Updated deployment configurations (#467)

* Updated deployment configurations

* fixed django default settings,allowed hosts, static vars

* removed blank space from settings.py

* updated debug value to non-numeric

Author: del9ra

app/.env.docker-example

@@ -1,4 +1,4 @@
-DEBUG=1
+DEBUG=True
 SECRET_KEY=foo
 DJANGO_PORT=8000
 DJANGO_ALLOWED_HOSTS="localhost 127.0.0.1 [::1]"

app/.env.prod.sample

@@ -0,0 +1,24 @@
+DEBUG=False
+SECRET_KEY=kRhCJWSm4faOlwR1FhFO9nFZkiov8CNGZNgvGfjuJjXCXLHBlswKJOWmFHgczzrU6l0
+DJANGO_PORT=8000
+DJANGO_ALLOWED_HOSTS="*"
+
+SECURE_HSTS_SECONDS=31536000
+SECURE_HSTS_INCLUDE_SUBDOMAINS=True
+SECURE_HSTS_PRELOAD=True
+SECURE_SSL_REDIRECT=True
+SESSION_COOKIE_SECURE=True
+CSRF_COOKIE_SECURE=True
+
+
+SQL_USER=people_depot
+SQL_PASSWORD=people_depot
+SQL_DATABASE=people_depot_dev
+SQL_ENGINE=django.db.backends.postgresql
+SQL_HOST=db
+SQL_PORT=5432
+DATABASE=postgres
+
+COGNITO_DOMAIN=peopledepot
+COGNITO_AWS_REGION=us-west-2
+COGNITO_USER_POOL=us-west-2_Fn4rkZpuB

app/peopledepot/settings.py

@@ -23,19 +23,30 @@
 # See https://docs.djangoproject.com/en/4.0/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = os.environ.get("SECRET_KEY")
+SECRET_KEY = os.environ.get("SECRET_KEY", "default-secret-key")
 
 DJANGO_SUPERUSER_USERNAME = os.environ.get("DJANGO_SUPERUSER_USERNAME")
 DJANGO_SUPERUSER_EMAIL = os.environ.get("DJANGO_SUPERUSER_EMAIL")
 DJANGO_SUPERUSER_PASSWORD = os.environ.get("DJANGO_SUPERUSER_PASSWORD")
 
 # SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = os.environ.get("DEBUG", default=0)
+DEBUG = os.environ.get("DEBUG", "True") == "True"
 
 # 'DJANGO_ALLOWED_HOSTS' should be a single string of hosts with a space between each.
 # For example: 'DJANGO_ALLOWED_HOSTS=localhost 127.0.0.1 [::1]'
 ALLOWED_HOSTS = os.environ.get("DJANGO_ALLOWED_HOSTS").split(" ")
 
+
+SECURE_HSTS_SECONDS = int(os.getenv("SECURE_HSTS_SECONDS", "0"))
+SECURE_HSTS_INCLUDE_SUBDOMAINS = (
+    os.getenv("SECURE_HSTS_INCLUDE_SUBDOMAINS", "False") == "True"
+)
+SECURE_HSTS_PRELOAD = os.getenv("SECURE_HSTS_PRELOAD", "False") == "True"
+SECURE_SSL_REDIRECT = os.getenv("SECURE_SSL_REDIRECT", "False") == "True"
+SESSION_COOKIE_SECURE = os.getenv("SESSION_COOKIE_SECURE", "False") == "True"
+CSRF_COOKIE_SECURE = os.getenv("CSRF_COOKIE_SECURE", "False") == "True"
+
+
 # Cognito stuff
 COGNITO_AWS_REGION = os.environ.get("COGNITO_AWS_REGION", default=None)
 COGNITO_USER_POOL = os.environ.get("COGNITO_USER_POOL", default=None)