""" CODH Platform - Enterprise Settings Powered by 2SIMPLIFIED GROUP Secured by 2S-TASKFORCE """ import os from pathlib import Path from datetime import timedelta from dotenv import load_dotenv load_dotenv() # Build paths inside the project BASE_DIR = Path(__file__).resolve().parent.parent # ============================================================================= # SECURITY SETTINGS # ============================================================================= SECRET_KEY = os.getenv('DJANGO_SECRET_KEY', 'change-me-in-production') DEBUG = os.getenv('DEBUG', 'False').lower() == 'true' ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS', '*').split(',') # Installation mode - critical for Setup Wizard INSTALLATION_MODE = os.getenv('INSTALLATION_MODE', 'True').lower() == 'true' # ============================================================================= # APPLICATION DEFINITION # ============================================================================= DJANGO_APPS = [ 'django.contrib.admin', 'django.contrib.auth', 'django.contrib.contenttypes', 'django.contrib.sessions', 'django.contrib.messages', 'django.contrib.staticfiles', ] THIRD_PARTY_APPS = [ 'rest_framework', 'rest_framework_simplejwt', 'corsheaders', 'django_filters', 'django_celery_beat', 'django_celery_results', ] LOCAL_APPS = [ 'apps.users', 'apps.projects', 'apps.hosting', 'apps.subscriptions', 'apps.payments', 'apps.ai_engine', 'apps.wordpress', 'apps.deployments', 'apps.analytics', 'apps.notifications', 'codh_core', ] INSTALLED_APPS = DJANGO_APPS + THIRD_PARTY_APPS + LOCAL_APPS MIDDLEWARE = [ 'corsheaders.middleware.CorsMiddleware', 'django.middleware.security.SecurityMiddleware', 'whitenoise.middleware.WhiteNoiseMiddleware', 'django.contrib.sessions.middleware.SessionMiddleware', 'django.middleware.common.CommonMiddleware', 'django.middleware.csrf.CsrfViewMiddleware', 'django.contrib.auth.middleware.AuthenticationMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.middleware.clickjacking.XFrameOptionsMiddleware', 'codh_core.middleware.InstallationMiddleware', 'codh_core.middleware.SecurityHeadersMiddleware', 'codh_core.middleware.AuditLogMiddleware', ] ROOT_URLCONF = 'config.urls' TEMPLATES = [ { 'BACKEND': 'django.template.backends.django.DjangoTemplates', 'DIRS': [BASE_DIR / 'templates'], 'APP_DIRS': True, 'OPTIONS': { 'context_processors': [ 'django.template.context_processors.debug', 'django.template.context_processors.request', 'django.contrib.auth.context_processors.auth', 'django.contrib.messages.context_processors.messages', ], }, }, ] WSGI_APPLICATION = 'config.wsgi.application' # ============================================================================= # DATABASE CONFIGURATION # ============================================================================= DATABASES = { 'default': { 'ENGINE': 'django.db.backends.mysql', 'NAME': os.getenv('DB_NAME', 'codh_platform'), 'USER': os.getenv('DB_USER', 'codh_user'), 'PASSWORD': os.getenv('DB_PASSWORD', ''), 'HOST': os.getenv('DB_HOST', 'localhost'), 'PORT': os.getenv('DB_PORT', '3306'), 'OPTIONS': { 'charset': 'utf8mb4', 'init_command': "SET sql_mode='STRICT_TRANS_TABLES'", }, } } # ============================================================================= # CACHE CONFIGURATION (Redis) # ============================================================================= CACHES = { 'default': { 'BACKEND': 'django_redis.cache.RedisCache', 'LOCATION': os.getenv('REDIS_URL', 'redis://localhost:6379/1'), 'OPTIONS': { 'CLIENT_CLASS': 'django_redis.client.DefaultClient', } } } # ============================================================================= # CELERY CONFIGURATION # ============================================================================= CELERY_BROKER_URL = os.getenv('CELERY_BROKER_URL', 'redis://localhost:6379/0') CELERY_RESULT_BACKEND = os.getenv('CELERY_RESULT_BACKEND', 'redis://localhost:6379/0') CELERY_ACCEPT_CONTENT = ['json'] CELERY_TASK_SERIALIZER = 'json' CELERY_RESULT_SERIALIZER = 'json' CELERY_TIMEZONE = 'UTC' CELERY_BEAT_SCHEDULER = 'django_celery_beat.schedulers:DatabaseScheduler' # ============================================================================= # PASSWORD VALIDATION # ============================================================================= AUTH_PASSWORD_VALIDATORS = [ { 'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator', }, { 'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator', 'OPTIONS': {'min_length': 12} }, { 'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator', }, { 'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator', }, ] # ============================================================================= # INTERNATIONALIZATION # ============================================================================= LANGUAGE_CODE = 'en-us' TIME_ZONE = 'UTC' USE_I18N = True USE_TZ = True # ============================================================================= # STATIC & MEDIA FILES # ============================================================================= STATIC_URL = '/static/' STATIC_ROOT = BASE_DIR / 'staticfiles' STATICFILES_STORAGE = 'whitenoise.storage.CompressedManifestStaticFilesStorage' MEDIA_URL = '/media/' MEDIA_ROOT = BASE_DIR / 'media' # ============================================================================= # DEFAULT PRIMARY KEY FIELD TYPE # ============================================================================= DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField' # ============================================================================= # REST FRAMEWORK CONFIGURATION # ============================================================================= REST_FRAMEWORK = { 'DEFAULT_AUTHENTICATION_CLASSES': [ 'rest_framework_simplejwt.authentication.JWTAuthentication', 'rest_framework.authentication.SessionAuthentication', ], 'DEFAULT_PERMISSION_CLASSES': [ 'rest_framework.permissions.IsAuthenticated', ], 'DEFAULT_PAGINATION_CLASS': 'rest_framework.pagination.PageNumberPagination', 'PAGE_SIZE': 20, 'DEFAULT_FILTER_BACKENDS': [ 'django_filters.rest_framework.DjangoFilterBackend', 'rest_framework.filters.SearchFilter', 'rest_framework.filters.OrderingFilter', ], 'DEFAULT_THROTTLE_CLASSES': [ 'rest_framework.throttling.AnonRateThrottle', 'rest_framework.throttling.UserRateThrottle' ], 'DEFAULT_THROTTLE_RATES': { 'anon': '100/hour', 'user': '1000/hour' } } # ============================================================================= # JWT CONFIGURATION # ============================================================================= SIMPLE_JWT = { 'ACCESS_TOKEN_LIFETIME': timedelta(minutes=60), 'REFRESH_TOKEN_LIFETIME': timedelta(days=7), 'ROTATE_REFRESH_TOKENS': True, 'BLACKLIST_AFTER_ROTATION': True, 'ALGORITHM': 'HS256', 'SIGNING_KEY': SECRET_KEY, 'VERIFYING_KEY': None, 'AUTH_HEADER_TYPES': ('Bearer',), 'USER_ID_FIELD': 'id', 'USER_ID_CLAIM': 'user_id', } # ============================================================================= # CORS CONFIGURATION # ============================================================================= CORS_ALLOW_ALL_ORIGINS = DEBUG CORS_ALLOWED_ORIGINS = os.getenv('CORS_ALLOWED_ORIGINS', 'http://localhost:3000,http://localhost:8080').split(',') CORS_ALLOW_CREDENTIALS = True # ============================================================================= # CUSTOM USER MODEL # ============================================================================= AUTH_USER_MODEL = 'users.User' # ============================================================================= # API CONFIGURATION # ============================================================================= # KIMI AI API KIMI_API_KEY = os.getenv('KIMI_API_KEY', '') KIMI_API_BASE = os.getenv('KIMI_API_BASE', 'https://api.moonshot.cn/v1') # MOFH API (MyOwnFreeHost) MOFH_API_KEY = os.getenv('MOFH_API_KEY', '') MOFH_API_USERNAME = os.getenv('MOFH_API_USERNAME', '') MOFH_API_PASSWORD = os.getenv('MOFH_API_PASSWORD', '') MOFH_API_ENDPOINT = os.getenv('MOFH_API_ENDPOINT', 'https://panel.myownfreehost.net/xmlapi/') # VPS.TC API VPSTC_API_KEY = os.getenv('VPSTC_API_KEY', '') VPSTC_API_ENDPOINT = os.getenv('VPSTC_API_ENDPOINT', 'https://api.vps.tc/') # Payment Gateways PAYSTACK_SECRET_KEY = os.getenv('PAYSTACK_SECRET_KEY', '') PAYSTACK_PUBLIC_KEY = os.getenv('PAYSTACK_PUBLIC_KEY', '') FLUTTERWAVE_SECRET_KEY = os.getenv('FLUTTERWAVE_SECRET_KEY', '') FLUTTERWAVE_PUBLIC_KEY = os.getenv('FLUTTERWAVE_PUBLIC_KEY', '') STRIPE_SECRET_KEY = os.getenv('STRIPE_SECRET_KEY', '') STRIPE_PUBLIC_KEY = os.getenv('STRIPE_PUBLIC_KEY', '') # ============================================================================= # SECURITY HEADERS # ============================================================================= SECURE_BROWSER_XSS_FILTER = True SECURE_CONTENT_TYPE_NOSNIFF = True X_FRAME_OPTIONS = 'DENY' SECURE_SSL_REDIRECT = not DEBUG SESSION_COOKIE_SECURE = not DEBUG CSRF_COOKIE_SECURE = not DEBUG SESSION_COOKIE_HTTPONLY = True CSRF_COOKIE_HTTPONLY = True # ============================================================================= # LOGGING CONFIGURATION # ============================================================================= LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'formatters': { 'verbose': { 'format': '{levelname} {asctime} {module} {process:d} {thread:d} {message}', 'style': '{', }, 'simple': { 'format': '{levelname} {message}', 'style': '{', }, }, 'handlers': { 'file': { 'level': 'INFO', 'class': 'logging.FileHandler', 'filename': BASE_DIR / 'logs' / 'django.log', 'formatter': 'verbose', }, 'console': { 'level': 'INFO', 'class': 'logging.StreamHandler', 'formatter': 'simple', }, }, 'root': { 'handlers': ['console', 'file'], 'level': 'INFO', }, 'loggers': { 'django': { 'handlers': ['console', 'file'], 'level': 'INFO', 'propagate': False, }, 'codh': { 'handlers': ['console', 'file'], 'level': 'INFO', 'propagate': False, }, }, } # ============================================================================= # PLATFORM CONFIGURATION # ============================================================================= PLATFORM_NAME = 'CODH Project DNA Collection Wizard' PLATFORM_VERSION = '1.0.0' PLATFORM_COMPANY = '2SIMPLIFIED GROUP' PLATFORM_SECURITY = '2S-TASKFORCE' PLATFORM_CURRENCY = os.getenv('PLATFORM_CURRENCY', 'USD') PLATFORM_TIMEZONE = os.getenv('PLATFORM_TIMEZONE', 'UTC') # ============================================================================= # EMAIL CONFIGURATION # ============================================================================= EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend' EMAIL_HOST = os.getenv('EMAIL_HOST', 'smtp.gmail.com') EMAIL_PORT = int(os.getenv('EMAIL_PORT', '587')) EMAIL_USE_TLS = os.getenv('EMAIL_USE_TLS', 'True').lower() == 'true' EMAIL_HOST_USER = os.getenv('EMAIL_HOST_USER', '') EMAIL_HOST_PASSWORD = os.getenv('EMAIL_HOST_PASSWORD', '') DEFAULT_FROM_EMAIL = os.getenv('DEFAULT_FROM_EMAIL', 'noreply@codh.platform') # ============================================================================= # SENTRY CONFIGURATION (Production Error Tracking) # ============================================================================= SENTRY_DSN = os.getenv('SENTRY_DSN', '') if SENTRY_DSN and not DEBUG: import sentry_sdk from sentry_sdk.integrations.django import DjangoIntegration sentry_sdk.init( dsn=SENTRY_DSN, integrations=[DjangoIntegration()], traces_sample_rate=0.1, send_default_pii=True )