sinfonie/photo26
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

Use secure cookies

Browse source
This commit is contained in:
Alexandre Iooss 2022-01-30 19:13:42 +01:00
parent b7a78cea12
commit 648cae81d5
1 changed files with 6 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

26
photo21/settings.py
View file

@ -23,7 +23,7 @@ BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
# See https://docs.djangoproject.com/en/2.2/howto/deployment/checklist/ # See https://docs.djangoproject.com/en/2.2/howto/deployment/checklist/
# SECURITY WARNING: keep the secret key used in production secret! # SECURITY WARNING: keep the secret key used in production secret!
SECRET_KEY = 'CHANGE_ME' SECRET_KEY = ''
# SECURITY WARNING: don't run with debug turned on in production! # SECURITY WARNING: don't run with debug turned on in production!
DEBUG = False DEBUG = False
@ -36,15 +36,13 @@ ALLOWED_HOSTS = [
] ]
# Admins receive server errors, this is useful to be notified of potential bugs # Admins receive server errors, this is useful to be notified of potential bugs
# By default MANAGERS=ADMINS, so admins also receive upload notifications
ADMINS = [ ADMINS = [
('admin', 'photos-admin@lists.crans.org'), ('admin', 'photos-admin@lists.crans.org'),
] ]
# Managers receive notifications about new photos upload # Use secure cookies in production
MANAGERS = [ SESSION_COOKIE_SECURE = not DEBUG
('moderation', 'photos-admin@lists.crans.org'),
]
# Application definition # Application definition
@ -144,14 +142,8 @@ PASSWORD_HASHERS = [
# Internationalization # Internationalization
# https://docs.djangoproject.com/en/2.2/topics/i18n/ # https://docs.djangoproject.com/en/2.2/topics/i18n/
LANGUAGE_CODE = 'en-us'
TIME_ZONE = 'UTC' TIME_ZONE = 'UTC'
USE_I18N = True
USE_L10N = True
USE_TZ = True USE_TZ = True
# Limit available languages to this subset # Limit available languages to this subset
@ -185,16 +177,10 @@ LOCALE_PATHS = [os.path.join(BASE_DIR, 'photo21/locale')]
FIXTURE_DIRS = [os.path.join(BASE_DIR, 'photo21/fixtures')] FIXTURE_DIRS = [os.path.join(BASE_DIR, 'photo21/fixtures')]
# Email settings # Do not send email during debug
# By default Django sends mails to localhost:25 without authentification
if DEBUG: if DEBUG:
EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend' EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend'
else:
EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend'
EMAIL_USE_SSL = os.getenv('EMAIL_USE_SSL', False)
EMAIL_HOST = os.getenv('EMAIL_HOST', 'localhost')
EMAIL_PORT = os.getenv('EMAIL_PORT', 25)
EMAIL_HOST_USER = os.getenv('EMAIL_USER', None)
EMAIL_HOST_PASSWORD = os.getenv('EMAIL_PASSWORD', None)
# Mail will be sent from this address # Mail will be sent from this address
SERVER_EMAIL = "photos@crans.org" SERVER_EMAIL = "photos@crans.org"