setup for production

.dockerignore

@@ -0,0 +1,15 @@
+__pycache__
+*.pyc
+*.pyo
+*.pyd
+*.db
+*.log
+*.sqlite3
+*.venv
+.env
+*.git
+.git/
+docker-compose.yml
+Dockerfile
+.idea/
+.vscode/

DockerFile

@@ -0,0 +1,7 @@
+FROM python:3.11-slim
+WORKDIR /app
+COPY requirements.txt requirements.txt
+RUN pip install --no-cache-dir -r requirements.txt
+COPY . .
+EXPOSE 8001
+CMD ["gunicorn", "--bind", "0.0.0.0:8000", "StockSeeker.wsgi:application"]

StockSeeker/settings.py

@@ -12,6 +12,7 @@ https://docs.djangoproject.com/en/5.1/ref/settings/
 from pathlib import Path
 from datetime import timedelta
 from decouple import config
+import os
 
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
 BASE_DIR = Path(__file__).resolve().parent.parent
@@ -20,12 +21,15 @@ BASE_DIR = Path(__file__).resolve().parent.parent
 # See https://docs.djangoproject.com/en/5.1/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = config('SECRET_KEY')
+SECRET_KEY = os.environ.get('SECRET_KEY')
 
 # SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = config('DEBUG')
+DEBUG = os.environ.get('DEBUG', '0') == '1'
+
+ALLOWED_HOSTS = os.environ.get('DJANGO_ALLOWED_HOSTS', '127.0.0.1').split(',')
+if '' in ALLOWED_HOSTS:
+    ALLOWED_HOSTS.remove('')
 
-ALLOWED_HOSTS = ['localhost', '127.0.0.1','192.168.1.41']
 
 # Application definition
 
@@ -36,6 +40,7 @@ INSTALLED_APPS = [
     'django.contrib.sessions',
     'django.contrib.messages',
     'django.contrib.staticfiles',
+    'django_extensions',
     'StockSeeker',
     'rest_framework',
     'drf_spectacular',
@@ -81,11 +86,11 @@ WSGI_APPLICATION = 'StockSeeker.wsgi.application'
 DATABASES = {
     'default': {
         'ENGINE': 'django.db.backends.postgresql',
-        'NAME': config('DB_NAME'),
-        'USER': config('DB_USER'),
-        'PASSWORD': config('DB_PASSWORD'),
-        'HOST': config('DB_HOST', default='localhost'),
-        'PORT': config('DB_PORT', default='5432'),
+        'NAME': os.environ.get('DB_NAME', 'postgres'),
+        'USER': os.environ.get('DB_USER', 'postgres'),
+        'PASSWORD': os.environ.get('DB_PASSWORD',''),
+        'HOST': os.environ.get('DB_HOST','db'),
+        'PORT': os.environ.get('DB_PORT','5432'),
     }
 }
 
@@ -142,14 +147,17 @@ SPECTACULAR_SETTINGS = {
     'DESCRIPTION': 'Doc de l’API pour StockSeeker',
     'VERSION': '1.0.0',
 }
-CORS_ALLOWED_ORIGINS = [
-    "http://localhost:5173","http://192.168.1.41:5173","http://192.168.1.41"
-]
+
+CORS_ALLOWED_ORIGINS = os.environ.get("CORS_ALLOWED_ORIGINS", "").split(",")
+if '' in CORS_ALLOWED_ORIGINS:
+    CORS_ALLOWED_ORIGINS.remove('')
+
 CORS_ALLOW_CREDENTIALS = True
-CSRF_COOKIE_SECURE = False
-CSRF_COOKIE_SAMESITE = "None"
+CSRF_COOKIE_SECURE = True
+CSRF_COOKIE_SAMESITE = "Lax"
 SIMPLE_JWT = {
     'ACCESS_TOKEN_LIFETIME': timedelta(days=1),
     'REFRESH_TOKEN_LIFETIME': timedelta(days=1),
     'ROTATE_REFRESH_TOKENS': True,
-    'BLACKLIST_AFTER_ROTATION': True,}
+    'BLACKLIST_AFTER_ROTATION': True,
+    }

StockSeeker/urls.py

@@ -6,7 +6,6 @@ from . import views
 from rest_framework_simplejwt.views import *
 from drf_spectacular.views import SpectacularAPIView
 
-##juge pas les noms d'acces OK ?##
 
 router = routers.DefaultRouter()
 router.register(r'products', ProductView, basename='product')

docker-compose.yml

@@ -0,0 +1,29 @@
+version: '3'
+
+services:
+  backend:
+    build: .
+    command: gunicorn --bind 0.0.0.0:8001 StockSeeker.wsgi:application
+    volumes:
+      - .:/app
+    ports:
+      - "8001:8000"
+    depends_on:
+      - stockseeker_db
+    environment:
+      - DB_HOST=${DB_HOST}
+      - DB_NAME=${DB_NAME}
+      - DB_USER=${DB_USER}
+      - DB_PASSWORD=${DB_PASSWORD}
+
+  stockseeker_db:
+    image: postgres:latest
+    environment:
+      POSTGRES_DB: ${DB_NAME}
+      POSTGRES_USER: ${DB_USER}
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+
+volumes:
+  postgres_data:

docs/Doc API Django REST.md

@@ -0,0 +1,2 @@
+# Documentation de l'API Django REST
+## 1. Schéma de la base de données