reinheit/config/settings/production.py

import os

from oauth2_authcodeflow.conf import get_default_django_username

from .base import *


DATABASES = {
    "default": {
        "ENGINE": "django.db.backends.postgresql",
        "NAME": "reinheit",
        "USER": "reinheit",
    }
}

DEBUG = False

ALLOWED_HOSTS = ["beer.gwairfelin.com"]

STATIC_ROOT = "/srv/www/beer.gwairfelin.com/static"
MEDIA_ROOT = "/srv/www/beer.gwairfelin.com/media"

SESSION_COOKIE_SECURE = True
CSRF_COOKIE_SECURE = True
CSRF_TRUSTED_ORIGINS = ["https://beer.gwairfelin.com"]

SECRET_KEY = os.environ.get("REINHEIT_SECRET_KEY")

OIDC_RP_CLIENT_ID = os.environ.get("OIDC_CLIENT_ID")
OIDC_RP_CLIENT_SECRET = os.environ.get("OIDC_CLIENT_SECRET")

OIDC_OP_DISCOVERY_DOCUMENT_URL = "https://gitea.gwairfelin.com/.well-known/openid-configuration"


def get_username(claims):
    return claims["preferred_username"]

OIDC_DJANGO_USERNAME_FUNC = get_username