wemake-services / wemake-django-template Goto Github PK

HTTP Strict Transport Security (HSTS) is a web security policy mechanism which helps to protect websites against protocol downgrade attacks and cookie hijacking. Enabling HSTS declares that web browsers should only interact with the server using a secure HTTPS connection, and never via an insecure HTTP connection. The policy specifies a period of time during which the server must be accessed in a secure fashion.

Caddy does not enable HSTS by default, because if you wish to use the domain without HTTPS, HSTS having been enabled and remembered by a browser means the browser will not allow connections to your server. HSTS should only be enabled in a production environment when you know that you won't want to disable HTTPS in the future. It can easily be enabled by adding the header below to your Caddyfile.

header / Strict-Transport-Security "max-age=31536000;"

Handle pip timeouts

Add integration tests with docker

Here's how it should work:

A new project is created via cookiecutter cli
A docker-compose is spawned to run all tests inside this new project

Add more info about pipenv install

After completing these steps

pip install pipsi
pipsi install pew
pipsi install pipenv

I can't execute

pipenv install -d

The result is :

command not found: pipenv

Docker files are not removed

When installing docker setting to n it really does not change anything:

remove docs
docker/ folder
docker-compose.yml and .dockerignore

Include mimesis as a tool for data-generation

I would really like to get some support from @lk-geimfari

What needs to be done:

Add django-rest-framework #40
Add tests with mimesis

Consider adding it alongside with drf and an example application.

radon can be used as flake8 plugin

Right now radon is a special beast. But it can be integrated into flake8 linting with

Add docs for pycharm one-time setup

Here's a good example: https://github.com/magfest/ubersystem-deploy/blob/master/README-pycharm.md

Enable healthchecks

There are two options:

enabling healthchecks in Dockerfile
enabling healthchecks in docker-compose.yml

We need to investigate which one is better.

Docs:

Pluggable app for django: https://github.com/KristianOellegaard/django-health-check
Good tutorial: http://codeblog.dotsandbrackets.com/docker-health-check/

Set PIP_NO_CACHE_DIR

https://pip.pypa.io/en/stable/user_guide/#environment-variables

Update Documentation Info

The Given Info is a bit ambiguous for a newcomer.
It will be nice to add "Quick Start" Content , where all the steps are described.

Remove pinned versions from Pipfile

Prevent hash collision attack

Add PYTHONHASHSEED="random" to Dockerfile

Explicit overlay2 docker driver

Should we add explicit note about using overlay2 (or maybe other?) as a default driver for docker?

https://docs.docker.com/engine/userguide/storagedriver/overlayfs-driver/

We should also document why using this driver will benefit your project.

Document how to use secrets with docker

https://docs.docker.com/engine/swarm/secrets/#defining-and-using-secrets-in-compose-files
https://docs.docker.com/compose/compose-file/#short-syntax-2

It would be also nice to provide an example with PG_PASSWORD variable.

Add structlog

http://www.structlog.org/en/stable/

Add `image` field to docker-compose.prod.yml

I have never used it before, but this issue looks promising:
docker/compose#2092

Add django-rest-framework

I will need to add a django-rest-framework example with jwt auth.

Add pydocstyle support

Add local build targets for PyCharm

Initial Update

Hi 👊

This is my first visit to this fine repo, but it seems you have been working hard to keep all dependencies updated so far.

Once you have closed this issue, I'll create separate pull requests for every update as soon as I find one.

That's it for now!

Happy merging! 🤖

Add tests

We need to test the most complex example:

local development works
development container works
production container works

It would be also nice to:

Run the default project's tests
Run the default project's style checks
Run the default project's QA

This can be achieved with https://github.com/hackebrot/pytest-cookies

Add transparent option to Caddyfile

Serve static files from Caddy

Right now we are serving static files from django.
That's not a right way to do it.

We need to use:

Segfault when using python_autoreload

For some reason I have now started to receive segmentation fault errors in development. It does not happen all the time. Just happens at some unpredictable cases.

I have found two solutions (hacks):