apiVersion: v1
data:
  production.py: "import os\nfrom .base import *\nfrom logging.handlers import SysLogHandler\nfrom datetime import timedelta\n\nALLOWED_HOSTS = [\"*\"]\nFILE_UPLOAD_PERMISSIONS = 0o644\nDEBUG = False\nCSRF_COOKIE_SECURE = True\nCSRF_TRUSTED_ORIGINS = [\"sarex.vhdm.ru\", \"sarex.asterus.ru\"]\nSESSION_COOKIE_SECURE = True\nSECURE_SSL_REDIRECT = False\n\n# Uncomment and set the environment variables accordingly\n# STATIC_ROOT = os.environ.get('STATIC_ROOT')\n# MEDIA_ROOT = os.environ.get('MEDIA_ROOT')\n# SECRET_KEY = os.environ.get('SECRET_KEY')\nSECRET_KEY = 't2=9+($2f%7ptsdy4!rby$)mcfl1l%o2e@vs^d(g&(wwi&%k1v'\n\nCORS_ORIGIN_ALLOW_ALL = True\nINSTALLED_APPS = list(INSTALLED_APPS) + ['corsheaders']\n\nCORS_ALLOW_METHODS = (\n    'DELETE',\n    'GET',\n    'OPTIONS',\n    'PATCH',\n    'POST',\n    'PUT',\n)\n\nCORS_ALLOW_HEADERS = (\n    'accept',\n    'accept-encoding',\n    'authorization',\n    'content-type',\n    'user-agent',\n    'x-csrftoken',\n    'x-requested-with',\n    'x-token',\n    'Bearer',\n)\n\nHOST = \"https://sarex.asterus.ru\"\n\nPOSTGRES_DATABASE = os.environ.get('DJANGO_POSTGRES_DATABASE')\nPOSTGRES_USER = os.environ.get('DJANGO_POSTGRES_USER')\nPOSTGRES_PASSWORD = os.environ.get('DJANGO_POSTGRES_PASSWORD')\nPOSTGRES_HOST = os.environ.get('DJANGO_POSTGRES_HOST')\nPOSTGRES_PORTS = os.environ.get('DJANGO_POSTGRES_PORTS', \"5432\")\n\nDATABASES = {\n    'default': {\n        'ENGINE': 'django_prometheus.db.backends.postgresql',\n        'NAME': POSTGRES_DATABASE,\n        'USER': POSTGRES_USER,\n        'PASSWORD': POSTGRES_PASSWORD,\n        'HOST': POSTGRES_HOST,\n        'PORT': POSTGRES_PORTS,\n    }\n}\n\nLOGGING = {\n    'version': 1,\n    'disable_existing_loggers': False,\n    'filters': {\n        'require_debug_false': {\n            '()': 'django.utils.log.RequireDebugFalse',\n        }\n    },\n    'formatters': {\n        'verbose': {\n            'format': '[contactor] %(levelname)s %(asctime)s %(message)s',\n        },\n    },\n    'handlers': {\n        'console': {\n            'level': 'DEBUG',\n            'class': 'logging.StreamHandler',\n        },\n        'sentry': {\n            'level': 'ERROR',\n            'filters': ['require_debug_false'],\n            'class': 'logging.StreamHandler',\n        },\n    },\n    'loggers': {\n        '': {\n            'handlers': ['console', 'sentry'],\n            'level': 'INFO',\n            'propagate': False,\n        },\n    }\n}\n\nCOMPARATOR_JWT = os.environ.get(\"COMPARATOR_JWT\", \"default_jwt\")\nCOMPARATOR_URL = os.environ.get(\"COMPARATOR_URL\", \"https://lk.brusnika.onprem.sarex.io/comparator\")\nCOMPARATOR_SECTION = os.environ.get(\"COMPARATOR_SECTION\", \"sarex-production-storage\")\n\nSIMPLE_JWT = {\n    'ACCESS_TOKEN_LIFETIME': timedelta(hours=1),        \n    'REFRESH_TOKEN_LIFETIME': timedelta(days=1),\n    'ROTATE_REFRESH_TOKENS': False,\n    'BLACKLIST_AFTER_ROTATION': True,\n    'UPDATE_LAST_LOGIN': False,\n    'ALGORITHM': 'RS512',\n    'SIGNING_KEY': os.environ.get(\"JWT_PRIVATE_KEY\").replace(\"\\\\n\", \"\\n\"),\n    'VERIFYING_KEY': os.environ.get(\"JWT_PUBLIC_KEY\").replace(\"\\\\n\", \"\\n\"),\n    'AUDIENCE': None,\n    'ISSUER': os.environ.get('SIMPLE_JWT_ISSUER', 'default_issuer'),\n    'AUTH_HEADER_TYPES': ('Bearer',),\n    'AUTH_HEADER_NAME': 'HTTP_AUTHORIZATION',\n    'USER_ID_FIELD': 'id',\n    'USER_ID_CLAIM': 'user_id',\n    'AUTH_TOKEN_CLASSES': ('rest_framework_simplejwt.tokens.AccessToken',),\n    'TOKEN_TYPE_CLAIM': 'token_type',\n    'JTI_CLAIM': 'jti',\n    'SLIDING_TOKEN_REFRESH_EXP_CLAIM': 'refresh_exp',\n    'SLIDING_TOKEN_LIFETIME': timedelta(minutes=5),\n    'SLIDING_TOKEN_REFRESH_LIFETIME': timedelta(days=1),\n}\n\nos.environ[\"DJANGO_ALLOW_ASYNC_UNSAFE\"] = \"true\"\nDEFAULT_FILE_STORAGE = 'sarex.core.storages.CustomS3Boto3Storage'\nDATA_UPLOAD_MAX_MEMORY_SIZE = 268435456\n\nif not os.environ.get('ISOLATED', False):\n    import sentry_sdk\n    from sentry_sdk.integrations.django import DjangoIntegration\n\n    sentry_sdk.init(\n        dsn=\"https://3df2f4b8d3d14595a06c92e9d7c562cb@sentry.io/1501541\",\n        integrations=[DjangoIntegration()],\n        environment=os.environ.get('SENTRY_ENVIRONMENT', 'production'),\n        send_default_pii=True,\n    )\n\nCOMPARISON_API_URL = f\"{os.environ.get('WORKFLOWSSETTINGS_HOST')}/comparisons\"\nDOCUMENTATION_API_URL = f\"{os.environ.get('WORKFLOWSSETTINGS_HOST')}/documentations\"\nPDM_FILES_API_URL = f\"{os.environ.get('WORKFLOWSSETTINGS_HOST')}/files\"\n\nWORKFLOWS_TASKS = {\n    \"update_orthomosaic_data\": {\n        \"image\": f\"{os.environ.get('WORKFLOWSSETTINGS_REGISTRY')}/update-orthomosaic-data:dev\",\n        \"service_requests\": [\"django-auth\"],\n        \"backoff_limit\": 3,\n    },\n}\n\nREST_FRAMEWORK = {      'DEFAULT_PAGINATION_CLASS': (\n    'rest_framework.pagination.LimitOffsetPagination'      ),\n    'DEFAULT_SCHEMA_CLASS': 'rest_framework.schemas.coreapi.AutoSchema',\n    'PAGE_SIZE': 1000,      'DEFAULT_FILTER_BACKENDS': [\n    'django_filters.rest_framework.DjangoFilterBackend'      ],\n    'DEFAULT_AUTHENTICATION_CLASSES': [\n    'rest_framework.authentication.RemoteUserAuthentication',\n    'rest_framework_simplejwt.authentication.JWTAuthentication',\n    'rest_framework.authentication.BasicAuthentication',\n    'rest_framework.authentication.SessionAuthentication',\n    'sarex.authentication.backends.JWTAuthentication'      ],\n    'DEFAULT_PERMISSION_CLASSES': [\n    'rest_framework.permissions.IsAuthenticated',      ]  }\n\nAUTHENTICATION_BACKENDS = [\n    'sarex.authentication.backends.CustomRemoteUserBackend',\n    # 'django.contrib.auth.backends.RemoteUserBackend',\n    'django.contrib.auth.backends.ModelBackend',\n    'guardian.backends.ObjectPermissionBackend',\n]\n\nMIDDLEWARE = [\n    'django_prometheus.middleware.PrometheusBeforeMiddleware',\n    'django.middleware.security.SecurityMiddleware',\n    'django.contrib.sessions.middleware.SessionMiddleware',\n    'django.middleware.common.CommonMiddleware',\n    'django.middleware.csrf.CsrfViewMiddleware',\n    'django_keycloak.middlewares.AuthorizationHeaderMiddleware',\n    'django_keycloak.middlewares.KeycloakSessionMiddleware',\n    'django.contrib.auth.middleware.AuthenticationMiddleware',\n    'django.contrib.auth.middleware.RemoteUserMiddleware',\n    'django.contrib.messages.middleware.MessageMiddleware',\n    'django.middleware.clickjacking.XFrameOptionsMiddleware',\n    'django_user_agents.middleware.UserAgentMiddleware',\n    'simple_history.middleware.HistoryRequestMiddleware',\n    'django_prometheus.middleware.PrometheusAfterMiddleware',  ]\n\nclass ADSettings(BaseSettings):\n    bind_DN: str = \"LDAP_keycloak\"\n    ldap_password: str = \"EAjw*U$2\"\n    ldap_host: str = \"ldap://vhdmpdc.vhdm.int\"\n    sizelimit: int = 5000\n    default_company_name: Optional[str] = \"Asterus\"\n    base: str = \"\"\n    group_prefix: str = 'Group'\n    department_prefix: str = 'Department'\n    position_prefix: str = 'Position'\n    separator: str = '-'\n    criteria: str = \"(&(objectCategory=user)(memberOf=CN=KsmgUsersName,OU=Security Groups,DC=vhdm,DC=int))\"\n    staff_group_name: Optional[str] = None\n    superuser_group_name: Optional[str] = None\n    include_staff_data_update: bool = True\n    include_superuser_data_update: bool = True\n    attributes: Dict[str, str] = {\n        \"username\": \"sAMAccountName\",\n        \"name\": \"cn\",\n        \"last_name\": \"sn\",\n        \"first_name\": \"givenName\",\n        \"email\": \"mail\",\n        \"groups\": \"memberOf\"\n    }\n\n    class Config:\n        env_prefix = \"AD_\"\n\nclass KeyCloakSettings(BaseSettings):\n    client_id: str = \"client_id\"\n    client_secret: str = \"client_secret\"\n    discovery_url: str = \"https://kc.asterus.ru/realms/Sarex/.well-known/openid-configuration\"\n    staff: Optional[str] = \"Sarex staff\"\n    delete_cookies_logout: bool = True\n    superuser: Optional[str] = \"Sarex superusers\"\n    username: str = ''\n    password: str = ''\n    keycloak_pagination_size: int = 10\n    base_url: str = 'https://kc.asterus.ru'\n    realm: str = 'Sarex'\n    realm_name: str = 'Sarex'\n    sync_with_django: bool = True\n    sync_admin: bool = False\n    group_prefix: str = 'Sarex-Role'\n    company_prefix: str = 'Sarex-Company'\n    department_prefix: str = 'Sarex-Department'\n    position_prefix: str = 'Sarex-Position'\n    separator: str = '__'\n    sync_user_groups: bool = False\n    sync_user_positions: bool = False\n    sync_user_departments: bool = False\n    sync_user_companies: bool = False\n    default_group_name: Optional[str] = 'Тест'\n    timeout: int = 60\n    default_company_name: Optional[str] = 'Asterus'\n    trusted_uri: List[str] = ['/api/core/orthophotos/', '/api/token', '/api/token/me']\n    trusted_uri: List[str] = []\n    \n    use_redirect_logout: bool = True\n    sso_logout_redirect: bool = True\n    logout_redirect_uri: str = \"/\"\n\n    class Config:\n        env_prefix = \"KC_\"\n\n\nKEYCLOAKSETTINGS = KeyCloakSettings()\n\nREMOTE_USER_DEFAULT_COMPANY_ID = 1\n\nAUTH_SETTINGS = {\n  \"refresh_token\": False,\n  \"refresh_token_uri\": \"/api/token/me\",\n  \"refresh_oauth_token\": False,\n  \"refresh_oauth_token_uri\": \"/oauth/token\",\n  \"refresh_time\": 240,\n}\nCSRF_TRUSTED_ORIGINS = ['https://sarex.vhdm.ru', 'https://sarex.asterus.ru']\nSAREX_MODULES = [\n      #{\n       #   \"name\": \"Съёмки\",\n        #  \"uri\": \"/targets\"\n      #},\n\n      # {\n      #     \"name\": \"Передача документации\", \n      #     \"uri\": \"/transmittal\"\n      # },\n      \n      # {\n      #     \"name\": \"Запросы\",\n      #     \"uri\": \"/rfi\"\n      # },\n\n      {\n          \"name\": \"Управление проектами\",\n          \"uri\": \"/management/projects\",\n      },\n      {\n          \"name\": \"Документация\",\n          \"uri\": \"/documentations\",\n      },\n      {\n          \"name\": \"Замечания\",\n          \"uri\": \"/remarks\"\n      },\n      {\n          \"name\": \"Замечания V2\",\n          \"uri\": \"/issues\"\n      },\n      {\n          \"name\": \"Аналитика\",\n          \"uri\": \"/analytics\"\n      },\n      # {\n      #     \"name\": \"Инспекции\",\n      #     \"uri\": \"/inspections\"\n      # },\n      {\n          \"name\": \"Обзор\",\n          \"uri\": \"/projects\"\n      },\n      {\n          \"name\": \"Согласование документов\",\n          \"uri\": \"/reviews\"\n      },\n      {\n          \"name\": \"Рабочие процессы\",\n          \"uri\": \"/processes\"\n      },\n      # {\n      #     \"name\": \"Договоры\",\n      #     \"uri\": \"/contracts\"\n      # },\n      # {\n      #   \"name\": \"Предписания\",\n      #   \"uri\": \"/prescriptions\"\n      # },\n      # {\n      #   \"name\": \"Справочники\",\n      #   \"uri\": \"/assets\"\n      # },\n      \n      ]\n\nWEB_APP_AUTH_MODE='jwt-session-based'\n\n \n\nAD_SETTINGS = ADSettings()\n"
kind: ConfigMap
metadata:
  name: django-configmap
  namespace: django