* add whitenoise middleware to serve static files

* move more local/env-dependent settings from settings.py to
settings.ini or env-vars
* add an example for settings.ini

Author: Application Deployment

masterdata_checker/checker/settings.ini.example

@@ -0,0 +1,7 @@
+[settings]
+DEBUG=False
+SECRET_KEY=django-insecure-wiq2-hvjf4#jgoq-&#rg!)hw*(wa9l9^&cgcohq8k6ihitx9f#
+SECRET_ENCRYPTION_KEY=x1_JDNmuikh7MQFzIQJFvmJDFbeOsacJRvvvwq3xv6a=
+ALLOWED_HOSTS = 127.0.0.1, localhost
+CSRF_TRUSTED_ORIGINS = https://mdc.domain.local
+

masterdata_checker/checker/settings.py

@@ -30,9 +30,9 @@
 OPENBIS_URL = "https://main.datastore.bam.de/"
 
 # SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = False
+DEBUG = environ("DEBUG", default=False)
 
-ALLOWED_HOSTS = ["localhost", "127.0.0.1", "141.63.249.193", "141.63.249.2"]
+ALLOWED_HOSTS = environ("ALLOWED_HOSTS", default=['127.0.0.1', 'localhost'], cast=lambda v: [s.strip() for s in v.split(',')])
 
 CACHES = {
     "default": {
@@ -55,6 +55,7 @@
 
 MIDDLEWARE = [
     "django.middleware.security.SecurityMiddleware",
+    "whitenoise.middleware.WhiteNoiseMiddleware",
     "django.contrib.sessions.middleware.SessionMiddleware",
     "django.middleware.common.CommonMiddleware",
     "django.middleware.csrf.CsrfViewMiddleware",
@@ -63,7 +64,7 @@
     "django.middleware.clickjacking.XFrameOptionsMiddleware",
 ]
 
-CSRF_TRUSTED_ORIGINS = ["http://141.63.249.193:8000"]
+CSRF_TRUSTED_ORIGINS = environ("CSRF_TRUSTED_ORIGINS", default=[], cast=lambda v: [s.strip() for s in v.split(',')])
 
 ROOT_URLCONF = "checker.urls"
 
@@ -148,6 +149,7 @@
 
 STATIC_URL = "/static/"
 STATICFILES_DIRS = [BASE_DIR / "app/static"]
+STATIC_ROOT = STATICFILES_DIRS[0]
 
 # Default primary key field type
 # https://docs.djangoproject.com/en/5.1/ref/settings/#default-auto-field

pyproject.toml

@@ -30,6 +30,7 @@ license = { file = "LICENSE" }
 dependencies = [
   "bam-masterdata>=0.4.2",
   "django",
+  "whitenoise",
   "pybis~=1.37.1rc4",
   "cryptography>=45.0.2",
   "python-decouple",
@@ -130,4 +131,4 @@ where = ["."]
 namespaces = false
 
 [tool.setuptools_scm]
-write_to = "masterdata_checker/_version.py"
+write_to = "masterdata_checker/_version.py"