Toy project. Trying to use Django inside a Docker container for both local development and production deployment.

mimischi, updated 🕥 2022-12-08 00:56:02

Develop and deploy Django applications with Docker

This repository is used to test a new project layout to develop Django applications within Docker containers. To be very fancy, we're also using poetry.toml instead of requirements.txt for our Python dependencies. Deployment to production is handled by a remote Dokku instance.

Details

We're using Python 3.7-slim for the base image as a trade-off of container size and build time. Further we utilize poetry to try out a new approach of Python requirement management.

Features

Develop inside of Docker containers! (Both Django and PostgreSQL run inside of their own containers)
Django runserver_plus is sequentially restarted, if the application crashes for any reason.
Use Makefile for common commands (docker-compose build, python manage.py makemessages, ...).
Uses WhiteNoise to manage static files.
Run continuous integration of Travis-CI.
Deploy to Dokku for production.
Use Sentry for error reporting on your production instance.
Psssst! You can easily run your own Sentry instance on Dokku!

Note: In the current layout, with the Dockerfile residing under ./docker/dokku/Dockerfile, you will need to install the dokku-dockerfile plugin and set the path accordingly.**

Planned

It would be neat to get Celery to work.

Usage

Local development

Running make build will download all required images (python:3.7-slim and postgresql:9.6-alpine) and build the app. Next you need to run make migrate to run all database migrations, after which you can actually start using this project. Running docker-compose up will collect all staticfiles and start both services. The app will be available via localhost:8000.

Deployment to production (via Dokku)

Prepare app on Dokku host

Before deployment, one needs to set up the app and PostgreSQL database on the Dokku host. For the sake of simplicity we're going to name the Dokku app djangodocker in this example.

```

Create app

$ dokku apps:create djangodocker

Create PostgreSQL database and link it to the app

$ dokku postgres:create djangodocker-postgres $ dokku postgres:link djangodocker-postgres djangodocker

Set the bare minimum configuration

$ dokku config:set --no-restart djangodocker DJANGO_ADMIN_URL="/admin" $ dokku config:set --no-restart djangodocker DJANGO_ALLOWED_HOSTS=djangodocker.example.com $ dokku config:set --no-restart djangodocker DJANGO_SECRET_KEY=$(echo openssl rand -base64 100 | tr -d \=+ | cut -c 1-64) $ dokku config:set --no-restart djangodocker DJANGO_SETTINGS_MODULE=config.settings.production $ dokku config:set --no-restart djangodocker DJANGO_SENTRY_DSN=https://your:[email protected]/1234

Make sure the plugin `dokku-dockerfile` is installed

$ dokku dockerfile:set djangodocker docker/dokku/Dockerfile ```

You may also need to set the domain using dokku domains:set djangodocker djangodocker.example.com.

Setup Dokku server as `git remote`

To successfully push your app to the Dokku host, you need to set up the server as a git remote:

git remote add dokku [email protected]:djangodocker

Deployment

Deploying the master branch of the app is straightforward:

git push dokku master

If you want to deploy another branch (e.g. newfeature), you need to use this syntax:

git push dokku newfeature:master

More information can be found in the official Dokku documentation.

Issues

Bump certifi from 2020.4.5.1 to 2022.12.7

opened on 2022-12-08 00:56:02 by dependabot[bot]

Bumps certifi from 2020.4.5.1 to 2022.12.7.

Commits

9e9e840 2022.12.07
b81bdb2 2022.09.24
939a28f 2022.09.14
aca828a 2022.06.15.2
de0eae1 Only use importlib.resources's new files() / Traversable API on Python ≥3.11 ...
b8eb5e9 2022.06.15.1
47fb7ab Fix deprecation warning on Python 3.11 (#199)
b0b48e0 fixes #198 -- update link in license
9d514b4 2022.06.15
4151e88 Add py.typed to MANIFEST.in to package in sdist (#196)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mimischi/django-docker/network/alerts).

Bump ipython from 7.13.0 to 7.16.3

opened on 2022-01-21 18:57:08 by dependabot[bot]

Bumps ipython from 7.13.0 to 7.16.3.

Commits

d43c7c7 release 7.16.3
5fa1e40 Merge pull request from GHSA-pq7m-3gw7-gq5x
8df8971 back to dev
9f477b7 release 7.16.2
138f266 bring back release helper from master branch
5aa3634 Merge pull request #13341 from meeseeksmachine/auto-backport-of-pr-13335-on-7...
bcae8e0 Backport PR #13335: What's new 7.16.2
8fcdcd3 Pin Jedi to <0.17.2.
2486838 release 7.16.1
20bdc6f fix conda build
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

Bump django from 3.0.7 to 3.1.12

opened on 2021-06-10 17:25:36 by dependabot[bot]

Bumps django from 3.0.7 to 3.1.12.

Commits

625d3c1 [3.1.x] Bumped version for 3.1.12 release.
203d4ab [3.1.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.
20c67a0 [3.1.x] Fixed CVE-2021-33203 -- Fixed potential path-traversal via admindocs'...
aa8781c [3.1.x] Confirmed release date for Django 3.1.12, and 2.2.24.
a4eb07a [3.1.x] Fixed typo in MiddlewareMixin deprecation note.
c7fdc79 [3.1.x] Added stub release notes and date for Django 3.1.12 and 2.2.24.
024e969 [3.1.x] Changed IRC references to Libera.Chat.
c53a76b [3.1.x] Post-release version bump.
6efdf1b [3.1.x] Bumped version for 3.1.11 release.
b7d4a6f [3.1.x] Fixed #32718 -- Relaxed file name validation in FileField.
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

Bump urllib3 from 1.25.9 to 1.26.5

opened on 2021-06-01 21:22:42 by dependabot[bot]

Bumps urllib3 from 1.25.9 to 1.26.5.

Release notes

Sourced from urllib3's releases.

1.26.5

:warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap

Fixed deprecation warnings emitted in Python 3.10.

Updated vendored six library to 1.16.0.

Improved performance of URL parser when splitting the authority component.

If you or your organization rely on urllib3 consider supporting us via GitHub Sponsors

1.26.4

:warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap

Changed behavior of the default SSLContext when connecting to HTTPS proxy during HTTPS requests. The default SSLContext now sets check_hostname=True.

If you or your organization rely on urllib3 consider supporting us via GitHub Sponsors

1.26.3

:warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap

Fixed bytes and string comparison issue with headers (Pull #2141)

Changed ProxySchemeUnknown error message to be more actionable if the user supplies a proxy URL without a scheme (Pull #2107)

If you or your organization rely on urllib3 consider supporting us via GitHub Sponsors

1.26.2

:warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap

Fixed an issue where wrap_socket and CERT_REQUIRED wouldn't be imported properly on Python 2.7.8 and earlier (Pull #2052)

1.26.1

:warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap

Fixed an issue where two User-Agent headers would be sent if a User-Agent header key is passed as bytes (Pull #2047)

1.26.0

:warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap

Added support for HTTPS proxies contacting HTTPS servers (Pull #1923, Pull #1806)

Deprecated negotiating TLSv1 and TLSv1.1 by default. Users that still wish to use TLS earlier than 1.2 without a deprecation warning should opt-in explicitly by setting ssl_version=ssl.PROTOCOL_TLSv1_1 (Pull #2002) Starting in urllib3 v2.0: Connections that receive a DeprecationWarning will fail

Deprecated Retry options Retry.DEFAULT_METHOD_WHITELIST, Retry.DEFAULT_REDIRECT_HEADERS_BLACKLIST and Retry(method_whitelist=...) in favor of Retry.DEFAULT_ALLOWED_METHODS, Retry.DEFAULT_REMOVE_HEADERS_ON_REDIRECT, and Retry(allowed_methods=...) (Pull #2000) Starting in urllib3 v2.0: Deprecated options will be removed

... (truncated)

Changelog

Sourced from urllib3's changelog.

1.26.5 (2021-05-26)

Fixed deprecation warnings emitted in Python 3.10.

Updated vendored six library to 1.16.0.

Improved performance of URL parser when splitting the authority component.

1.26.4 (2021-03-15)

Changed behavior of the default SSLContext when connecting to HTTPS proxy during HTTPS requests. The default SSLContext now sets check_hostname=True.

1.26.3 (2021-01-26)

Fixed bytes and string comparison issue with headers (Pull #2141)

Changed ProxySchemeUnknown error message to be more actionable if the user supplies a proxy URL without a scheme. (Pull #2107)

1.26.2 (2020-11-12)

Fixed an issue where wrap_socket and CERT_REQUIRED wouldn't be imported properly on Python 2.7.8 and earlier (Pull #2052)

1.26.1 (2020-11-11)

Fixed an issue where two User-Agent headers would be sent if a User-Agent header key is passed as bytes (Pull #2047)

1.26.0 (2020-11-10)

NOTE: urllib3 v2.0 will drop support for Python 2. Read more in the v2.0 Roadmap <https://urllib3.readthedocs.io/en/latest/v2-roadmap.html>_.

Added support for HTTPS proxies contacting HTTPS servers (Pull #1923, Pull #1806)

Deprecated negotiating TLSv1 and TLSv1.1 by default. Users that still wish to use TLS earlier than 1.2 without a deprecation warning

... (truncated)

Commits

d161647 Release 1.26.5
2d4a3fe Improve performance of sub-authority splitting in URL
2698537 Update vendored six to 1.16.0
07bed79 Fix deprecation warnings for Python 3.10 ssl module
d725a9b Add Python 3.10 to GitHub Actions
339ad34 Use pytest==6.2.4 on Python 3.10+
f271c9c Apply latest Black formatting
1884878 [1.26] Properly proxy EOF on the SSLTransport test suite
a891304 Release 1.26.4
8d65ea1 Merge pull request from GHSA-5phf-pp7p-vc2r
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

Bump py from 1.8.1 to 1.10.0

opened on 2021-04-20 16:59:12 by dependabot[bot]

Bumps py from 1.8.1 to 1.10.0.

Changelog

Sourced from py's changelog.

1.10.0 (2020-12-12)

Fix a regular expression DoS vulnerability in the py.path.svnwc SVN blame functionality (CVE-2020-29651)

Update vendored apipkg: 1.4 => 1.5

Update vendored iniconfig: 1.0.0 => 1.1.1

1.9.0 (2020-06-24)

Add type annotation stubs for the following modules:

py.error

py.iniconfig

py.path (not including SVN paths)

py.io

py.xml

There are no plans to type other modules at this time.

The type annotations are provided in external .pyi files, not inline in the code, and may therefore contain small errors or omissions. If you use py in conjunction with a type checker, and encounter any type errors you believe should be accepted, please report it in an issue.

1.8.2 (2020-06-15)

On Windows, py.path.locals which differ only in case now have the same Python hash value. Previously, such paths were considered equal but had different hashes, which is not allowed and breaks the assumptions made by dicts, sets and other users of hashes.

Commits

e5ff378 Update CHANGELOG for 1.10.0
94cf44f Update vendored libs
5e8ded5 testing: comment out an assert which fails on Python 3.9 for now
afdffcc Rename HOWTORELEASE.rst to RELEASING.rst
2de53a6 Merge pull request #266 from nicoddemus/gh-actions
fa1b32e Merge pull request #264 from hugovk/patch-2
887d6b8 Skip test_samefile_symlink on pypy3 on Windows
e94e670 Fix test_comments() in test_source
fef9a32 Adapt test
4a694b0 Add GitHub Actions badge to README
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

Bump django-debug-toolbar from 2.2 to 2.2.1

opened on 2021-04-16 19:56:18 by dependabot[bot]

Bumps django-debug-toolbar from 2.2 to 2.2.1.

Changelog

Sourced from django-debug-toolbar's changelog.

2.2.1 (2021-04-14)

Fixed SQL Injection vulnerability, CVE-2021-30459. The toolbar now calculates a signature on all fields for the SQL select, explain, and analyze forms.

Commits

5e6750b Merge pull request from GHSA-pghf-347x-c2gj
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

Michael Gecht

Formerly PhD student @bio-phys.

GitHub Repository

python3 django docker dokku alpine travis-ci sentry django-docker

Toy project. Trying to use Django inside a Docker container for both local development and production deployment.

Develop and deploy Django applications with Docker

Details

Features

Planned

Usage

Local development

Deployment to production (via Dokku)

Prepare app on Dokku host

Create app

Create PostgreSQL database and link it to the app

Set the bare minimum configuration

Make sure the plugin dokku-dockerfile is installed

Setup Dokku server as git remote

Deployment

Issues

Bump certifi from 2020.4.5.1 to 2022.12.7

Bump ipython from 7.13.0 to 7.16.3

Bump django from 3.0.7 to 3.1.12

Bump urllib3 from 1.25.9 to 1.26.5

1.26.5

1.26.4

1.26.3

1.26.2

1.26.1

1.26.0

1.26.5 (2021-05-26)

1.26.4 (2021-03-15)

1.26.3 (2021-01-26)

1.26.2 (2020-11-12)

1.26.1 (2020-11-11)

1.26.0 (2020-11-10)

Bump py from 1.8.1 to 1.10.0

1.10.0 (2020-12-12)

1.9.0 (2020-06-24)

1.8.2 (2020-06-15)

Bump django-debug-toolbar from 2.2 to 2.2.1

2.2.1 (2021-04-14)

Michael Gecht

Make sure the plugin `dokku-dockerfile` is installed

Setup Dokku server as `git remote`