- Django 5.2 + PostgreSQL 17 via docker compose (app + db, volumes, healthcheck on /healthz, test profile running pytest against Postgres) - Custom e-mail user model with user/admin roles - Invitation-only registration with single-use, hashed, expiring links - Admin area: invitations, role changes, deactivation, password reset via one-time link or temporary password (forced change on login) - First admin created from ADMIN_EMAIL/ADMIN_PASSWORD on startup - Login rate limiting per e-mail and IP (DB-backed, worker-safe) - Proxy middleware honouring X-Forwarded-* only from TRUSTED_PROXIES, optional CLIENT_IP_HEADER (e.g. CF-Connecting-IP) - Security headers (CSP, HSTS, Permissions-Policy), secure __Host- cookies - Mobile-first German UI, CLAUDE.md, README, init-env script - 65 tests for auth, permissions, proxy handling and rate limiting Co-Authored-By: Claude Opus 5.5 <[email protected]>
25 lines
967 B
Python
25 lines
967 B
Python
"""Local development server without Docker (SQLite, plain HTTP). Not for production."""
|
|
|
|
import os
|
|
import sys
|
|
from pathlib import Path
|
|
|
|
ROOT = Path(__file__).resolve().parent.parent
|
|
sys.path.insert(0, str(ROOT))
|
|
os.chdir(ROOT)
|
|
|
|
os.environ.setdefault("DJANGO_SETTINGS_MODULE", "config.settings")
|
|
os.environ.setdefault("DEBUG", "true")
|
|
os.environ.setdefault("SECRET_KEY", "dev-only-secret-key")
|
|
os.environ.setdefault("APP_BASE_URL", "http://localhost:8000")
|
|
os.environ.setdefault("COOKIE_SECURE", "false")
|
|
os.environ.setdefault("ADMIN_EMAIL", "[email protected]")
|
|
os.environ.setdefault("ADMIN_PASSWORD", "Dev-Admin-Passwort-1")
|
|
os.environ.setdefault("ADMIN_NAME", "Dev-Admin")
|
|
|
|
from django.core.management import execute_from_command_line # noqa: E402
|
|
|
|
execute_from_command_line(["manage.py", "migrate", "--noinput"])
|
|
execute_from_command_line(["manage.py", "ensure_admin"])
|
|
execute_from_command_line(["manage.py", "runserver", "127.0.0.1:8000", "--noreload"])
|