Claude
d8558eca89
Introduce timetracker/config.py with a single config() helper that resolves settings from a fixed priority chain: NAME__FILE (opt-in secret) -> env var -> .env -> settings.ini -> in-code default. Supports type casting (bool/list/int/Path), file-based secrets with .strip(), and required_in_prod validation. Migrate settings.py off the previous ad-hoc idioms: - DEBUG via config() (PROD kept as deprecated alias) - SECRET_KEY required in prod, supports SECRET_KEY__FILE - APP_URL derives ALLOWED_HOSTS and CSRF_TRUSTED_ORIGINS (kept separate, each independently overridable); ALLOWED_HOSTS is now configurable - TZ and DATA_DIR via config() Fix DATA_DIR inconsistency: entrypoint.sh now reads DATA_DIR (was hardcoded) so the bash bootstrap and Django agree on the database directory. Document the container/entrypoint-only flags (PUID/PGID/ CREATE_DEFAULT_SUPERUSER/STAGING/LOAD_SAMPLE_DATA) as bash concerns. Update deployment configs to set APP_URL (and DEBUG), add docs/configuration.md, settings.ini.example, regrouped .env.example, CLAUDE.md, and tests. https://claude.ai/code/session_01FFn8BiGrQpEJarC8xGse8s
21 lines
591 B
YAML
21 lines
591 B
YAML
---
|
|
services:
|
|
timetracker:
|
|
image: registry.kucharczyk.xyz/timetracker
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
container_name: timetracker
|
|
environment:
|
|
- DEBUG=false
|
|
- TZ=Europe/Prague
|
|
# APP_URL drives ALLOWED_HOSTS and CSRF_TRUSTED_ORIGINS unless overridden.
|
|
# Behind your own reverse proxy you may also set ALLOWED_HOSTS=* directly.
|
|
- APP_URL=https://tracker.kucharczyk.xyz
|
|
user: "1000"
|
|
# volumes:
|
|
# - "db:/home/timetracker/app/src/timetracker/db.sqlite3"
|
|
ports:
|
|
- "8000:8000"
|
|
restart: unless-stopped
|