icurfer
63c126077a
Some checks failed
Build And Test / build-and-push (push) Has been cancelled
- Presigned URL API 추가 (MinIO/S3 private 버킷 지원) - OpenTelemetry trace 설정 추가 (DEBUG=False 시 활성화) - requirements.txt에 opentelemetry 패키지 추가 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
288 lines
8.2 KiB
Python
288 lines
8.2 KiB
Python
"""
|
|
Django settings for blog_prj project.
|
|
|
|
Generated by 'django-admin startproject' using Django 4.2.14.
|
|
|
|
For more information on this file, see
|
|
https://docs.djangoproject.com/en/4.2/topics/settings/
|
|
|
|
For the full list of settings and their values, see
|
|
https://docs.djangoproject.com/en/4.2/ref/settings/
|
|
"""
|
|
|
|
import os
|
|
import logging
|
|
from dotenv import load_dotenv
|
|
from pathlib import Path
|
|
from datetime import timedelta
|
|
import sys
|
|
|
|
# Build paths inside the project like this: BASE_DIR / 'subdir'.
|
|
BASE_DIR = Path(__file__).resolve().parent.parent
|
|
|
|
# 우선순위: .env.dev > .env.prd > .env
|
|
_env_file = None
|
|
if os.path.exists(os.path.join(BASE_DIR, '.env.dev')):
|
|
_env_file = '.env.dev'
|
|
load_dotenv(os.path.join(BASE_DIR, '.env.dev'))
|
|
elif os.path.exists(os.path.join(BASE_DIR, '.env.prd')):
|
|
_env_file = '.env.prd'
|
|
load_dotenv(os.path.join(BASE_DIR, '.env.prd'))
|
|
else:
|
|
_env_file = 'local_env'
|
|
|
|
# Quick-start development settings - unsuitable for production
|
|
# See https://docs.djangoproject.com/en/4.2/howto/deployment/checklist/
|
|
|
|
# SECURITY WARNING: keep the secret key used in production secret!
|
|
SECRET_KEY = os.environ.get('SECRET_KEY', 'django-insecure-ec9me^z%x7-2vwee5#qq(kvn@^cs!!22_*f-im(320_k5-=0j5')
|
|
|
|
# OpenTelemetry Trace 설정
|
|
SERVICE_PLATFORM = os.getenv("SERVICE_PLATFORM", "none")
|
|
TRACE_SERVICE_NAME = os.getenv("TRACE_SERVICE_NAME", "msa-django-blog")
|
|
TRACE_ENDPOINT = os.getenv("TRACE_ENDPOINT", "none")
|
|
|
|
# SECURITY WARNING: don't run with debug turned on in production!
|
|
DEBUG = int(os.environ.get('DEBUG', 1))
|
|
|
|
LOGGING = {
|
|
'version': 1,
|
|
'disable_existing_loggers': False,
|
|
'formatters': {
|
|
'standard': {
|
|
'format': '[{asctime}] {levelname} {name}: {message}',
|
|
'style': '{',
|
|
},
|
|
},
|
|
'handlers': {
|
|
'console': {
|
|
'class': 'logging.StreamHandler',
|
|
'stream': sys.stdout,
|
|
'formatter': 'standard',
|
|
},
|
|
},
|
|
'root': {
|
|
'handlers': ['console'],
|
|
'level': 'INFO',
|
|
},
|
|
'loggers': {
|
|
'blog': {
|
|
'handlers': ['console'],
|
|
'level': 'INFO',
|
|
'propagate': False,
|
|
},
|
|
'django': {
|
|
'handlers': ['console'],
|
|
'level': 'WARNING',
|
|
'propagate': False,
|
|
},
|
|
'django.request': {
|
|
'handlers': ['console'],
|
|
'level': 'ERROR',
|
|
'propagate': False,
|
|
},
|
|
'django.db.backends': {
|
|
'handlers': ['console'],
|
|
'level': 'WARNING',
|
|
'propagate': False,
|
|
},
|
|
'apscheduler': {
|
|
'handlers': ['console'],
|
|
'level': 'WARNING',
|
|
'propagate': False,
|
|
},
|
|
},
|
|
}
|
|
|
|
# 환경 파일 로드 로그
|
|
_logger = logging.getLogger('blog')
|
|
_logger.info(f"Environment File: {_env_file}")
|
|
|
|
AUTH_VERIFY_URL = os.environ.get('AUTH_VERIFY_URL', 'NONE')
|
|
|
|
ALLOWED_HOSTS = ["*"]
|
|
|
|
# Application definition
|
|
|
|
INSTALLED_APPS = [
|
|
'django.contrib.admin',
|
|
'django.contrib.auth',
|
|
'django.contrib.contenttypes',
|
|
'django.contrib.sessions',
|
|
'django.contrib.messages',
|
|
'django.contrib.staticfiles',
|
|
# by.sdjo 2025-04-22
|
|
'rest_framework',
|
|
'rest_framework_simplejwt',
|
|
'drf_yasg',
|
|
'corsheaders',
|
|
'storages', # MinIO/S3 스토리지
|
|
# create by.sdjo 2025-04-22
|
|
'blog', # 2025-04-22 custom app create
|
|
]
|
|
|
|
# AUTH_USER_MODEL = 'users.CustomUser'
|
|
|
|
MIDDLEWARE = [
|
|
'corsheaders.middleware.CorsMiddleware',
|
|
'django.middleware.security.SecurityMiddleware',
|
|
'django.contrib.sessions.middleware.SessionMiddleware',
|
|
'django.middleware.common.CommonMiddleware',
|
|
'django.middleware.csrf.CsrfViewMiddleware',
|
|
'django.contrib.auth.middleware.AuthenticationMiddleware',
|
|
'django.contrib.messages.middleware.MessageMiddleware',
|
|
'django.middleware.clickjacking.XFrameOptionsMiddleware',
|
|
]
|
|
|
|
# by.sdjo 2025-04-22
|
|
CORS_ALLOWED_ORIGINS = [
|
|
"http://localhost:3000",
|
|
"http://127.0.0.1:3000",
|
|
"http://127.0.0.1:8080",
|
|
"http://192.168.0.100:3000",
|
|
"http://192.168.0.202:8080",
|
|
"https://demo.test",
|
|
"http://demo.test",
|
|
"https://www.demo.test",
|
|
"https://sample.test",
|
|
"http://sample.test",
|
|
"http://www.sample.test",
|
|
"http://auth.sample.test",
|
|
"http://blog.sample.test",
|
|
"https://www.icurfer.com",
|
|
"https://icurfer.com",
|
|
]
|
|
|
|
# by.sdjo 2025-04-22
|
|
REST_FRAMEWORK = {
|
|
'DEFAULT_AUTHENTICATION_CLASSES': (
|
|
'blog.authentication.StatelessJWTAuthentication',
|
|
),
|
|
'DEFAULT_PERMISSION_CLASSES': (
|
|
'rest_framework.permissions.IsAuthenticated',
|
|
)
|
|
}
|
|
|
|
ROOT_URLCONF = 'blog_prj.urls'
|
|
|
|
TEMPLATES = [
|
|
{
|
|
'BACKEND': 'django.template.backends.django.DjangoTemplates',
|
|
'DIRS': [],
|
|
'APP_DIRS': True,
|
|
'OPTIONS': {
|
|
'context_processors': [
|
|
'django.template.context_processors.debug',
|
|
'django.template.context_processors.request',
|
|
'django.contrib.auth.context_processors.auth',
|
|
'django.contrib.messages.context_processors.messages',
|
|
],
|
|
},
|
|
},
|
|
]
|
|
|
|
WSGI_APPLICATION = 'blog_prj.wsgi.application'
|
|
|
|
# JWT 설정
|
|
# https://django-rest-framework-simplejwt.readthedocs.io/en/latest/settings.html
|
|
# istio jwt token check
|
|
ISTIO_JWT = os.environ.get("ISTIO_JWT", "0") == "1"
|
|
|
|
if ISTIO_JWT:
|
|
# RS256 모드
|
|
# 운영환경에서 key파일은 POD mount로 적용하는게 안전
|
|
with open(BASE_DIR / "keys/private.pem", "r") as f:
|
|
PRIVATE_KEY = f.read()
|
|
with open(BASE_DIR / "keys/public.pem", "r") as f:
|
|
PUBLIC_KEY = f.read()
|
|
|
|
SIMPLE_JWT = {
|
|
"ALGORITHM": "RS256",
|
|
"VERIFYING_KEY": PUBLIC_KEY,
|
|
"ISSUER": "msa-user",
|
|
"ACCESS_TOKEN_LIFETIME": timedelta(minutes=30),
|
|
"REFRESH_TOKEN_LIFETIME": timedelta(days=1),
|
|
}
|
|
|
|
# Database
|
|
# https://docs.djangoproject.com/en/4.2/ref/settings/#databases
|
|
|
|
DATABASES = {
|
|
"default": {
|
|
'ENGINE': os.environ.get('SQL_ENGINE', 'django.db.backends.sqlite3'),
|
|
'NAME': os.environ.get('SQL_DATABASE', BASE_DIR / 'db.sqlite3'),
|
|
'USER': os.environ.get('SQL_USER', 'user'),
|
|
'PASSWORD': os.environ.get('SQL_PASSWORD', 'password'),
|
|
'HOST': os.environ.get('SQL_HOST', 'localhost'),
|
|
'PORT': os.environ.get('SQL_PORT', '3306'),
|
|
}
|
|
}
|
|
|
|
|
|
# Password validation
|
|
# https://docs.djangoproject.com/en/4.2/ref/settings/#auth-password-validators
|
|
|
|
AUTH_PASSWORD_VALIDATORS = [
|
|
{
|
|
'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
|
|
},
|
|
{
|
|
'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
|
|
},
|
|
{
|
|
'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
|
|
},
|
|
{
|
|
'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
|
|
},
|
|
]
|
|
|
|
|
|
# Internationalization
|
|
# https://docs.djangoproject.com/en/4.2/topics/i18n/
|
|
|
|
LANGUAGE_CODE = 'en-us'
|
|
|
|
TIME_ZONE = 'UTC'
|
|
|
|
USE_I18N = True
|
|
|
|
USE_TZ = True
|
|
|
|
|
|
# Static files (CSS, JavaScript, Images)
|
|
# https://docs.djangoproject.com/en/4.2/howto/static-files/
|
|
|
|
STATIC_URL = 'static/'
|
|
|
|
# Default primary key field type
|
|
# https://docs.djangoproject.com/en/4.2/ref/settings/#default-auto-field
|
|
|
|
DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
|
|
|
|
# MinIO (S3 호환) 스토리지 설정
|
|
MINIO_ENDPOINT = os.environ.get('MINIO_ENDPOINT', 'minio.icurfer.com:9000')
|
|
MINIO_ACCESS_KEY = os.environ.get('MINIO_ACCESS_KEY', '')
|
|
MINIO_SECRET_KEY = os.environ.get('MINIO_SECRET_KEY', '')
|
|
MINIO_BUCKET = os.environ.get('MINIO_BUCKET', 'icurfer.com-posts')
|
|
MINIO_USE_SSL = os.environ.get('MINIO_USE_SSL', '1') == '1'
|
|
|
|
# django-storages S3 설정 (MinIO 호환)
|
|
DEFAULT_FILE_STORAGE = 'storages.backends.s3boto3.S3Boto3Storage'
|
|
|
|
AWS_ACCESS_KEY_ID = MINIO_ACCESS_KEY
|
|
AWS_SECRET_ACCESS_KEY = MINIO_SECRET_KEY
|
|
AWS_STORAGE_BUCKET_NAME = MINIO_BUCKET
|
|
AWS_S3_ENDPOINT_URL = f"{'https' if MINIO_USE_SSL else 'http'}://{MINIO_ENDPOINT}"
|
|
AWS_S3_USE_SSL = MINIO_USE_SSL
|
|
AWS_S3_VERIFY = MINIO_USE_SSL
|
|
AWS_DEFAULT_ACL = None
|
|
AWS_S3_FILE_OVERWRITE = False
|
|
AWS_QUERYSTRING_AUTH = True
|
|
AWS_S3_SIGNATURE_VERSION = 's3v4'
|
|
AWS_S3_REGION_NAME = os.environ.get('MINIO_REGION_NAME', 'ap-northeast-2')
|
|
|
|
# 최대 업로드 파일 크기 (10MB)
|
|
DATA_UPLOAD_MAX_MEMORY_SIZE = 10 * 1024 * 1024
|
|
FILE_UPLOAD_MAX_MEMORY_SIZE = 10 * 1024 * 1024
|