import os from pathlib import Path from dotenv import load_dotenv BASE_DIR = Path(__file__).resolve().parent.parent load_dotenv(dotenv_path=BASE_DIR / './.env') BASE_URL = os.environ.get("BASE_URL") MEDIA_URL = '/media/' MEDIA_ROOT = os.environ.get("MEDIA_ROOT") # MEDIA_ROOT = '/root/tripwb/uploads/' -- закинь в .env.production SECRET_KEY = os.environ.get("SECRET_KEY") DEBUG = os.environ.get("DEBUG_MODE") ALLOWED_HOSTS = ['localhost', 'tripwb.com', '127.0.0.1', 'tripwb-backend-app', 'v2.tripwb.com'] CSRF_TRUSTED_ORIGINS = [ 'https://tripwb.com', 'http://localhost:3000', 'https://v2.triwp.com', ] INSTALLED_APPS = [ 'django.contrib.admin', 'django.contrib.auth', 'django.contrib.contenttypes', 'django.contrib.sessions', 'django.contrib.messages', 'django.contrib.staticfiles', 'api.apps.ApiConfig', 'routes.apps.RoutesConfig', 'sitemanagement.apps.SitemanagementConfig', 'rest_framework', ] MIDDLEWARE = [ 'django.middleware.security.SecurityMiddleware', 'django.contrib.sessions.middleware.SessionMiddleware', 'django.middleware.common.CommonMiddleware', 'django.middleware.csrf.CsrfViewMiddleware', 'django.contrib.auth.middleware.AuthenticationMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.middleware.clickjacking.XFrameOptionsMiddleware', ] ROOT_URLCONF = 'base.urls' TEMPLATES = [ { 'BACKEND': 'django.template.backends.django.DjangoTemplates', 'DIRS': [], 'APP_DIRS': True, 'OPTIONS': { 'context_processors': [ 'django.template.context_processors.request', 'django.contrib.auth.context_processors.auth', 'django.contrib.messages.context_processors.messages', ], }, }, ] WSGI_APPLICATION = 'base.wsgi.application' DATABASES = { "default": { "ENGINE": "django.db.backends.postgresql", "NAME": os.environ.get("DB_NAME"), "USER": os.environ.get("DB_USER"), "PASSWORD": os.environ.get("DB_PASSWORD"), "HOST": os.environ.get("DB_HOST"), "PORT": os.environ.get("DB_PORT"), } } BOT_TOKEN = os.environ.get("BOT_TOKEN") CHAT_ID = os.environ.get("CHAT_ID") CORS_ALLOW_CREDENTIALS = True # для разрешения cookie CORS_ALLOWED_ORIGINS = [ "http://localhost:3000", "https://tripwb.com", "https://v2.tripwb.com", ] CORS_ALLOW_METHODS = [ "GET", "POST", "HEAD", "PUT", "DELETE", "OPTIONS", "PATCH" ] CORS_ALLOW_ALL_ORIGINS = False # запрет всех доменов, кроме whitelist CORS_ALLOW_HEADERS = [ 'x-api-key', 'content-type', 'authorization', 'accept', 'cookie' ] AUTH_PASSWORD_VALIDATORS = [ {'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',}, {'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',}, {'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',}, {'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',}, ] LANGUAGE_CODE = 'en-us' TIME_ZONE = 'Europe/Minsk' USE_TZ = True USE_I18N = True USE_L10N = True STATIC_URL = 'static/' DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'