Merge pull request #18 from nens/reinout-settings4

Settings for staticfiles in production/staging

Dockerfile

@@ -3,3 +3,4 @@ FROM python:3.12
 WORKDIR /code
 COPY . .
 RUN pip install -r requirements.txt
+RUN python manage.py collectstatic --force

brostar_api/settings.py

@@ -60,6 +60,7 @@
 
 MIDDLEWARE = [
     "django.middleware.security.SecurityMiddleware",
+    "whitenoise.middleware.WhiteNoiseMiddleware",
     "django.contrib.sessions.middleware.SessionMiddleware",
     "django.middleware.common.CommonMiddleware",
     "django.middleware.csrf.CsrfViewMiddleware",
@@ -120,7 +121,7 @@
 }
 
 WSGI_APPLICATION = "brostar_api.wsgi.application"
-
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 CORS_ALLOWED_ORIGINS = [
     "http://localhost:4200",
 ]
@@ -171,8 +172,16 @@
 
 # Static files (CSS, JavaScript, Images)
 # https://docs.djangoproject.com/en/5.0/howto/static-files/
-
+# In production, they're
+# hosted via "whitenoise": https://whitenoise.readthedocs.io/en/latest/django.html
 STATIC_URL = "static/"
+STATIC_ROOT = "/staticfiles"
+STORAGES = {
+    "staticfiles": {
+        "BACKEND": "whitenoise.storage.CompressedManifestStaticFilesStorage",
+    },
+}
+
 
 # Default primary key field type
 # https://docs.djangoproject.com/en/5.0/ref/settings/#default-auto-field

requirements.txt

@@ -19,6 +19,7 @@ python-dotenv
 django-encrypted-model-fields
 django-filter
 nens-auth-client
+whitenoise
 
 # development tools
 ruff