iac/apps/eav/ugok/django-configmap.yaml

---
# Скопировано из живого ConfigMap кластера ugok (namespace eav) —
# монтируется backend'ом в /server/config/settings/production.py.
apiVersion: v1
kind: ConfigMap
metadata:
  name: django-configmap
  namespace: eav
data:
  production.py: |
    # production.py

    from .base import *
    from datetime import timedelta
    import os
    from django.core.exceptions import ImproperlyConfigured

    INSTALLED_APPS.append("corsheaders")
    MIDDLEWARE = ["corsheaders.middleware.CorsMiddleware"] + MIDDLEWARE

    # DEBUG SETTINGS START
    # ---

    DEBUG = True
    ALLOWED_HOSTS = ['*']
    # ---

    # DEBUG SETTINGS END

    # DATABASE SETTINGS START
    # ---

    DATABASES = {
        "default": {
            "ENGINE": "django.db.backends.postgresql",
            "NAME": os.getenv("DJANGO_POSTGRES_DATABASE"),
            "USER": os.getenv("DJANGO_POSTGRES_USER"),
            "PASSWORD": os.getenv("DJANGO_POSTGRES_PASSWORD"),
            "HOST": os.getenv("DJANGO_POSTGRES_HOST"),
            "PORT": "5432",
        }
    }
    # ---

    # DATABASE SETTINGS END

    # RESPONSE HEADERS START
    # ---

    CORS_ORIGIN_ALLOW_ALL = True

    CORS_ALLOWED_ORIGINS = [
        "http://sarex.ugok.lan","https://sarex.ugok.lan"
    ]

    CORS_TRUSTED_ORIGINS = [
        "http://sarex.ugok.lan","https://sarex.ugok.lan"
    ]

    CSRF_TRUSTED_ORIGINS = [
        "http://sarex.ugok.lan","https://sarex.ugok.lan"
    ]

    CORS_ALLOW_METHODS = (
        'DELETE',
        'GET',
        'OPTIONS',
        'PATCH',
        'POST',
        'PUT',
    )

    CORS_ALLOW_HEADERS = (
        'accept',
        'accept-encoding',
        'authorization',
        'content-type',
        'user-agent',
        'x-csrftoken',
        'x-requested-with',
        'x-token',
        'Bearer'
    )
    # ---

    # RESPONSE HEADERS END

    REST_FRAMEWORK = {
        "DEFAULT_PAGINATION_CLASS": (
            "rest_framework.pagination.LimitOffsetPagination"
        ),
        "DEFAULT_SCHEMA_CLASS": "rest_framework.schemas.coreapi.AutoSchema",
        "PAGE_SIZE": 10000,
        "DEFAULT_FILTER_BACKENDS": [
            "django_filters.rest_framework.DjangoFilterBackend"
        ],
        "DEFAULT_AUTHENTICATION_CLASSES": [
            # "rest_framework_simplejwt.authentication.JWTAuthentication",
            "rest_framework.authentication.SessionAuthentication",
            "rest_framework.authentication.BasicAuthentication",
        ],
        "DEFAULT_PERMISSION_CLASSES": [
            "rest_framework.permissions.AllowAny",
        ]
    }

    # JWT SETTINGS START
    # ---

    def get_env_variable(var_name, default=None):
        try:
            return os.getenv(var_name, default)
        except KeyError:
            error_msg = f"Set the {var_name} environment variable"
            if default:
                return default
            raise ImproperlyConfigured(error_msg)

    SIMPLE_JWT_ISSUER = get_env_variable("SIMPLE_JWT_ISSUER", default="django")

    SIMPLE_JWT = {
        "ACCESS_TOKEN_LIFETIME": timedelta(minutes=5),
        "REFRESH_TOKEN_LIFETIME": timedelta(days=1),
        "ROTATE_REFRESH_TOKENS": False,
        "UPDATE_LAST_LOGIN": False,

        "ALGORITHM": "RS512",
        "SIGNING_KEY": get_env_variable("JWT_PRIVATE_KEY").replace("\\\n", "\n"),
        "VERIFYING_KEY": get_env_variable("JWT_PUBLIC_KEY").replace("\\\n", "\n"),
        "AUDIENCE": None,
        "ISSUER": SIMPLE_JWT_ISSUER,

        "AUTH_HEADER_TYPES": ("Bearer",),
        "AUTH_HEADER_NAME": "HTTP_AUTHORIZATION",
        "USER_ID_FIELD": "id",
        "USER_ID_CLAIM": "user_id",

        "AUTH_TOKEN_CLASSES": ("rest_framework_simplejwt.tokens.AccessToken",),
        "TOKEN_TYPE_CLAIM": "token_type",

        "JTI_CLAIM": "jti",

        "SLIDING_TOKEN_REFRESH_EXP_CLAIM": "refresh_exp",
        "SLIDING_TOKEN_LIFETIME": timedelta(minutes=5),
        "SLIDING_TOKEN_REFRESH_LIFETIME": timedelta(days=1),
    }
    # ---

    # JWT SETTINGS END

    STATIC_ROOT = '/static/'
    STATIC_URL = '/static/'
    STATICFILES_STORAGE = 'django.contrib.staticfiles.storage.StaticFilesStorage'

    SESSION_COOKIE_NAME = 'eav-sessionid'
    CSRF_COOKIE_NAME = 'eav-csrftoken'