vergabe-teilnahme/vergabe_teilnahme/settings/base.py
tegwick 8be281025b
Some checks failed
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
Application acceptance / application-tests (push) Has been cancelled
Build and Publish Container Image / build-and-push (push) Successful in 40s
Add company welcome and verified NetKingdom sign-in
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
2026-09-12 02:43:31 +02:00

131 lines
4.7 KiB
Python

from pathlib import Path
import dj_database_url
from decouple import config
from .paths import application_path
BASE_DIR = Path(__file__).resolve().parent.parent.parent
SECRET_KEY = config('SECRET_KEY', default='django-insecure-change-me')
INSTALLED_APPS = [
'django.contrib.admin',
'django.contrib.auth',
'django.contrib.contenttypes',
'django.contrib.sessions',
'django.contrib.messages',
'django.contrib.staticfiles',
'vergabe_teilnahme.apps.core',
'vergabe_teilnahme.apps.accounts',
'vergabe_teilnahme.apps.ausschreibungen',
'vergabe_teilnahme.apps.lose',
'vergabe_teilnahme.apps.aufgaben',
'vergabe_teilnahme.apps.dokumente',
'vergabe_teilnahme.apps.preise',
'vergabe_teilnahme.apps.partner',
'vergabe_teilnahme.apps.bibliothek',
'vergabe_teilnahme.apps.marktbegleiter',
'vergabe_teilnahme.apps.nachbetrachtung',
'vergabe_teilnahme.apps.feedback',
]
MIDDLEWARE = [
'django.middleware.security.SecurityMiddleware',
'whitenoise.middleware.WhiteNoiseMiddleware',
'django.contrib.sessions.middleware.SessionMiddleware',
'django.middleware.common.CommonMiddleware',
'django.middleware.csrf.CsrfViewMiddleware',
'django.contrib.auth.middleware.AuthenticationMiddleware',
'vergabe_teilnahme.apps.accounts.middleware.PilotLoginRequiredMiddleware',
'django.contrib.messages.middleware.MessageMiddleware',
'django.middleware.clickjacking.XFrameOptionsMiddleware',
]
ROOT_URLCONF = 'vergabe_teilnahme.urls'
TEMPLATES = [
{
'BACKEND': 'django.template.backends.django.DjangoTemplates',
'DIRS': [BASE_DIR / 'vergabe_teilnahme' / 'templates'],
'APP_DIRS': True,
'OPTIONS': {
'context_processors': [
'django.template.context_processors.debug',
'django.template.context_processors.request',
'django.contrib.auth.context_processors.auth',
'django.contrib.messages.context_processors.messages',
'vergabe_teilnahme.apps.core.context_processors.vergabe_context',
'vergabe_teilnahme.apps.accounts.context_processors.company_context',
],
},
},
]
WSGI_APPLICATION = 'vergabe_teilnahme.wsgi.application'
DATABASES = {
'default': dj_database_url.parse(
config('DATABASE_URL', default='postgres://vergabe:vergabe@localhost:5432/vergabe_db')
)
}
AUTH_USER_MODEL = 'accounts.Mitarbeiter'
LOGIN_URL = 'accounts:login'
LOGIN_REDIRECT_URL = 'home'
LOGOUT_REDIRECT_URL = 'accounts:login'
# The edge strips this exact prefix before forwarding to this isolated instance.
# Django uses SCRIPT_NAME for URL generation; tenant selection stays with the
# admitted deployment/database binding, not arbitrary forwarded headers.
APP_BASE_PATH = application_path(config('APP_BASE_PATH', default=''))
FORCE_SCRIPT_NAME = APP_BASE_PATH or None
SESSION_COOKIE_PATH = CSRF_COOKIE_PATH = APP_BASE_PATH + '/'
if APP_BASE_PATH:
_cookie_prefix = 'vergabe_' + APP_BASE_PATH[1:].replace('-', '_')
SESSION_COOKIE_NAME = _cookie_prefix + '_sessionid'
CSRF_COOKIE_NAME = _cookie_prefix + '_csrftoken'
DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
AUTH_PASSWORD_VALIDATORS = [
{'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator'},
{'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator'},
{'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator'},
{'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator'},
]
LANGUAGE_CODE = 'de-de'
TIME_ZONE = 'Europe/Berlin'
USE_I18N = True
USE_TZ = True
STATIC_URL = APP_BASE_PATH + '/static/'
STATIC_ROOT = BASE_DIR / 'staticfiles'
STATICFILES_DIRS = [BASE_DIR / 'static']
MEDIA_URL = APP_BASE_PATH + '/media/'
MEDIA_ROOT = BASE_DIR / 'media'
MAX_UPLOAD_SIZE = config('MAX_UPLOAD_SIZE', default=52428800, cast=int)
# Issue Facade — lokales SQLite-Backend (immer aktiv)
ISSUE_FACADE_LOCAL_DB = BASE_DIR / '.issue-facade' / 'issues.db'
# Issue Facade — Gitea-Remote (optional, None = deaktiviert)
ISSUE_FACADE_GITEA: dict | None = None
# Beispiel:
# ISSUE_FACADE_GITEA = {
# 'base_url': 'https://gitea.example.com',
# 'token': env('GITEA_TOKEN', default=''),
# 'owner': 'org',
# 'repo': 'vergabe',
# }
# Enabled only after the exact client, company and provider release are admitted.
NETKINGDOM_ENABLED = config('NETKINGDOM_ENABLED', default=False, cast=bool)
NETKINGDOM_ISSUER = config('NETKINGDOM_ISSUER', default='https://kc.coulomb.social')
NETKINGDOM_CLIENT_ID = config('NETKINGDOM_CLIENT_ID', default='')
NETKINGDOM_CALLBACK = config('NETKINGDOM_CALLBACK', default='')
NETKINGDOM_TENANT = config('NETKINGDOM_TENANT', default='')
COMPANY_DISPLAY_NAME = config('COMPANY_DISPLAY_NAME', default='Ihrem Unternehmen')