settings.py.example

"""
Django settings for ngw project.

For more information on this file, see
https://docs.djangoproject.com/en/1.11/topics/settings/

For the full list of settings and their values, see
https://docs.djangoproject.com/en/1.11/ref/settings/
"""

import os

# Build paths inside the project like this: os.path.join(BASE_DIR, ...)
BASE_DIR = os.path.dirname(__file__)


# See https://docs.djangoproject.com/en/1.11/howto/deployment/checklist/

# SECURITY WARNING: keep the secret key used in production secret!
SECRET_KEY = ''

# SECURITY WARNING: don't run with debug turned on in production!
DEBUG = False

ALLOWED_HOSTS = ['127.0.0.1', ]


# Application definition

INSTALLED_APPS = (
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.messages',
    'django.contrib.staticfiles',
    'session_security',
    'ngw.core',
    # 'ngw.extensions.phpbb',
    'ngw.extensions.externalmessages',  # Needed for translations
    # 'ngw.extensions.mailman',
    # 'ngw.extensions.xmpp',
    # admin used for static files, but not in urls.py
    # (and it needs to be after ngw.core for templates override)
    # 'django.contrib.admin',
    'django.contrib.admin.apps.SimpleAdminConfig',  # We use admin templates
    # 'ngw.extensions.vpn',
    # 'django_cracklib',
    # 'ngw.extensions.matrix',
)

MIDDLEWARE = [
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.locale.LocaleMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.middleware.http.ConditionalGetMiddleware',  # ETag
    # set up request.user from session:
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.auth.middleware.SessionAuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
    'session_security.middleware.SessionSecurityMiddleware',
]

ROOT_URLCONF = 'ngw.urls'

TEMPLATES = [
    {
        'BACKEND': 'django.template.backends.django.DjangoTemplates',
        'DIRS': [],
        'APP_DIRS': True,
        'OPTIONS': {
            'context_processors': [
                # users, perms available in templates:
                'django.template.context_processors.debug',
                'django.template.context_processors.i18n',
                'django.template.context_processors.media',
                'django.template.context_processors.request',
                'django.template.context_processors.static',
                'django.template.context_processors.tz',
                'django.contrib.auth.context_processors.auth',
                'django.contrib.messages.context_processors.messages',
                'ngw.core.context_processors.banner',
                'ngw.core.context_processors.contactcount',
                'ngw.core.context_processors.extra_header_links',
                'ngw.core.context_processors.has_permission',
            ],
            'debug': DEBUG,
        },
    },
]
WSGI_APPLICATION = 'ngw.core.wsgi.application'


# Database
# https://docs.djangoproject.com/en/1.11/ref/settings/#databases
DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.postgresql',
        'NAME': 'ngw',
        'USER': 'XXX',
        'PASSWORD': 'XXX',
        'HOST': 'localhost',
        'PORT': '',  # Set to empty string for default.
    },

    # Enable this block if you want jabber extension:
    # 'jabber': {
    #     'ENGINE': 'django.db.backends.postgresql',
    #     'NAME': 'jabber',
    #     'USER': 'jabber',
    #     'PASSWORD': 'XXX',
    #     'HOST': 'localhost',
    #     'PORT': '',
    #     'OPTIONS': {'autocommit': True},
    # },
}


# Password validation
# https://docs.djangoproject.com/en/1.11/ref/settings/#auth-password-validators

AUTH_PASSWORD_VALIDATORS = [
    {
        'NAME': 'django.contrib.auth.password_validation'
                '.UserAttributeSimilarityValidator',
    },
    {
        'NAME': 'ngw.core.password_validator.CrackPasswordValidator',
    },
]


# Internationalization
# https://docs.djangoproject.com/en/1.11/topics/i18n/

LANGUAGE_CODE = 'en-us'

TIME_ZONE = 'UTC'

USE_I18N = True

USE_L10N = True

USE_TZ = True


# Static files (CSS, JavaScript, Images)
# https://docs.djangoproject.com/en/1.11/howto/static-files/

STATIC_ROOT = os.path.join(BASE_DIR, 'static/')

STATIC_URL = '/static/'

MEDIA_ROOT = os.path.join(BASE_DIR, 'media/')

MEDIA_URL = '/media/'

STATICFILES_DIRS = (
    ('javascript', '/usr/share/javascript'),
)


AUTHENTICATION_BACKENDS = (
    'ngw.core.authbackend.NgwAuthBackend',
)

AUTH_USER_MODEL = 'ngw.Contact'

LOGIN_URL = '/login'
LOGIN_REDIRECT_URL = '/'

SESSION_COOKIE_AGE = 3*3600
SESSION_SAVE_EVERY_REQUEST = True  # Update session expiration time
SESSION_COOKIE_SECURE = True  # We are not using http, only https
SESSION_EXPIRE_AT_BROWSER_CLOSE = True  # We have short time sessions anyways

CSRF_COOKIE_AGE = 24*3600  # One day
CSRF_COOKIE_SECURE = True  # We are not using http, only https

APPEND_SLASH = False
MESSAGE_STORAGE = 'django.contrib.messages.storage.session.SessionStorage'

# Default is group writable files:
FILE_UPLOAD_PERMISSIONS = 0o664

# Uncomment next line to enable GPG keyring
# GPG_HOME = '/var/lib/ngw/'

# If you enable the xmpp extension, you'll need to define these 3 values:
# XMPP_DOMAIN = 'myxmppdomain.net'
# XMPP_GROUP = 284
# XMPP_ROSTERNAME = 'Ngw contacts'  # Name of the group in the roster

# EMAIL_BACKEND = 'ngw.core.tormailbackend.TorEmailBackend'
# EMAIL_HOST = 'localhost'
EMAIL_PORT = 465
# EMAIL_HOST_USER = 'smtpuser'
# EMAIL_HOST_PASSWORD = 'password'
# DEFAULT_FROM_EMAIL = 'webmaster@localhost'

DATA_UPLOAD_MAX_MEMORY_SIZE = 10 * 1024**3

EXTERNAL_MESSAGE_BACKEND = 'ngw.extensions.externalmessages.onetime'
EXTERNAL_MESSAGE_URL = 'onetime.info:443'

# If you enable the vpn extension, you'll need to define these values:
# VPN_GROUP = 52  # Group of people allowed to connect to the VPN
# VPN_FIELD_PASSWORD = 2  # Field containing the VPN password
# VPN_BASEIP = '10.7.0.0'  # Base IP address
# VPN_MAXIP = '10.7.255.255'  # Maximum IP address

MATRIX_DOMAIN = 'nirgal.com'
MATRIX_URL = 'https://matrix.nirgal.com/'
MATRIX_ADMIN_TOKEN = 'syt_LsA6dY3N8SacYZWiTL_JZqHqKRDpMSQq7Evq5idDjKQz33'
MATRIX_SYNC_GROUP = 299
MATRIX_MOD_GROUP = 1141  # Moderator team

EXTRA_BANNER_LINKS = (
    ('wiki', '/wiki'),
)

# vim: set et ts=4 ft=python: #