Add initial implementations for forms and organization apps with serializers, factories, and admin configurations
Some checks failed
CI/CD Pipeline / Run Tests (push) Failing after 45s
CI/CD Pipeline / Code Quality Checks (push) Failing after 48s
CI/CD Pipeline / Build Docker Images (push) Has been skipped
CI/CD Pipeline / Push to Gitea Registry (push) Has been skipped
CI/CD Pipeline / Deploy to Server (push) Has been skipped

This commit is contained in:
2026-03-28 18:23:06 +01:00
parent 8ed3e1175c
commit 345b1d0cc8
201 changed files with 15097 additions and 6691 deletions

9
src/settings/__init__.py Normal file
View File

@@ -0,0 +1,9 @@
"""
Django settings module.
"""
# This will be overridden by the specific settings file
try:
from .dev import *
except ImportError:
from .base import *

348
src/settings/base.py Normal file
View File

@@ -0,0 +1,348 @@
"""
Base settings for Django project.
"""
import os
import warnings
from datetime import timedelta
from pathlib import Path
BASE_DIR = Path(__file__).resolve().parent.parent
PROJECT_ROOT = BASE_DIR.parent
APP_VERSION = "1.0.0"
OPENAPI_USE_ENGLISH_TAGS = False
STARTUP_CHECKS_ENABLED = True
STARTUP_DB_TIMEOUT_SECONDS = 3
STARTUP_REDIS_TIMEOUT_SECONDS = 3
BACKUP_ENCRYPTION_KEY = os.getenv("BACKUP_ENCRYPTION_KEY", "")
BACKUP_KEY_ID = os.getenv("BACKUP_KEY_ID", "default")
warnings.filterwarnings(
"ignore",
message="pkg_resources is deprecated as an API.*",
category=UserWarning,
module="coreapi.utils",
)
# SECRET_KEY, DEBUG, ALLOWED_HOSTS are defined in dev.py / production.py.
INSTALLED_APPS = [
"jazzmin",
"django.contrib.admin",
"django.contrib.auth",
"django.contrib.contenttypes",
"django.contrib.sessions",
"django.contrib.messages",
"django.contrib.staticfiles",
"rest_framework",
"django_filters",
"corsheaders",
"rest_framework_simplejwt.token_blacklist",
"django_celery_beat",
"django_celery_results",
"drf_yasg",
"apps.core",
"apps.user",
"apps.organization",
"apps.registers",
"apps.form_1",
"apps.form_2",
"apps.form_3",
"apps.form_4",
"apps.form_5",
"apps.form_6",
]
JAZZMIN_SETTINGS = {
"site_title": "State Corp Admin",
"site_header": "State Corp",
"site_brand": "State Corp",
"site_logo": None,
"login_logo": None,
"login_logo_dark": None,
"site_logo_classes": "img-circle",
"site_icon": None,
"welcome_sign": "Панель администрирования данных",
"copyright": "Административная панель",
"search_model": ["user.User", "organization.Organization"],
"topmenu_links": [
{"name": "Главная", "url": "admin:index"},
{"name": "API Docs", "url": "schema-swagger-ui", "new_window": True},
],
"show_sidebar": True,
"navigation_expanded": True,
"hide_apps": [
"auth",
"core",
"django_celery_results",
"django_celery_beat",
"form_1",
"form_2",
"form_3",
"form_4",
"form_5",
"form_6",
"token_blacklist",
],
"hide_models": [
"auth.Group",
"core.BackgroundJob",
"django_celery_beat.ClockedSchedule",
"django_celery_beat.CrontabSchedule",
"django_celery_beat.IntervalSchedule",
"django_celery_beat.PeriodicTask",
"django_celery_beat.SolarSchedule",
"registers.Register",
"registers.RegistryMembershipPeriod",
"token_blacklist.BlacklistedToken",
"token_blacklist.OutstandingToken",
],
"order_with_respect_to": [
"user",
"organization",
"registers",
"form_1",
"form_2",
"form_3",
"form_4",
"form_5",
"form_6",
],
"icons": {
"user.User": "fas fa-user",
"organization.Organization": "fas fa-building",
"registers.RegisterUpload": "fas fa-file-upload",
"form_1.FormF1Record": "fas fa-file-alt",
"form_2.FormF2Record": "fas fa-chart-line",
"form_3.FormF3Record": "fas fa-users",
"form_4.FormF4Record": "fas fa-chart-pie",
"form_5.FormF5Record": "fas fa-cogs",
"form_6.FormF6Record": "fas fa-industry",
},
"default_icon_parents": "fas fa-chevron-circle-right",
"default_icon_children": "fas fa-circle",
"related_modal_active": True,
"custom_css": "admin/css/state-corp-admin-theme.css",
"custom_js": "admin/js/state-corp-admin-particles.js",
"use_google_fonts_cdn": True,
"show_ui_builder": False,
"changeform_format": "horizontal_tabs",
"changeform_format_overrides": {
"user.User": "collapsible",
},
}
JAZZMIN_UI_TWEAKS = {
"navbar_small_text": False,
"footer_small_text": False,
"body_small_text": False,
"brand_small_text": False,
"brand_colour": "navbar-primary",
"accent": "accent-primary",
"navbar": "navbar-dark",
"no_navbar_border": False,
"navbar_fixed": True,
"layout_boxed": False,
"footer_fixed": False,
"sidebar_fixed": True,
"sidebar": "sidebar-dark-primary",
"sidebar_nav_small_text": False,
"sidebar_disable_expand": False,
"sidebar_nav_child_indent": False,
"sidebar_nav_compact_style": False,
"sidebar_nav_legacy_style": False,
"sidebar_nav_flat_style": False,
"theme": "darkly",
"dark_mode_theme": "darkly",
"button_classes": {
"primary": "btn-primary",
"secondary": "btn-secondary",
"info": "btn-info",
"warning": "btn-warning",
"danger": "btn-danger",
"success": "btn-success",
},
}
MIDDLEWARE = [
"apps.core.middleware.RequestIDMiddleware",
"corsheaders.middleware.CorsMiddleware",
"django.middleware.security.SecurityMiddleware",
"whitenoise.middleware.WhiteNoiseMiddleware",
"django.contrib.sessions.middleware.SessionMiddleware",
"django.middleware.common.CommonMiddleware",
"django.middleware.csrf.CsrfViewMiddleware",
"django.contrib.auth.middleware.AuthenticationMiddleware",
"django.contrib.messages.middleware.MessageMiddleware",
"django.middleware.clickjacking.XFrameOptionsMiddleware",
]
ROOT_URLCONF = "core.urls"
TEMPLATES = [
{
"BACKEND": "django.template.backends.django.DjangoTemplates",
"DIRS": [BASE_DIR / "templates"],
"APP_DIRS": True,
"OPTIONS": {
"context_processors": [
"django.template.context_processors.debug",
"django.template.context_processors.request",
"django.contrib.auth.context_processors.auth",
"django.contrib.messages.context_processors.messages",
"apps.core.context_processors.admin_dashboard",
],
},
},
]
WSGI_APPLICATION = "core.wsgi.application"
AUTH_PASSWORD_VALIDATORS = [
{
"NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator",
},
{
"NAME": "django.contrib.auth.password_validation.MinimumLengthValidator",
},
{
"NAME": "django.contrib.auth.password_validation.CommonPasswordValidator",
},
{
"NAME": "django.contrib.auth.password_validation.NumericPasswordValidator",
},
]
LANGUAGE_CODE = "ru-RU"
TIME_ZONE = "UTC"
USE_I18N = True
USE_L10N = True
USE_TZ = True
STATIC_URL = "/static/"
STATIC_ROOT = PROJECT_ROOT / "staticfiles"
STATICFILES_DIRS = [BASE_DIR / "static"]
MEDIA_URL = "/media/"
MEDIA_ROOT = PROJECT_ROOT / "media"
DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"
AUTH_USER_MODEL = "user.User"
LOGIN_URL = "/auth/login/"
REST_FRAMEWORK = {
"DEFAULT_AUTHENTICATION_CLASSES": [
"rest_framework_simplejwt.authentication.JWTAuthentication",
],
"DEFAULT_PERMISSION_CLASSES": [
"rest_framework.permissions.IsAuthenticatedOrReadOnly",
],
"DEFAULT_FILTER_BACKENDS": [
"django_filters.rest_framework.DjangoFilterBackend",
"rest_framework.filters.SearchFilter",
"rest_framework.filters.OrderingFilter",
],
"DEFAULT_PAGINATION_CLASS": "apps.core.pagination.StandardPagination",
"PAGE_SIZE": 20,
"DEFAULT_RENDERER_CLASSES": [
"rest_framework.renderers.JSONRenderer",
"rest_framework.renderers.BrowsableAPIRenderer",
],
"EXCEPTION_HANDLER": "apps.core.exception_handler.custom_exception_handler",
"DEFAULT_THROTTLE_CLASSES": [
"rest_framework.throttling.AnonRateThrottle",
"rest_framework.throttling.UserRateThrottle",
],
"DEFAULT_THROTTLE_RATES": {
"anon": "100/hour",
"user": "1000/hour",
},
}
SIMPLE_JWT = {
"ACCESS_TOKEN_LIFETIME": timedelta(minutes=60),
"REFRESH_TOKEN_LIFETIME": timedelta(days=7),
"ROTATE_REFRESH_TOKENS": True,
"BLACKLIST_AFTER_ROTATION": True,
"UPDATE_LAST_LOGIN": True,
"ALGORITHM": "HS256",
"VERIFYING_KEY": None,
"AUDIENCE": None,
"ISSUER": None,
"JWK_URL": None,
"LEEWAY": 0,
"AUTH_HEADER_TYPES": ("Bearer",),
"AUTH_HEADER_NAME": "HTTP_AUTHORIZATION",
"USER_ID_FIELD": "id",
"USER_ID_CLAIM": "user_id",
"USER_AUTHENTICATION_RULE": "rest_framework_simplejwt.authentication.default_user_authentication_rule",
"AUTH_TOKEN_CLASSES": ("rest_framework_simplejwt.tokens.AccessToken",),
"TOKEN_TYPE_CLAIM": "token_type",
"TOKEN_USER_CLASS": "rest_framework_simplejwt.models.TokenUser",
"JTI_CLAIM": "jti",
"SLIDING_TOKEN_REFRESH_EXP_CLAIM": "refresh_exp",
"SLIDING_TOKEN_LIFETIME": timedelta(minutes=5),
"SLIDING_TOKEN_REFRESH_LIFETIME": timedelta(days=1),
}
CORS_ALLOWED_ORIGINS = ["http://localhost:3000", "http://127.0.0.1:3000"]
CORS_ALLOW_CREDENTIALS = True
SWAGGER_SETTINGS = {
"SECURITY_DEFINITIONS": {
"Bearer": {
"type": "apiKey",
"name": "Authorization",
"in": "header",
"description": "JWT авторизация. Формат: Bearer <access_token>",
}
},
"USE_SESSION_AUTH": True,
"PERSIST_AUTH": True,
"REFETCH_SCHEMA_WITH_AUTH": True,
"REFETCH_SCHEMA_ON_LOGOUT": True,
}
LOGGING = {
"version": 1,
"disable_existing_loggers": False,
"formatters": {
"verbose": {
"format": "{levelname} {asctime} {module} {process:d} {thread:d} {message}",
"style": "{",
},
"simple": {
"format": "{levelname} {message}",
"style": "{",
},
},
"handlers": {
"file": {
"level": "INFO",
"class": "logging.FileHandler",
"filename": PROJECT_ROOT / "logs/django.log",
"formatter": "verbose",
},
"console": {
"level": "INFO",
"class": "logging.StreamHandler",
"formatter": "simple",
},
},
"root": {
"handlers": ["console", "file"],
"level": "INFO",
},
"loggers": {
"django": {
"handlers": ["console", "file"],
"level": "INFO",
"propagate": False,
},
},
}
FNS_WATCH_DIRECTORY = PROJECT_ROOT / "input" / "fns"
FNS_PROCESSED_DIRECTORY = PROJECT_ROOT / "input" / "fns" / "processed"
FNS_FAILED_DIRECTORY = PROJECT_ROOT / "input" / "fns" / "failed"

78
src/settings/dev.py Normal file
View File

@@ -0,0 +1,78 @@
"""
Development settings - закрытый контур, без переменных окружения.
"""
import os
from .base import *
SECRET_KEY = "django-insecure-development-key-state-corp-2026"
DEBUG = True
ALLOWED_HOSTS = ["*"]
OPENAPI_USE_ENGLISH_TAGS = False
# JWT
SIMPLE_JWT["SIGNING_KEY"] = SECRET_KEY
def _normalize_local_host(host: str) -> str:
"""Нормализует host для локального запуска backend на хосте."""
if host == "host.docker.internal":
return "127.0.0.1"
return host
_postgres_host = _normalize_local_host(os.getenv("POSTGRES_HOST", "127.0.0.1"))
_redis_host = _normalize_local_host(os.getenv("REDIS_HOST", "127.0.0.1"))
# Database
DATABASES = {
"default": {
"ENGINE": "django.db.backends.postgresql",
"NAME": os.getenv("POSTGRES_DB", "state_corp"),
"USER": os.getenv("POSTGRES_USER", "postgres"),
"PASSWORD": os.getenv("POSTGRES_PASSWORD", "postgres"),
# При локальном запуске backend (не в контейнере) подключаемся к портам,
# проброшенным docker-compose.service.yml
"HOST": _postgres_host,
"PORT": os.getenv("POSTGRES_PORT", "5432"),
}
}
# Celery
_default_redis_broker = f"redis://{_redis_host}:6379/0"
_default_redis_cache = f"redis://{_redis_host}:6379/1"
CELERY_BROKER_URL = os.getenv("CELERY_BROKER_URL", _default_redis_broker).replace(
"host.docker.internal", "127.0.0.1"
)
CELERY_RESULT_BACKEND = os.getenv(
"CELERY_RESULT_BACKEND", _default_redis_broker
).replace("host.docker.internal", "127.0.0.1")
CELERY_ACCEPT_CONTENT = ["json"]
CELERY_TASK_SERIALIZER = "json"
CELERY_RESULT_SERIALIZER = "json"
CELERY_TIMEZONE = "Europe/Moscow"
# Cache
CACHES = {
"default": {
"BACKEND": "django_redis.cache.RedisCache",
"LOCATION": os.getenv("REDIS_CACHE_URL", _default_redis_cache).replace(
"host.docker.internal", "127.0.0.1"
),
"OPTIONS": {
"CLIENT_CLASS": "django_redis.client.DefaultClient",
},
}
}
# Email
EMAIL_BACKEND = "django.core.mail.backends.console.EmailBackend"
# DRF: отключаем throttling в dev, чтобы не мешать фронту тестировать API.
REST_FRAMEWORK = {
**globals().get("REST_FRAMEWORK", {}),
"DEFAULT_THROTTLE_CLASSES": [],
"DEFAULT_THROTTLE_RATES": {},
}

117
src/settings/production.py Normal file
View File

@@ -0,0 +1,117 @@
"""
Production settings - закрытый контур, все настройки захардкожены.
Docker Compose сеть - используются имена сервисов (db, redis).
"""
import os
from django.core.exceptions import ImproperlyConfigured
from .base import *
def _require_env(name: str) -> str:
value = os.getenv(name, "").strip()
if not value:
raise ImproperlyConfigured(f"{name} must be set in production")
return value
def _parse_allowed_hosts(raw_value: str) -> list[str]:
hosts = [host.strip() for host in raw_value.split(",") if host.strip()]
if not hosts:
raise ImproperlyConfigured("ALLOWED_HOSTS must contain at least one host")
if "*" in hosts:
raise ImproperlyConfigured("ALLOWED_HOSTS must not contain '*' in production")
return hosts
SECRET_KEY = _require_env("SECRET_KEY")
DEBUG = os.getenv("DEBUG", "false").strip().lower() == "true"
if DEBUG:
raise ImproperlyConfigured("DEBUG must be False in production")
ALLOWED_HOSTS = _parse_allowed_hosts(_require_env("ALLOWED_HOSTS"))
# JWT
SIMPLE_JWT["SIGNING_KEY"] = SECRET_KEY
# HTTPS settings
SECURE_SSL_REDIRECT = os.getenv("SECURE_SSL_REDIRECT", "true").strip().lower() == "true"
SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
SECURE_HSTS_SECONDS = int(os.getenv("SECURE_HSTS_SECONDS", "31536000"))
SECURE_HSTS_INCLUDE_SUBDOMAINS = (
os.getenv("SECURE_HSTS_INCLUDE_SUBDOMAINS", "true").strip().lower() == "true"
)
SECURE_HSTS_PRELOAD = os.getenv("SECURE_HSTS_PRELOAD", "true").strip().lower() == "true"
SESSION_COOKIE_SECURE = True
CSRF_COOKIE_SECURE = True
# Database
DATABASES = {
"default": {
"ENGINE": "django.db.backends.postgresql",
"NAME": os.getenv("POSTGRES_DB", "state_corp"),
"USER": os.getenv("POSTGRES_USER", "postgres"),
"PASSWORD": os.getenv("POSTGRES_PASSWORD", "postgres"),
"HOST": os.getenv("POSTGRES_HOST", "db"),
"PORT": os.getenv("POSTGRES_PORT", "5432"),
"OPTIONS": {
"sslmode": os.getenv("POSTGRES_SSLMODE", "disable"),
},
}
}
# Celery
CELERY_BROKER_URL = os.getenv("CELERY_BROKER_URL", "redis://redis:6379/0")
CELERY_RESULT_BACKEND = os.getenv("CELERY_RESULT_BACKEND", "redis://redis:6379/0")
CELERY_ACCEPT_CONTENT = ["json"]
CELERY_TASK_SERIALIZER = "json"
CELERY_RESULT_SERIALIZER = "json"
CELERY_TIMEZONE = "Europe/Moscow"
CELERY_TASK_ALWAYS_EAGER = False
CELERY_WORKER_PREFETCH_MULTIPLIER = 1
# Cache
CACHES = {
"default": {
"BACKEND": "django_redis.cache.RedisCache",
"LOCATION": os.getenv("REDIS_CACHE_URL", "redis://redis:6379/1"),
"OPTIONS": {
"CLIENT_CLASS": "django_redis.client.DefaultClient",
"CONNECTION_POOL_KWARGS": {
"max_connections": 20,
"retry_on_timeout": True,
},
},
}
}
# Logging (stdout для Docker)
LOGGING = {
"version": 1,
"disable_existing_loggers": False,
"formatters": {
"verbose": {
"format": "{levelname} {asctime} {module} {process:d} {thread:d} {message}",
"style": "{",
},
},
"handlers": {
"console": {
"level": "INFO",
"class": "logging.StreamHandler",
"formatter": "verbose",
},
},
"root": {
"handlers": ["console"],
"level": "INFO",
},
"loggers": {
"django": {
"handlers": ["console"],
"level": "INFO",
"propagate": False,
},
},
}

110
src/settings/test.py Normal file
View File

@@ -0,0 +1,110 @@
"""
Test settings - для запуска тестов.
"""
from .base import *
SECRET_KEY = "django-insecure-test-key-only-for-testing"
DEBUG = True
STARTUP_CHECKS_ENABLED = False
# JWT
SIMPLE_JWT["SIGNING_KEY"] = SECRET_KEY
ALLOWED_HOSTS = ["localhost", "127.0.0.1", "0.0.0.0", "testserver"] # noqa: S104
# Use in-memory SQLite database for faster tests
DATABASES = {
"default": {
"ENGINE": "django.db.backends.sqlite3",
"NAME": ":memory:",
"TEST": {
"NAME": ":memory:",
},
}
}
# Disable migrations for faster tests
class DisableMigrations:
def __contains__(self, item):
return True
def __getitem__(self, item):
return None
MIGRATION_MODULES = DisableMigrations()
# Cache configuration for tests (use local memory)
CACHES = {
"default": {
"BACKEND": "django.core.cache.backends.locmem.LocMemCache",
}
}
# Email backend for tests
EMAIL_BACKEND = "django.core.mail.backends.locmem.EmailBackend"
# Celery Configuration for Tests (use eager execution)
CELERY_TASK_ALWAYS_EAGER = True
CELERY_TASK_EAGER_PROPAGATES = True
CELERY_BROKER_URL = "memory://"
CELERY_RESULT_BACKEND = "cache+memory://"
# Password hashers - use fast hasher for tests
PASSWORD_HASHERS = [
"django.contrib.auth.hashers.MD5PasswordHasher",
]
# Disable logging during tests
LOGGING = {
"version": 1,
"disable_existing_loggers": False,
"handlers": {
"null": {
"class": "logging.NullHandler",
},
},
"root": {
"handlers": ["null"],
},
"loggers": {
"django": {
"handlers": ["null"],
"propagate": False,
},
"django.request": {
"handlers": ["null"],
"propagate": False,
},
},
}
# Media files for tests
MEDIA_ROOT = "/tmp/test_media" # noqa: S108
# Static files for tests
STATICFILES_STORAGE = "django.contrib.staticfiles.storage.StaticFilesStorage"
# Disable CSRF for API tests and disable throttling
REST_FRAMEWORK = {
**globals().get("REST_FRAMEWORK", {}),
"DEFAULT_AUTHENTICATION_CLASSES": [
"rest_framework_simplejwt.authentication.JWTAuthentication",
],
"TEST_REQUEST_DEFAULT_FORMAT": "json",
# Disable throttling for tests
"DEFAULT_THROTTLE_CLASSES": [],
"DEFAULT_THROTTLE_RATES": {},
}
# JWT settings for tests
from datetime import timedelta
SIMPLE_JWT = {
**globals().get("SIMPLE_JWT", {}),
"ACCESS_TOKEN_LIFETIME": timedelta(minutes=5),
"REFRESH_TOKEN_LIFETIME": timedelta(days=1),
"ROTATE_REFRESH_TOKENS": True,
}

View File

@@ -0,0 +1,35 @@
"""
Production-like test settings (PostgreSQL + real migrations).
"""
import os
from .test import *
# Override SQLite with PostgreSQL to match production behavior.
DATABASES = {
"default": {
"ENGINE": "django.db.backends.postgresql",
"NAME": os.getenv(
"TEST_POSTGRES_DB", os.getenv("POSTGRES_DB", "state_corp_test")
),
"USER": os.getenv("TEST_POSTGRES_USER", os.getenv("POSTGRES_USER", "postgres")),
"PASSWORD": os.getenv(
"TEST_POSTGRES_PASSWORD", os.getenv("POSTGRES_PASSWORD", "postgres")
),
"HOST": os.getenv(
"TEST_POSTGRES_HOST", os.getenv("POSTGRES_HOST", "127.0.0.1")
),
"PORT": os.getenv("TEST_POSTGRES_PORT", os.getenv("POSTGRES_PORT", "5432")),
"CONN_MAX_AGE": 0,
"TEST": {
"NAME": os.getenv(
"TEST_POSTGRES_DB",
os.getenv("POSTGRES_DB", "state_corp_test"),
),
},
}
}
# Enable real migrations for schema parity checks.
globals().pop("MIGRATION_MODULES", None)