|
|
|
|
## Apscheduler 설정
|
|
APSCHEDULER_DATETIME_FORMAT = "N j, Y, f:s a" # Default
|
|
|
|
SCHEDULER_DEFAULT = True
|
|
|
|
REST_FRAMEWORK = {
|
|
'DEFAULT_AUTHENTICATION_CLASSES': (
|
|
'rest_framework_simplejwt.authentication.JWTAuthentication',
|
|
),
|
|
|
|
'DEFAULT_PERMISSION_CLASSES': (
|
|
'rest_framework.permissions.IsAuthenticated', # 인증된 사용자만 접근
|
|
# 'rest_framework.permissions.IsAdminUser', # 관리자만 접근
|
|
# 'rest_framework.permissions.AllowAny', # 누구나 접근
|
|
),
|
|
|
|
'DEFAULT_FILTER_BACKENDS': [
|
|
'django_filters.rest_framework.DjangoFilterBackend',
|
|
'rest_framework.filters.OrderingFilter',
|
|
],
|
|
}
|
|
|
|
REST_USE_JWT = True
|
|
|
|
SIMPLE_JWT = {
|
|
'ACCESS_TOKEN_LIFETIME': timedelta(days=30), # minutes = 15
|
|
'REFRESH_TOKEN_LIFETIME': timedelta(days=7),
|
|
'ROTATE_REFRESH_TOKENS': True,
|
|
'BLACKLIST_AFTER_ROTATION': True,
|
|
'UPDATE_LAST_LOGIN': True,
|
|
|
|
'ALGORITHM': 'HS256',
|
|
'SIGNING_KEY': SECRET_KEY,
|
|
'VERIFYING_KEY': None,
|
|
'AUDIENCE': None,
|
|
'ISSUER': None,
|
|
'JWK_URL': None,
|
|
'LEEWAY': 0,
|
|
|
|
'AUTH_HEADER_TYPES': ('Bearer',),
|
|
'AUTH_HEADER_NAME': 'HTTP_AUTHORIZATION',
|
|
'USER_ID_FIELD': 'id',
|
|
'USER_ID_CLAIM': 'user_id',
|
|
'USER_AUTHENTICATION_RULE': 'rest_framework_simplejwt.authentication.default_user_authentication_rule',
|
|
|
|
'AUTH_TOKEN_CLASSES': ('rest_framework_simplejwt.tokens.AccessToken',),
|
|
'TOKEN_TYPE_CLAIM': 'token_type',
|
|
'TOKEN_USER_CLASS': 'rest_framework_simplejwt.models.TokenUser',
|
|
|
|
'JTI_CLAIM': 'jti',
|
|
|
|
'SLIDING_TOKEN_REFRESH_EXP_CLAIM': 'refresh_exp',
|
|
'SLIDING_TOKEN_LIFETIME': timedelta(minutes=5),
|
|
'SLIDING_TOKEN_REFRESH_LIFETIME': timedelta(days=1),
|
|
}
|
|
|
|
## 세션 만료 관리
|
|
# 브라우저 닫으면 삭제 (default False)
|
|
SESSION_EXPIRE_AT_BROWSER_CLOSE = True
|
|
|
|
# 비활동 최대 기한 (default 2주)
|
|
SESSION_COOKIE_AGE = 86400
|
|
|
|
# https에서만 세션 쿠키가 전송 (default false) https 배포 시 true로
|
|
SESSION_COOKIE_SECURE = True
|
|
|
|
GOOGLE_CLIENT_ID = env('GOOGLE_CLIENT_ID')
|
|
|
|
GITHUB_CLIENT_ID = env('GITHUB_CLIENT_ID')
|
|
GITHUB_CLIENT_SECRET = env('GITHUB_CLIENT_SECRET')
|
|
|
|
EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend'
|
|
EMAIL_HOST = env('EMAIL_HOST')
|
|
EMAIL_USE_TLS = True
|
|
EMAIL_PORT = env('EMAIL_PORT')
|
|
EMAIL_HOST_USER = env('EMAIL_HOST_USER')
|
|
EMAIL_HOST_PASSWORD = env('EMAIL_HOST_PASSWORD')
|
|
DEFAULT_FROM_EMAIL = EMAIL_HOST_USER
|
|
|
|
##CORS
|
|
# CSRF_TRUSTED_ORIGINS = []
|
|
# CORS_ALLOWED_ORIGINS = ["http://localhost:3000", "https://{프론트주소}.vercel.app/"]
|
|
CORS_ALLOW_ALL_ORIGINS = True
|
|
CORS_ALLOW_CREDENTIALS = True
|
|
CORS_ALLOW_METHODS = (
|
|
'DELETE',
|
|
'GET',
|
|
'OPTIONS',
|
|
'PATCH',
|
|
'POST',
|
|
'PUT',
|
|
)
|
|
CORS_ALLOW_HEADERS = (
|
|
'accept',
|
|
'accept-encoding',
|
|
'authorization',
|
|
'content-type',
|
|
'dnt',
|
|
'origin',
|
|
'user-agent',
|
|
'x-csrftoken',
|
|
'x-requested-with',
|
|
#만약 허용해야할 추가적인 헤더키가 있다면(사용자정의 키) 여기에 추가하면 됩니다.
|
|
) |