from pathlib import Path import os from dotenv import load_dotenv BASE_DIR = Path(__file__).resolve().parent.parent # ====================================================== # BRAND / LETTERHEAD CONSTANTS (used by Staff PDF exports) # You can override any of these via environment variables. # ====================================================== # Explicit selection wins. Direct VS Code commands use the local file when # available and no production .env is present. Never generate production secrets. _env_file = os.getenv("TELEHEALTH_ENV_FILE", "").strip() if _env_file: load_dotenv(Path(_env_file), override=False) elif os.getenv("TELEHEALTH_LOCAL_DEV", "").lower() in {"1", "true"}: load_dotenv(BASE_DIR / ".env.local", override=False) elif (BASE_DIR / ".env").exists(): load_dotenv(BASE_DIR / ".env", override=False) elif (BASE_DIR / ".env.local").exists(): load_dotenv(BASE_DIR / ".env.local", override=False) SITE_NAME = os.getenv("SITE_NAME", "Telehealthscare Services") SITE_SHORT = os.getenv("SITE_SHORT", "Telehealthscare") SITE_PHONE = os.getenv("SITE_PHONE", "+234 813 378 2079") SITE_EMAIL = os.getenv("SITE_EMAIL", "holisticcaregiverservicesltd@gmail.com") SITE_ADDRESS = os.getenv("SITE_ADDRESS", "") SITE_WATERMARK = os.getenv("SITE_WATERMARK", SITE_SHORT) # ----------------------------------------------------------------------------- # SECURITY (Windows-friendly .env optional) # ----------------------------------------------------------------------------- # Accept common .env boolean spellings; local mode is explicitly opt-in. def _env_true(name, default="0"): return os.getenv(name, default).strip().lower() in {"1", "true", "yes", "on"} DEBUG = _env_true("DJANGO_DEBUG") SECRET_KEY = os.getenv("DJANGO_SECRET_KEY", "").strip() if not SECRET_KEY: if DEBUG and _env_true("TELEHEALTH_LOCAL_DEV"): # Never use this fallback in production. Local launcher supplies a unique key. SECRET_KEY = "local-only-unsafe-fallback-change-me" else: raise RuntimeError("DJANGO_SECRET_KEY is missing. Run START_LOCAL_WINDOWS.bat for local setup or set a strong private production secret.") ALLOWED_HOSTS = [h.strip() for h in os.getenv("DJANGO_ALLOWED_HOSTS", "127.0.0.1,localhost").split(",") if h.strip()] # ----------------------------------------------------------------------------- # APPS # ----------------------------------------------------------------------------- INSTALLED_APPS = [ 'channels', # Daphne removed from cPanel WSGI installed apps; ASGI requires separate hosting. "django.contrib.admin", "django.contrib.auth", "django.contrib.contenttypes", "django.contrib.sessions", "django.contrib.messages", "django.contrib.staticfiles", "website", "emr.apps.EmrConfig", ] MIDDLEWARE = [ "django.middleware.security.SecurityMiddleware", "whitenoise.middleware.WhiteNoiseMiddleware", "django.contrib.sessions.middleware.SessionMiddleware", "django.middleware.common.CommonMiddleware", "django.middleware.csrf.CsrfViewMiddleware", "django.contrib.auth.middleware.AuthenticationMiddleware", "website.staff_access.StaffPortalAccessMiddleware", "emr.middleware.CurrentRequestMiddleware", "django.contrib.messages.middleware.MessageMiddleware", "django.middleware.clickjacking.XFrameOptionsMiddleware", ] ROOT_URLCONF = "config.urls" TEMPLATES = [ { "BACKEND": "django.template.backends.django.DjangoTemplates", "DIRS": [BASE_DIR / "website" / "templates"], "APP_DIRS": True, "OPTIONS": { "context_processors": [ "django.template.context_processors.debug", "django.template.context_processors.request", "django.contrib.auth.context_processors.auth", "django.contrib.messages.context_processors.messages", "website.context_processors.site_settings", ], }, }, ] WSGI_APPLICATION = "config.wsgi.application" # Production security: enable HTTPS flags only after SSL is installed. CSRF_TRUSTED_ORIGINS = [v.strip() for v in os.getenv("DJANGO_CSRF_TRUSTED_ORIGINS", "").split(",") if v.strip()] SECURE_SSL_REDIRECT = not DEBUG and os.getenv("DJANGO_SECURE_SSL_REDIRECT", "0") == "1" SESSION_COOKIE_SECURE = not DEBUG CSRF_COOKIE_SECURE = not DEBUG SECURE_CONTENT_TYPE_NOSNIFF = True SECURE_REFERRER_POLICY = "strict-origin-when-cross-origin" SECURE_HSTS_SECONDS = int(os.getenv("DJANGO_SECURE_HSTS_SECONDS", "0")) if not DEBUG else 0 SECURE_HSTS_INCLUDE_SUBDOMAINS = False SECURE_HSTS_PRELOAD = False # Only enable when the trusted host's reverse proxy sets this header correctly. if os.getenv("DJANGO_TRUST_PROXY_HTTPS", "0") == "1": SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https") # ----------------------------------------------------------------------------- # DATABASE (Default SQLite; can switch to MySQL later) # ----------------------------------------------------------------------------- DATABASES = { "default": { "ENGINE": ("django.db.backends.mysql" if os.getenv("DB_ENGINE", "django.db.backends.sqlite3").strip().lower() in {"mysql", "mysql.connector", "django.db.backends.mysql"} else os.getenv("DB_ENGINE", "django.db.backends.sqlite3").strip()), "NAME": (str(BASE_DIR / os.getenv("DB_NAME", "db.sqlite3")) if os.getenv("DB_ENGINE", "django.db.backends.sqlite3").strip().lower() in {"sqlite", "sqlite3", "django.db.backends.sqlite3"} and not Path(os.getenv("DB_NAME", "db.sqlite3")).is_absolute() else os.getenv("DB_NAME", str(BASE_DIR / "db.sqlite3"))), "USER": os.getenv("DB_USER", ""), "PASSWORD": os.getenv("DB_PASSWORD", ""), "HOST": os.getenv("DB_HOST", ""), "PORT": os.getenv("DB_PORT", ""), } } # ----------------------------------------------------------------------------- # PASSWORDS # ----------------------------------------------------------------------------- AUTH_PASSWORD_VALIDATORS = [ {"NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator"}, {"NAME": "django.contrib.auth.password_validation.MinimumLengthValidator"}, {"NAME": "django.contrib.auth.password_validation.CommonPasswordValidator"}, {"NAME": "django.contrib.auth.password_validation.NumericPasswordValidator"}, ] # ----------------------------------------------------------------------------- # I18N # ----------------------------------------------------------------------------- LANGUAGE_CODE = "en-us" TIME_ZONE = "Africa/Lagos" USE_I18N = True USE_TZ = True # ----------------------------------------------------------------------------- # STATIC/MEDIA # ----------------------------------------------------------------------------- # ----------------------------------------------------------------------------- # STATIC / MEDIA # ----------------------------------------------------------------------------- STORAGES = { "default": {"BACKEND": "django.core.files.storage.FileSystemStorage"}, "staticfiles": {"BACKEND": "whitenoise.storage.CompressedManifestStaticFilesStorage"}, } STATIC_URL = "/static/" STATICFILES_DIRS = [BASE_DIR / "website" / "static"] STATIC_ROOT = BASE_DIR / "staticfiles" MEDIA_URL = "/media/" MEDIA_ROOT = BASE_DIR / "media" DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField" # STATICFILES_STORAGE = "whitenoise.storage.CompressedManifestStaticFilesStorage" # ----------------------------------------------------------------------------- # EMAIL (Console by default; set SMTP env vars for production) # ----------------------------------------------------------------------------- EMAIL_BACKEND = os.getenv( "EMAIL_BACKEND", "django.core.mail.backends.smtp.EmailBackend" if os.getenv("EMAIL_HOST") else "django.core.mail.backends.console.EmailBackend", ) DEFAULT_FROM_EMAIL = os.getenv("DEFAULT_FROM_EMAIL", "no-reply@holisticcaregiverservicesltd.com") ADMIN_NOTIFY_EMAIL = os.getenv("ADMIN_NOTIFY_EMAIL", "holisticcaregiverservicesltd@gmail.com") # ----------------------------------------------------------------------------- # WhatsApp Business (Meta Cloud API) - Optional # ----------------------------------------------------------------------------- WHATSAPP_CLOUD_TOKEN = os.getenv("WHATSAPP_CLOUD_TOKEN", "") WHATSAPP_PHONE_NUMBER_ID = os.getenv("WHATSAPP_PHONE_NUMBER_ID", "") WHATSAPP_VERIFY_TOKEN = os.getenv("WHATSAPP_VERIFY_TOKEN", "change-me") WHATSAPP_DEFAULT_ROUTE = os.getenv("WHATSAPP_DEFAULT_ROUTE", os.getenv("SITE_WHATSAPP", "+2349042510114")) # Comma-separated: enquiry_type=+234..., enquiry_type2=+234... WHATSAPP_ROUTING_RULES = os.getenv("WHATSAPP_ROUTING_RULES", "") # Support SLA SUPPORT_SLA_MINUTES = int(os.getenv('SUPPORT_SLA_MINUTES', '15') or '15') WHATSAPP_SUPPORT_ROUTE = os.getenv('WHATSAPP_SUPPORT_ROUTE', os.getenv('WHATSAPP_DEFAULT_ROUTE', '')) # Public base URL for building links in WhatsApp messages (e.g. https://holisticcaregiverservices.com) SITE_BASE_URL = os.getenv('SITE_BASE_URL', '') # SMTP settings (set in .env) EMAIL_HOST = os.getenv("EMAIL_HOST", "") EMAIL_PORT = int(os.getenv("EMAIL_PORT", "587")) EMAIL_HOST_USER = os.getenv("EMAIL_HOST_USER", "") EMAIL_HOST_PASSWORD = os.getenv("EMAIL_HOST_PASSWORD", "") EMAIL_USE_TLS = os.getenv("EMAIL_USE_TLS", "1") == "1" # Paystack PAYSTACK_PUBLIC_KEY = os.getenv("PAYSTACK_PUBLIC_KEY", "") PAYSTACK_SECRET_KEY = os.getenv("PAYSTACK_SECRET_KEY", "") PAYSTACK_TELEHEALTH_FEE_NGN = int(os.getenv("PAYSTACK_TELEHEALTH_FEE_NGN", "0")) PAYSTACK_CARE_REQUEST_FEE_NGN = int(os.getenv("PAYSTACK_CARE_REQUEST_FEE_NGN", "0")) # Channels / WebSocket ASGI_APPLICATION = 'config.asgi.application' import os as _os REDIS_URL = _os.getenv("REDIS_URL", "").strip() if REDIS_URL: CHANNEL_LAYERS = { "default": { "BACKEND": "channels_redis.core.RedisChannelLayer", "CONFIG": {"hosts": [REDIS_URL]}, } } else: CHANNEL_LAYERS = {"default": {"BACKEND": "channels.layers.InMemoryChannelLayer"}} # SLA Timers (minutes) SLA_SUPPORT_MINS = int(os.getenv('SLA_SUPPORT_MINS', '60')) SLA_CARE_MINS = int(os.getenv('SLA_CARE_MINS', '120')) # Dedicated operational staff sign-in (Django admin remains separate). LOGIN_URL = "website:staff_login"