"""

Django settings for gettingstarted project.

Generated by 'django-admin startproject' using Django 4.2.1.

For more information on this file, see

https://docs.djangoproject.com/en/4.2/topics/settings/

For the full list of settings and their values, see

https://docs.djangoproject.com/en/4.2/ref/settings/

"""

import os

import secrets

from pathlib import Path

import dj_database_url

# Build paths inside the project like this: BASE_DIR / 'subdir'.

BASE_DIR = Path(__file__).resolve().parent.parent

# Before using your Heroku app in production, make sure to review Django's deployment checklist:

# See https://docs.djangoproject.com/en/4.2/howto/deployment/checklist/

# Django requires a unique secret key for each Django app, that is used by several of its

# security features. To simplify initial setup (without hardcoding the secret in the source

# code) we set this to a random value every time the app starts. However, this will mean many

# Django features break whenever an app restarts (for example, sessions will be logged out).

# In your production Heroku apps you should set the `DJANGO_SECRET_KEY` config var explicitly.

# Make sure to use a long unique value, like you would for a password. See:

# https://docs.djangoproject.com/en/4.2/ref/settings/#std-setting-SECRET_KEY

# https://devcenter.heroku.com/articles/config-vars

# SECURITY WARNING: keep the secret key used in production secret!

SECRET_KEY = os.environ.get(

"DJANGO_SECRET_KEY",

default=secrets.token_urlsafe(nbytes=64),

)

# The `DYNO` env var is set on Heroku CI, but it's not a real Heroku app, so we have to

# also explicitly exclude CI:

# https://devcenter.heroku.com/articles/heroku-ci#immutable-environment-variables

IS_KNATIVE_APP = "K_SERVICE" in os.environ and not "CI" in os.environ

# SECURITY WARNING: don't run with debug turned on in production!

if not IS_KNATIVE_APP:

DEBUG = True

# On Heroku, it's safe to use a wildcard for `ALLOWED_HOSTS``, since the Heroku router performs

# validation of the Host header in the incoming HTTP request. On other platforms you may need

# to list the expected hostnames explicitly to prevent HTTP Host header attacks. See:

# https://docs.djangoproject.com/en/4.2/ref/settings/#std-setting-ALLOWED_HOSTS

if IS_KNATIVE_APP:

ALLOWED_HOSTS = ["*"]

else:

ALLOWED_HOSTS = []

# Application definition

INSTALLED_APPS = [

# Use WhiteNoise's runserver implementation instead of the Django default, for dev-prod parity.

"whitenoise.runserver_nostatic",

# Uncomment this and the entry in `urls.py` if you wish to use the Django admin feature:

# https://docs.djangoproject.com/en/4.2/ref/contrib/admin/

# "django.contrib.admin",

"django.contrib.auth",

"django.contrib.contenttypes",

"django.contrib.sessions",

"django.contrib.messages",

"django.contrib.staticfiles",

"hello",

]

MIDDLEWARE = [

"django.middleware.security.SecurityMiddleware",

# Django doesn't support serving static assets in a production-ready way, so we use the

# excellent WhiteNoise package to do so instead. The WhiteNoise middleware must be listed

# after Django's `SecurityMiddleware` so that security redirects are still performed.

# See: https://whitenoise.readthedocs.io

"whitenoise.middleware.WhiteNoiseMiddleware",

"django.contrib.sessions.middleware.SessionMiddleware",

"django.middleware.common.CommonMiddleware",

"django.middleware.csrf.CsrfViewMiddleware",

"django.contrib.auth.middleware.AuthenticationMiddleware",

"django.contrib.messages.middleware.MessageMiddleware",

"django.middleware.clickjacking.XFrameOptionsMiddleware",

]

ROOT_URLCONF = "gettingstarted.urls"

TEMPLATES = [

{

"BACKEND": "django.template.backends.django.DjangoTemplates",

"DIRS": [],

"APP_DIRS": True,

"OPTIONS": {

"context_processors": [

"django.template.context_processors.debug",

"django.template.context_processors.request",

"django.contrib.auth.context_processors.auth",

"django.contrib.messages.context_processors.messages",

],

},

},

]

WSGI_APPLICATION = "gettingstarted.wsgi.application"

# Database

# https://docs.djangoproject.com/en/4.2/ref/settings/#databases

if IS_KNATIVE_APP:

# In production on Heroku the database configuration is derived from the `DATABASE_URL`

# environment variable by the dj-database-url package. `DATABASE_URL` will be set

# automatically by Heroku when a database addon is attached to your Heroku app. See:

# https://devcenter.heroku.com/articles/provisioning-heroku-postgres

# https://github.com/jazzband/dj-database-url

DATABASES = {

"default": dj_database_url.config(

conn_max_age=600,

conn_health_checks=True,

ssl_require=True,

),

}

else:

# When running locally in development or in CI, a sqlite database file will be used instead

# to simplify initial setup. Longer term it's recommended to use Postgres locally too.

DATABASES = {

"default": {

"ENGINE": "django.db.backends.sqlite3",

"NAME": BASE_DIR / "db.sqlite3",

}

}

# Password validation

# https://docs.djangoproject.com/en/4.2/ref/settings/#auth-password-validators

AUTH_PASSWORD_VALIDATORS = [

{

"NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator",

},

{

"NAME": "django.contrib.auth.password_validation.MinimumLengthValidator",

},

{

"NAME": "django.contrib.auth.password_validation.CommonPasswordValidator",

},

{

"NAME": "django.contrib.auth.password_validation.NumericPasswordValidator",

},

]

# Internationalization

# https://docs.djangoproject.com/en/4.2/topics/i18n/

LANGUAGE_CODE = "en-us"

TIME_ZONE = "UTC"

USE_I18N = True

USE_TZ = True

# Static files (CSS, JavaScript, Images)

# https://docs.djangoproject.com/en/4.2/howto/static-files/

STATIC_ROOT = BASE_DIR / "staticfiles"

STATIC_URL = "static/"

STORAGES = {

# Enable WhiteNoise's GZip and Brotli compression of static assets:

# https://whitenoise.readthedocs.io/en/latest/django.html#add-compression-and-caching-support

"staticfiles": {

"BACKEND": "whitenoise.storage.CompressedManifestStaticFilesStorage",

},

}

# Don't store the original (un-hashed filename) version of static files, to reduce slug size:

# https://whitenoise.readthedocs.io/en/latest/django.html#WHITENOISE_KEEP_ONLY_HASHED_FILES

WHITENOISE_KEEP_ONLY_HASHED_FILES = True

# Default primary key field type

# https://docs.djangoproject.com/en/4.2/ref/settings/#default-auto-field

DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"