""" Django settings for job_portal project. Generated by 'django-admin startproject' using Django 6.0.1. For more information on this file, see https://docs.djangoproject.com/en/6.0/topics/settings/ For the full list of settings and their values, see https://docs.djangoproject.com/en/6.0/ref/settings/ """ import os from pathlib import Path import pymysql pymysql.version_info = (2, 2, 8, 'final', 0) pymysql.install_as_MySQLdb() # Build paths inside the project like this: BASE_DIR / 'subdir'. BASE_DIR = Path(__file__).resolve().parent.parent # Quick-start development settings - unsuitable for production # See https://docs.djangoproject.com/en/6.0/howto/deployment/checklist/ # SECURITY WARNING: keep the secret key used in production secret! SECRET_KEY = os.environ.get('DJANGO_SECRET', 'fallback-key-for-dev-only') # SECURITY WARNING: don't run with debug turned on in production! DEBUG = False #os.environ.get('DJANGO_DEBUG', 'False') == 'True' ALLOWED_HOSTS = ['videshchalo.com', 'www.videshchalo.com', 'premium25.web-hosting.com', 'jobs.videshchalo.com', 'travels.videshchalo.com', 'study.videshchalo.com'] CSRF_TRUSTED_ORIGINS = [ 'https://videshchalo.com', 'https://www.videshchalo.com', 'https://jobs.videshchalo.com', # https:// add karo 'https://travels.videshchalo.com', 'https://study.videshchalo.com' ] # Application definition INSTALLED_APPS = [ 'django.contrib.admin', 'django.contrib.auth', 'django.contrib.contenttypes', 'django.contrib.sessions', 'django.contrib.messages', 'django.contrib.staticfiles', 'django.contrib.sites', 'allauth', 'allauth.account', 'allauth.socialaccount', 'allauth.socialaccount.providers.google', 'jobs', 'blog', 'travels', 'study', 'ckeditor', 'ckeditor_uploader', 'adminsortable2', ] CKEDITOR_CONFIGS = { 'default': { 'toolbar': 'full', 'skin': 'moono-lisa', 'extraPlugins': ','.join(['uploadimage', 'filebrowser']), 'height': 300, 'width': '100%', 'entities': False, # ✅ Isse emojis as-it-is database mein jayenge 'basicEntities': False, }, } MIDDLEWARE = [ 'django.middleware.security.SecurityMiddleware', 'django.contrib.sessions.middleware.SessionMiddleware', 'django.middleware.common.CommonMiddleware', 'django.middleware.csrf.CsrfViewMiddleware', 'django.contrib.auth.middleware.AuthenticationMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.middleware.clickjacking.XFrameOptionsMiddleware', 'allauth.account.middleware.AccountMiddleware', 'jobs.middleware.VideshChaloMiddleware', ] DATA_UPLOAD_MAX_MEMORY_SIZE = 10485760 # 10MB in bytes FILE_UPLOAD_MAX_MEMORY_SIZE = 10485760 APPEND_SLASH = True SESSION_SAVE_EVERY_REQUEST = True # CKEditor 4 EOL warning ko silence karne ke liye SILENCED_SYSTEM_CHECKS = ["ckeditor.W001", "models.W036", "mysql.W003",] ROOT_URLCONF = 'job_portal.urls' TEMPLATES = [ { 'BACKEND': 'django.template.backends.django.DjangoTemplates', 'DIRS': [os.path.join(BASE_DIR, 'templates'), os.path.join(BASE_DIR, 'jobs', 'templates')], 'APP_DIRS': True, 'OPTIONS': { 'context_processors': [ 'django.template.context_processors.request', 'django.contrib.auth.context_processors.auth', 'django.contrib.messages.context_processors.messages', 'jobs.context_processors.pending_jobs_count', # Custom context processor for pending jobs count ], }, }, ] WSGI_APPLICATION = 'job_portal.wsgi.application' # Database # https://docs.djangoproject.com/en/6.0/ref/settings/#databases DATABASES = { 'default': { 'ENGINE': 'django.db.backends.mysql', 'NAME': os.environ.get('DB_NAME'), 'USER': os.environ.get('DB_USER'), 'PASSWORD': os.environ.get('DB_PASS'), 'HOST': 'localhost', 'PORT': '3306', 'OPTIONS': { 'charset': 'utf8mb4', 'use_unicode': True, 'init_command': "SET sql_mode='STRICT_TRANS_TABLES'", }, } } # Password validation # https://docs.djangoproject.com/en/6.0/ref/settings/#auth-password-validators AUTH_PASSWORD_VALIDATORS = [ # { # 'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator', #}, # { # 'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator', #}, # { # 'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator', # }, # { # 'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator', # }, ] # Internationalization # https://docs.djangoproject.com/en/6.0/topics/i18n/ LANGUAGE_CODE = 'en-us' TIME_ZONE = 'Asia/Kolkata' USE_I18N = True USE_TZ = True # CKEditor Upload configuration CKEDITOR_UPLOAD_PATH = "uploads/ckeditor/" CKEDITOR_IMAGE_BACKEND = "pillow" # Static files (CSS, JavaScript, Images) # https://docs.djangoproject.com/en/6.0/howto/static-files/ STATIC_URL = '/static/' STATIC_ROOT = '/home/videjviy/public_html/static' STATICFILES_DIRS = [ '/home/videjviy/videshchalo/static', ] MEDIA_URL = '/media/' MEDIA_ROOT = '/home/videjviy/public_html/media' EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend' AUTHENTICATION_BACKENDS = [ 'django.contrib.auth.backends.ModelBackend', 'allauth.account.auth_backends.AuthenticationBackend', ] SOCIAL_AUTH_GOOGLE_OAUTH2_KEY = os.environ.get('GOOGLE_KEY') SOCIAL_AUTH_GOOGLE_OAUTH2_SECRET = os.environ.get('GOOGLE_SECRET') SITE_URL = 'https://www.videshchalo.com' SITE_ID = 1 ACCOUNT_ADAPTER = 'allauth.account.adapter.DefaultAccountAdapter' LOGIN_URL = '/accounts/login/' LOGIN_REDIRECT_URL = '/' LOGOUT_REDIRECT_URL = '/' ACCOUNT_LOGIN_TEMPLATE = 'account/login.html' SOCIALACCOUNT_LOGIN_ON_GET = True SOCIALACCOUNT_QUERY_EMAIL = True ACCOUNT_EMAIL_VERIFICATION = "none" SOCIALACCOUNT_PROVIDERS = { 'google': { 'SCOPE': [ 'profile', 'email', ], 'AUTH_PARAMS': { 'access_type': 'online', } } } ACCOUNT_ADAPTER = 'jobs.adapter.MyAccountAdapter' AUTH_USER_MODEL = 'jobs.User' SOCIALACCOUNT_STORE_TOKENS = True # 1. Allauth Email Logic ACCOUNT_SIGNUP_FIELDS = ['email*', 'username*', 'password1*', 'password2*'] ACCOUNT_UNIQUE_EMAIL = True ACCOUNT_LOGIN_METHODS = {'email', 'username'} # 🛡️ MANDATORY VERIFICATION: Account tab tak activate nahi hoga jab tak link click na ho ACCOUNT_EMAIL_VERIFICATION = 'mandatory' # Verification process ko user-friendly banane ke liye ACCOUNT_CONFIRM_EMAIL_ON_GET = True # Link click karte hi confirm ho jaye (bina ek aur page dikhaye) ACCOUNT_LOGIN_ON_EMAIL_CONFIRMATION = True # Confirm hote hi banda login ho jaye ACCOUNT_EMAIL_CONFIRMATION_EXPIRE_DAYS = 3 # Link 3 din tak valid rahega # Email Configuration EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend' EMAIL_HOST = 'premium25.web-hosting.com' EMAIL_PORT = 587 EMAIL_USE_SSL = False EMAIL_USE_TLS = True EMAIL_HOST_USER = 'support@videshchalo.com' # Aapka email EMAIL_HOST_PASSWORD = os.environ.get('EMAIL_PASS') # Password DEFAULT_FROM_EMAIL = 'Videsh Chalo Support ' # ✅ FIX 2: Connection Timeout (Seconds mein). # Taaki server 100 seconds tak na larka rahe. EMAIL_TIMEOUT = 7 ADMINS = [('Admin', 'support@videshchalo.com')] MANAGERS = ADMINS # 3. ЁЯЫбя╕П SECURITY HEADERS (External attacks se bachne ke liye) # Ye Django ko batata hai ki site sirf HTTPS par chalni chahiye SECURE_BROWSER_XSS_FILTER = True SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https') SECURE_CONTENT_TYPE_NOSNIFF = True X_FRAME_OPTIONS = 'DENY' # Taaki koi aapki site ko iframe mein na dikha sake # Note: Ye tabhi on karein jab aapke paas SSL (HTTPS) ho (Jo aapke paas hai) SECURE_SSL_REDIRECT = True # Har HTTP request ko HTTPS par bhej dega PREPEND_WWW = True SESSION_COOKIE_SECURE = True CSRF_COOKIE_SECURE = True SECURE_HSTS_SECONDS = 31536000 # 1 saal ke liye HSTS enable SECURE_HSTS_INCLUDE_SUBDOMAINS = True SECURE_HSTS_PRELOAD = True LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'handlers': { 'console': { 'class': 'logging.StreamHandler', # File ki jagah console use karein }, }, 'root': { 'handlers': ['console'], 'level': 'ERROR', }, }