From dda7a14543456e069ee010553aed1668f936e7a4 Mon Sep 17 00:00:00 2001 From: Disassembler Date: Sun, 6 Mar 2022 14:43:47 +0100 Subject: [PATCH] Set default template --- .env | 13 + sahana/Dockerfile | 9 +- sahana/image.d/entrypoint.sh | 10 +- .../applications/eden/models/000_config.py | 250 ++++++++++++++++++ 4 files changed, 280 insertions(+), 2 deletions(-) create mode 100644 sahana/image.d/srv/web2py/applications/eden/models/000_config.py diff --git a/.env b/.env index 3b9862c..520cda3 100644 --- a/.env +++ b/.env @@ -1,3 +1,16 @@ POSTGRES_USER=sahana POSTGRES_PASSWORD=sahana POSTGRES_DB=sahana +POSTGRES_HOST=sahana-postgres + +SAHANA_HMAC_KEY=akeytochange + +SAHANA_MAIL_HOST=127.0.0.1:25 +SAHANA_MAIL_SENDER="'Sahana' " +SAHANA_MAIL_APPROVER=useradmin@example.org + +SAHANA_API_KEY_GOOGLE= +SAHANA_API_KEY_OPENWEATHERMAP= + +SAHANA_ADMIN_USER=admin +SAHANA_ADMIN_PASSWORD=sahana diff --git a/sahana/Dockerfile b/sahana/Dockerfile index b348e9b..20ecd43 100644 --- a/sahana/Dockerfile +++ b/sahana/Dockerfile @@ -12,7 +12,7 @@ RUN \ RUN \ # Install build dependencies - apk --no-cache add --virtual .deps build-base freetype-dev git py3-numpy-dev python3-dev ttf-dejavu && \ + apk --no-cache add --virtual .deps build-base cargo freetype-dev git libffi-dev py3-numpy-dev openssl-dev python3-dev ttf-dejavu && \ # Install web2py 2.21.2 # See https://github.com/sahana/eden/blob/master/tests/travis/install_web2py.sh git clone --recursive git://github.com/web2py/web2py.git /srv/web2py && \ @@ -30,6 +30,9 @@ RUN \ pip3 install -r /srv/web2py/applications/eden/optional_requirements.txt && \ # Hackfix paths for ansible and other modules with hardcoded paths ln -s /srv/web2py /home/prod && \ + # Copy fonts with Czech glyphs + cp /usr/share/fonts/ttf-dejavu/DejaVuSerif-Bold.ttf /srv/web2py/applications/eden/static/fonts/Helvetica-Bold.ttf && \ + cp /usr/share/fonts/ttf-dejavu/DejaVuSerif.ttf /srv/web2py/applications/eden/static/fonts/Helvetica.ttf && \ # Create OS user addgroup -S -g 8080 sahana && \ adduser -S -u 8080 -h /srv/web2py -s /bin/false -g sahana -G sahana sahana && \ @@ -41,6 +44,10 @@ RUN \ COPY image.d / +RUN \ + # Change ownership of the newly copied files + chown -R sahana:sahana /srv/web2py + ENTRYPOINT ["/entrypoint.sh"] EXPOSE 8080 VOLUME ["/srv/web2py/applications/eden/models", "/srv/web2py/applications/eden/databases", "/srv/web2py/applications/eden/errors", "/srv/web2py/applications/eden/sessions", "/srv/web2py/applications/eden/uploads"] diff --git a/sahana/image.d/entrypoint.sh b/sahana/image.d/entrypoint.sh index 2366229..1a69c42 100755 --- a/sahana/image.d/entrypoint.sh +++ b/sahana/image.d/entrypoint.sh @@ -7,7 +7,15 @@ fi echo "Starting Sahana Eden..." -# Upgrade database +# Create admin user CSV template +cat </srv/web2py/applications/eden/modules/templates/default/users/masterUsers.csv +First Name,Last Name,Email,Password,Role,Organisation +Admin,User,${SAHANA_ADMIN_USER},${SAHANA_ADMIN_PASSWORD},ADMIN, +EOF +unset SAHANA_ADMIN_USER +unset SAHANA_ADMIN_PASSWORD + +# Populate or upgrade database /usr/local/bin/migrate norestart # Exec into s6 supervisor diff --git a/sahana/image.d/srv/web2py/applications/eden/models/000_config.py b/sahana/image.d/srv/web2py/applications/eden/models/000_config.py new file mode 100644 index 0000000..46c95c7 --- /dev/null +++ b/sahana/image.d/srv/web2py/applications/eden/models/000_config.py @@ -0,0 +1,250 @@ +# -*- coding: utf-8 -*- + +""" + Machine-specific settings + All settings which are typically edited for a specific machine should be done here + + Deployers should ideally not need to edit any other files outside of their template folder + + Note for Developers: + /models/000_config.py is NOT in the Git repository, to avoid leaking of + sensitive or irrelevant information into the repository. + For changes to be committed, please also edit: + modules/templates/000_config.py +""" + +import os + +# Remove this line when you have edited this file sufficiently to proceed to the web interface +FINISHED_EDITING_CONFIG_FILE = True + +# Select the Template +# - which Modules are enabled +# - PrePopulate data +# - Security Policy +# - Workflows +# - Theme +# - note that you should restart your web2py after changing this setting +settings.base.template = "default" + +# Database settings +# Uncomment to use a different database, other than sqlite +settings.database.db_type = "postgres" +#settings.database.db_type = "mysql" +# Uncomment to use a different host +settings.database.host = os.getenv("POSTGRES_HOST", "localhost") +# Uncomment to use a different port +#settings.database.port = 3306 +#settings.database.port = 5432 +# Uncomment to select a different name for your database +settings.database.database = os.getenv("POSTGRES_DB", "sahana") +# Uncomment to select a different username for your database +settings.database.username = os.getenv("POSTGRES_USER", "sahana") +# Uncomment to set the password +# NB Web2Py doesn't like passwords with an @ in them +settings.database.password = os.getenv("POSTGRES_PASSWORD", "password") +# Uncomment to use a different pool size +#settings.database.pool_size = 30 +# Do we have a spatial DB available? (currently supports PostGIS. Spatialite to come.) +settings.gis.spatialdb = True + +# Base settings +#settings.base.system_name = T("Sahana Eden Humanitarian Management Platform") +#settings.base.system_name_short = T("Sahana Eden") +# Set this to the Public URL of the instance +#settings.base.public_url = "http://127.0.0.1:8000" + +# Switch to "False" in Production for a Performance gain +# (need to set to "True" again when Table definitions are changed) +settings.base.migrate = True +# To just create the .table files (also requires migrate=True): +#settings.base.fake_migrate = True + +# Set this to True to switch to Debug mode +# Debug mode means that uncompressed CSS/JS files are loaded +# JS Debug messages are also available in the Console +# can also load an individual page in debug mode by appending URL with +# ?debug=1 +settings.base.debug = True + +# Uncomment this to prevent automated test runs from remote +# settings.base.allow_testing = False + +# Configure the log level ("DEBUG", "INFO", "WARNING", "ERROR" or "CRITICAL"), None = turn off logging (default) +#settings.log.level = "ERROR" # DEBUG set automatically when base.debug is True +# Uncomment to prevent writing log messages to the console (sys.stderr) +#settings.log.console = False +# Configure a log file (file name) +#settings.log.logfile = None +# Uncomment to get detailed caller information +#settings.log.caller_info = True + +# Uncomment to use Content Delivery Networks to speed up Internet-facing sites +#settings.base.cdn = True + +# Allow language files to be updated automatically +#settings.L10n.languages_readonly = False + +# This setting should be changed _before_ registering the 1st user +# - should happen automatically if installing using supported scripts +settings.auth.hmac_key = os.getenv("SAHANA_HMAC_KEY", "akeytochange") + +# If using Masterkey Authentication, then set this to a deployment-specific 32 char string: +#settings.auth.masterkey_app_key = "randomstringrandomstringrandomstring" + +# Minimum Password Length +#settings.auth.password_min_length = 8 + +# Email settings +# Outbound server +settings.mail.server = os.getenv("SAHANA_MAIL_HOST", "127.0.0.1:25") +#settings.mail.tls = True +# Useful for Windows Laptops: +# https://www.google.com/settings/security/lesssecureapps +#settings.mail.server = "smtp.gmail.com:587" +#settings.mail.tls = True +#settings.mail.login = "username:password" +# From Address - until this is set, no mails can be sent +settings.mail.sender = os.getenv("SAHANA_MAIL_SENDER", "'Sahana' ") +# Default email address to which requests to approve new user accounts gets sent +# This can be overridden for specific domains/organisations via the auth_domain table +settings.mail.approver = os.getenv("SAHANA_MAIL_APPROVER", "useradmin@example.org") +# Daily Limit on Sending of emails +#settings.mail.limit = 1000 + +# Uncomment to restrict to specific country/countries +#settings.gis.countries= ("LK",) + +# Bing API Key (for Map layers) +# http://www.microsoft.com/maps/create-a-bing-maps-key.aspx +#settings.gis.api_bing = "" +# GetAddress API Key (for GetAddress.io Postcode to Address lookup) +#settings.gis.api_getaddress = "" +# Google API Key (for Google Maps Layers) +settings.gis.api_google = os.getenv("SAHANA_API_KEY_GOOGLE", "") +# OpenWeatherMap API Key (for OpenWeatherMap Layers) +settings.gis.api_openweathermap = os.getenv("SAHANA_API_KEY_OPENWEATHERMAP", "") + +# GeoNames username +#settings.gis.geonames_username = "" + +# Fill this in to get a Facebook Pixel for your site +#settings.base.facebook_pixel_id = "" +# Fill this in to get Google Analytics for your site +#settings.base.google_analytics_tracking_id = "" + +# Chat server, see: http://eden.sahanafoundation.org/wiki/InstallationGuidelines/Chat +#settings.base.chat_server = { +# "ip": "127.0.0.1", +# "port": 7070, +# "name": "servername", +# # Default group everyone is added to +# "groupname" : "everyone", +# "server_db" : "openfire", +# # These settings fallback to main DB settings if not specified +# # Only mysql/postgres supported +# #"server_db_type" : "mysql", +# #"server_db_username" : "", +# #"server_db_password": "", +# #"server_db_port" : 3306, +# #"server_db_ip" : "127.0.0.1", +# } + +# GeoServer (Currently used by GeoExplorer. Will allow REST control of GeoServer.) +# NB Needs to be publically-accessible URL for querying via client JS +#settings.gis.geoserver_url = "http://localhost/geoserver" +#settings.gis.geoserver_username = "admin" +#settings.gis.geoserver_password = "" +# Print Service URL: http://eden.sahanafoundation.org/wiki/BluePrintGISPrinting +#settings.gis.print_service = "/geoserver/pdf/" + +# Google OAuth (to allow users to login using Google) +# https://code.google.com/apis/console/ +#settings.auth.google_id = "" +#settings.auth.google_secret = "" + +# Pootle server +# settings.L10n.pootle_url = "http://pootle.sahanafoundation.org/" +# settings.L10n.pootle_username = "username" +# settings.L10n.pootle_password = "*****" + +# SOLR server for Full-Text Search +#settings.base.solr_url = "http://127.0.0.1:8983/solr/" + +# Memcache server to allow sharing of sessions across instances +#settings.base.session_memcache = '127.0.0.1:11211' + +settings.base.session_db = True + +# UI options +# Should user be prompted to save before navigating away? +#settings.ui.navigate_away_confirm = False +# Should user be prompted to confirm actions? +#settings.ui.confirm = False +# Should potentially large dropdowns be turned into autocompletes? +# (unused currently) +#settings.ui.autocomplete = True +#settings.ui.read_label = "Details" +#settings.ui.update_label = "Edit" + +# Audit settings +# - can be a callable for custom hooks (return True to also perform normal logging, or False otherwise) +# NB Auditing (especially Reads) slows system down & consumes diskspace +#settings.security.audit_write = False +#settings.security.audit_read = False + +# Performance Options +# Maximum number of search results for an Autocomplete Widget +#settings.search.max_results = 200 +# Maximum number of features for a Map Layer +#settings.gis.max_features = 1000 + +# CAP Settings +# Change for different authority and organisations +# See http://alerting.worldweather.org/ for oid +# Country root oid. The oid for the organisation includes this base +#settings.cap.identifier_oid = "2.49.0.0.608.0" +# Set the period (in days) after which alert info segments expire (default=2) +#settings.cap.info_effective_period = 2 + +# ============================================================================= +# Import the settings from the Template +# - note: invalid settings are ignored +# +settings.import_template() + +# ============================================================================= +# Over-rides to the Template may be done here +# + +# e.g. +#settings.security.self_registration = True +#settings.base.system_name = T("Sahana TEST") +#settings.base.prepopulate = ("MY_TEMPLATE_ONLY") +#settings.base.prepopulate += ("default", "default/users") +#settings.base.theme = "default" +#settings.L10n.default_language = "en" +#settings.security.policy = 7 # Organisation-ACLs +# Enable Additional Module(s) +#from gluon.storage import Storage +#settings.modules["delphi"] = Storage( +# name_nice = T("Delphi Decision Maker"), +# restricted = False, +# module_type = 10, +# ) +# Disable a module which is normally used by the template +# - NB Only templates with adaptive menus will work nicely with this! +#del settings.modules["irs"] + +# Production instances should set this before prepopulate is run +#settings.base.prepopulate_demo = 0 + +# After 1st_run, set this for Production to save 1x DAL hit/request +#settings.base.prepopulate = 0 + +# ============================================================================= +# A version number to tell update_check if there is a need to refresh the +# running copy of this file +VERSION = 1 + +# END =========================================================================