website Files · conservancy/settings/prod.py

Files @ 3826b6fb66e7

Branch filter:

Location: website/conservancy/settings/prod.py

3826b6fb66e7 1010 B text/x-python Show Annotation Show as Raw Download as Raw

bsturmfels

Switch settings to use "the one true way" approach

The advantage of this approach is that the production and dev configurations are
in version control, so there's less opportunity for surprises.

As advocated by Jacob Kaplan-Moss (OSCON 2011) and Two Scoops of Django book.

import json

from django.core.exceptions import ImproperlyConfigured

from .base import *

DEBUG = False
ALLOWED_HOSTS = ['www.sfconservancy.org', 'sfconservancy.org']

FORCE_CANONICAL_HOSTNAME = 'sfconservancy.org'

ADMINS = [
    ('Bradley M. Kuhn', 'sysadmin@sfconservancy.org'),
    ('Ben Sturmfels', 'sysadmin+conservancy@sturm.com.au'),
]

MANAGERS = [
    ('Bradley M. Kuhn', 'sysadmin@sfconservancy.org'),
]

DATABASES = {
    'default': {
        'NAME': '/var/lib/www/database/conservancy-website.sqlite3',
        'ENGINE': 'django.db.backends.sqlite3',
    }
}

# Apache/mod_wsgi doesn't make it straightforward to pass environment variables
# to Django (can't use the Apache config).
with open(BASE_DIR / 'secrets.json') as f:
    secrets = json.load(f)

def get_secret(secrets, setting):
    try:
        return secrets[setting]
    except KeyError:
        raise ImproperlyConfigured(f'Missing secret \'{setting}\'')

SECRET_KEY = get_secret(secrets, 'SECRET_KEY')

SESSION_COOKIE_SECURE = True