e8330473cd
Uvodi background request tok za generiranje PDF-a s 24h cache-om i cleanup taskom preko Celery beat-a. Dodaje notification metadata download_url za ponovno preuzimanje bez regeneracije, API image endpointe za putne naloge i račune, te frontend integraciju za async download i produkcijski prikaz slika. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
45 lines
1.4 KiB
Python
45 lines
1.4 KiB
Python
from .base import *
|
|
|
|
DEBUG = False
|
|
ALLOWED_HOSTS = os.environ.get('ALLOWED_HOSTS', '').split(',')
|
|
|
|
# PostgreSQL za produkciju (industrijski standard)
|
|
DATABASES = {
|
|
'default': {
|
|
'ENGINE': 'django.db.backends.postgresql',
|
|
'NAME': os.environ.get('DB_NAME'),
|
|
'USER': os.environ.get('DB_USER'),
|
|
'PASSWORD': os.environ.get('DB_PASSWORD'),
|
|
'HOST': os.environ.get('DB_HOST', 'db'),
|
|
'PORT': os.environ.get('DB_PORT', '5432'),
|
|
}
|
|
}
|
|
|
|
# Sigurnosne postavke
|
|
SESSION_COOKIE_SECURE = True
|
|
CSRF_COOKIE_SECURE = True
|
|
SECURE_SSL_REDIRECT = True
|
|
SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
|
|
USE_X_FORWARDED_HOST = True
|
|
|
|
# Produkcijski CORS (samo domena na kojoj vrti Astro)
|
|
CORS_ALLOWED_ORIGINS = os.environ.get('CORS_ALLOWED_ORIGINS', '').split(',')
|
|
|
|
# csrf trusted origins za produkciju (env + poznate domene)
|
|
CSRF_TRUSTED_ORIGINS = [
|
|
origin.strip()
|
|
for origin in os.environ.get('CSRF_TRUSTED_ORIGINS', '').split(',')
|
|
if origin.strip()
|
|
] + [
|
|
'https://api-004.captain.mitteworkspace.cloud',
|
|
'https://serviseri-004.captain.mitteworkspace.cloud',
|
|
]
|
|
|
|
# Statika i Mediji
|
|
STATIC_URL = '/static/'
|
|
STATIC_ROOT = '/app/staticfiles'
|
|
MEDIA_URL = '/media/'
|
|
MEDIA_ROOT = '/app/media'
|
|
|
|
# Privremeni fallback dok se media ne servira preko reverse proxy-ja.
|
|
SERVE_MEDIA_FILES = os.environ.get('SERVE_MEDIA_FILES', '1').strip().lower() in ('1', 'true', 'yes', 'on') |