new settings folder

middleware/__init__.py

+from .celery import app as celery_app
+
+__all__ = ['celery_app']

middleware/celery.py

+# Copyright 2017 Purism SPC and contributors
+# SPDX-License-Identifier: AGPL-3.0+
+
+# Original file from Celery 4.0.2 documentation
+# Copyright 2009-2016 Ask Solem
+# http://docs.celeryproject.org/en/latest/django/first-steps-with-django.html
+# SPDX-License-Identifier: CC-BY-SA-4.0
+
+import os
+
+from celery import Celery
+
+# set the default Django settings module for the 'celery' program.
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'middleware.settings')
+
+app = Celery('purist_middleware_monitor')
+
+# Using a string here means the worker don't have to serialize
+# the configuration object to child processes.
+# - namespace='CELERY' means all celery-related configuration keys
+#   should have a `CELERY_` prefix.
+app.config_from_object('django.conf:settings', namespace='CELERY')
+
+# Load task modules from all registered Django app configs.
+app.autodiscover_tasks()
+
+
+@app.task(bind=True)
+def debug_task(self):
+    print('Request: {0!r}'.format(self.request))

middleware/settings.py

+import ldap
+from decouple import Config, Csv, RepositoryIni
+from django_auth_ldap.config import LDAPSearch
+
+from .settings_original import *
+
+#
+# LOAD CONFIGURATION FILE
+#
+
+CONFIG_PATH = '/etc/opt/purist/middleware/config.ini'
+SECRET_PATH = '/etc/opt/purist/middleware/secret.ini'
+
+config = Config(RepositoryIni(CONFIG_PATH))
+secret_config = Config(RepositoryIni(SECRET_PATH))
+
+#
+# SECURITY
+#
+
+# SECURITY WARNING: keep the secret key used in production secret!
+SECRET_KEY = secret_config("DJANGO_SECRET_KEY")
+
+# SECURITY WARNING: don't run with debug turned on in production!
+DEBUG = config("DEBUG", cast=bool)
+DEBUG_ALL_ACCESS = config("DEBUG_ALL_ACCESS", cast=bool)
+DEBUG_CHANGE_PASSWORD = config("DEBUG_CHANGE_PASSWORD", cast=bool)
+DEBUG_SKIP_ACTIVATION_COMMAND = config("DEBUG_SKIP_ACTIVATION_COMMAND", cast=bool)
+
+# Required if DEBUG is False
+ALLOWED_HOSTS = config("ALLOWED_HOSTS", cast=Csv())
+
+#
+# INSTALLED APPLICATIONS
+#
+
+INSTALLED_APPS += ["crispy_forms", "django_agpl", "django_celery_beat", "ldapregister", "limitmonitor", "purist"]
+
+#
+# AGPL APPLICATION
+#
+
+AGPL_ROOT = os.path.abspath(os.path.dirname(__file__) + "/..")
+
+# no special exclusions are required, configuration and secrets are not stored in the site folder
+AGPL_EXCLUDE_DIRS = [
+    r'\.git$',
+    r'\.idea$',
+]
+
+AGPL_FILENAME_PREFIX = 'middleware'
+
+#
+# REGISTRATION APPLICATION
+#
+
+REGISTRATION_OPEN = config("REGISTRATION_OPEN", cast=bool)
+
+REG_PERSON_BASE_DN = config("REG_PERSON_BASE_DN")
+REG_PERSON_OBJECT_CLASSES = config("REG_PERSON_OBJECT_CLASSES", cast=Csv())
+
+REG_GROUP_BASE_DN = config("REG_GROUP_BASE_DN")
+REG_GROUP_OBJECT_CLASSES = config("REG_GROUP_OBJECT_CLASSES", cast=Csv())
+
+#
+#  AUTHENTICATION
+#
+
+AUTH_PASSWORD_VALIDATORS = [
+    {
+        'NAME': 'purist.custom.PassphraseValidator',
+    },
+]
+
+AUTHENTICATION_BACKENDS = (
+    'purist.custom.AuthenticationBackend',
+)
+
+AUTH_LDAP_SERVER_URI = config("AUTH_LDAP_SERVER_URI")
+AUTH_LDAP_START_TLS = config("AUTH_LDAP_START_TLS", cast=bool)
+
+AUTH_LDAP_BIND_DN = config("AUTH_LDAP_BIND_DN")
+AUTH_LDAP_BIND_PASSWORD = secret_config("AUTH_LDAP_BIND_PASSWORD")
+
+BASE_DN = config("AUTH_LDAP_USER_SEARCH_BASE_DN")
+AUTH_LDAP_USER_SEARCH = LDAPSearch(BASE_DN, ldap.SCOPE_SUBTREE, "(uid=%(user)s)")
+# must match `base_dn` and primary key in `ldapregister.models.LdapPerson`
+
+AUTH_USER_MODEL = 'purist.User'
+
+#
+# DATABASE
+#
+
+# See also:
+# https://docs.djangoproject.com/en/1.11/ref/settings/#databases
+# and https://pypi.python.org/pypi/django-ldapdb/
+# (re-uses LDAP connection details from authentication settings)
+
+SQLITE_DB_PATH = config("SQLITE_DB_PATH")
+
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.sqlite3',
+        'NAME': SQLITE_DB_PATH,
+    },
+    'ldap': {
+        'ENGINE': 'ldapdb.backends.ldap',
+        'NAME': AUTH_LDAP_SERVER_URI,
+        'USER': AUTH_LDAP_BIND_DN,
+        'PASSWORD': AUTH_LDAP_BIND_PASSWORD,
+        'TLS': AUTH_LDAP_START_TLS,
+    },
+}
+
+DATABASE_ROUTERS = ['ldapdb.router.Router']
+
+#
+# STATIC AND SITE SETTINGS
+#
+
+STATIC_ROOT = config("STATIC_ROOT")
+STATICFILES_DIRS = config("STATICFILES_DIRS", cast=Csv())
+SITE_TITLE = config("SITE_TITLE")
+SITE_BYLINE = config("SITE_BYLINE")
+SITE_DOMAIN = config("SITE_DOMAIN")
+SITE_PROVIDER = config("SITE_PROVIDER")
+SITE_PROVIDER_LINK = config("SITE_PROVIDER_LINK")
+
+LINK_SUBSCRIPTION = config("LINK_SUBSCRIPTION")
+
+#
+# WOOCOMMERCE
+#
+
+WOO_URL = config("WOO_URL")
+WOO_WP_API = config("WOO_WP_API", cast=bool)
+WOO_VERSION = config("WOO_VERSION")
+
+WOO_CONSUMER_KEY = secret_config("WOO_CONSUMER_KEY")
+WOO_CONSUMER_SECRET = secret_config("WOO_CONSUMER_SECRET")
+
+WOO_PRODUCT_LIST = config("WOO_PRODUCT_LIST", cast=Csv(int))
+
+#
+# WOO1 PARSER
+#
+
+WOO1_FIELD_LIST = config("WOO1_FIELD_LIST", cast=Csv())
+
+#
+# SSH CONNECTION TO OPENVPN SERVER
+#
+
+OVPN_HOSTNAME = config("OVPN_HOSTNAME")
+OVPN_PORT = config("OVPN_PORT", cast=int)
+OVPN_USERNAME = config("OVPN_USERNAME")
+OVPN_FILEPATH = config("OVPN_FILEPATH")

middleware/settings_original.py

+"""
+Django settings for middleware project.
+
+Generated by 'django-admin startproject' using Django 1.11.2.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/1.11/topics/settings/
+
+For the full list of settings and their values, see
+https://docs.djangoproject.com/en/1.11/ref/settings/
+"""
+
+import os
+
+# Build paths inside the project like this: os.path.join(BASE_DIR, ...)
+BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+
+
+# Quick-start development settings - unsuitable for production
+# See https://docs.djangoproject.com/en/1.11/howto/deployment/checklist/
+
+# SECURITY WARNING: keep the secret key used in production secret!
+SECRET_KEY = 'secret'
+
+# SECURITY WARNING: don't run with debug turned on in production!
+DEBUG = True
+
+ALLOWED_HOSTS = []
+
+
+# Application definition
+
+INSTALLED_APPS = [
+    'django.contrib.admin',
+    'django.contrib.auth',
+    'django.contrib.contenttypes',
+    'django.contrib.sessions',
+    'django.contrib.messages',
+    'django.contrib.staticfiles',
+]
+
+MIDDLEWARE = [
+    'django.middleware.security.SecurityMiddleware',
+    'django.contrib.sessions.middleware.SessionMiddleware',
+    'django.middleware.common.CommonMiddleware',
+    'django.middleware.csrf.CsrfViewMiddleware',
+    'django.contrib.auth.middleware.AuthenticationMiddleware',
+    'django.contrib.messages.middleware.MessageMiddleware',
+    'django.middleware.clickjacking.XFrameOptionsMiddleware',
+]
+
+ROOT_URLCONF = 'middleware.urls'
+
+TEMPLATES = [
+    {
+        'BACKEND': 'django.template.backends.django.DjangoTemplates',
+        'DIRS': [],
+        'APP_DIRS': True,
+        'OPTIONS': {
+            'context_processors': [
+                'django.template.context_processors.debug',
+                'django.template.context_processors.request',
+                'django.contrib.auth.context_processors.auth',
+                'django.contrib.messages.context_processors.messages',
+            ],
+        },
+    },
+    {
+        'BACKEND': 'django.template.backends.jinja2.Jinja2',
+        'DIRS': [],
+        'APP_DIRS': True,
+        'OPTIONS': {
+            'extensions': [
+                'jdj_tags.extensions.DjangoCompat',
+            ],
+        },
+    },
+]
+
+WSGI_APPLICATION = 'middleware.wsgi.application'
+
+
+# Database
+# https://docs.djangoproject.com/en/1.11/ref/settings/#databases
+
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.sqlite3',
+        'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
+    }
+}
+
+
+# Password validation
+# https://docs.djangoproject.com/en/1.11/ref/settings/#auth-password-validators
+
+AUTH_PASSWORD_VALIDATORS = [
+    {
+        'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
+    },
+]
+
+
+# Internationalization
+# https://docs.djangoproject.com/en/1.11/topics/i18n/
+
+LANGUAGE_CODE = 'en-us'
+
+TIME_ZONE = 'UTC'
+
+USE_I18N = True
+
+USE_L10N = True
+
+USE_TZ = True
+
+
+# Static files (CSS, JavaScript, Images)
+# https://docs.djangoproject.com/en/1.11/howto/static-files/
+
+STATIC_URL = '/static/'

middleware/urls.py

+"""middleware URL Configuration
+
+The `urlpatterns` list routes URLs to views. For more information please see:
+    https://docs.djangoproject.com/en/1.11/topics/http/urls/
+Examples:
+Function views
+    1. Add an import:  from my_app import views
+    2. Add a URL to urlpatterns:  url(r'^$', views.home, name='home')
+Class-based views
+    1. Add an import:  from other_app.views import Home
+    2. Add a URL to urlpatterns:  url(r'^$', Home.as_view(), name='home')
+Including another URLconf
+    1. Import the include() function: from django.conf.urls import url, include
+    2. Add a URL to urlpatterns:  url(r'^blog/', include('blog.urls'))
+"""
+from django.conf.urls import include, url
+from django.contrib import admin
+from django.views.generic import RedirectView
+from registration.backends.simple.views import RegistrationView
+
+import limitmonitor.views
+import purist.views
+from ldapregister.forms import RegistrationForm
+
+#
+# Set admin titles for this site
+#
+
+admin.site.site_title = "Site administration"
+admin.site.site_header = "Site administration"
+
+#
+# Define patterns for this site
+#
+
+urlpatterns = [
+    url(r'^$', purist.views.home, name='home'),
+    url(r'^admin/', admin.site.urls),
+    url(r'^accounts/$', RedirectView.as_view(url='/')),
+    url(r'^accounts/profile/$', limitmonitor.views.userlimit, name='profile'),
+    url(r'^accounts/profile/purist.ovpn', limitmonitor.views.ovpn_userfile, name='ovpn_userfile'),
+    url(r'^accounts/register/$', RegistrationView.as_view(form_class=RegistrationForm), name='registration_register'),
+    url(r'^accounts/', include('registration.backends.simple.urls')),
+    url(r'^download/', include('django_agpl.urls')),
+    url(r'^jslicense/$', purist.views.jslicense, name='jslicense'),
+]

middleware/wsgi.py

+"""
+WSGI config for middleware project.
+
+It exposes the WSGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/1.11/howto/deployment/wsgi/
+"""
+
+import os
+
+from django.core.wsgi import get_wsgi_application
+
+os.environ.setdefault("DJANGO_SETTINGS_MODULE", "middleware.settings")
+
+application = get_wsgi_application()