From a72e23e9e0dc1f39f2f000a90284d81104e6a74f Mon Sep 17 00:00:00 2001
From: Warren Chen <minchen898@gmail.com>
Date: Tue, 25 Nov 2025 11:03:21 +0900
Subject: [PATCH] Update Docker configuration and production settings for
 improved environment management

---
 .DS_Store                                   | Bin 0 -> 6148 bytes
 innovedus_cms/.dockerignore                 |   8 ++++++++
 innovedus_cms/Dockerfile                    |   1 +
 innovedus_cms/mysite/settings/production.py |  17 +++++++++++++++++
 4 files changed, 26 insertions(+)
 create mode 100644 .DS_Store

diff --git a/.DS_Store b/.DS_Store
new file mode 100644
index 0000000000000000000000000000000000000000..b122e570227c23644a612c8348e7c9c705342a3a
GIT binary patch
literal 6148
zcmeHK!A`<J5S>Mo5<|j46ONmBB?^ir#!E#!c(q0kYLHr@jipN{g##h!S%1hc@pp7)
zcQG2&qY^ViX5TP7v+ce%I~@QJ%`~V3lmWm&CCn9Z_(Eu&bWU>CvxF%08YAdJ04XHU
zo{MJ3A~HbFt^^^(_*3xl`Q1Vfl9Nc?`jPT6ie8aJ)Xi5dX#JS!kCVR5eD?cMm<(&R
z7m-`aFRv7wg0t#ed-rPW4Lid$X?6ye^zTfm$e-CA|2*uD+vT+*6%RXM+#TqIFz8~)
z)kPQwYTQ(593(o|GZRkHDYna%$z-?DsLGvsV_KDy{q0&+Hg@)=)1tG!v2}3Teu#Rp
zdenOWf$y%ClEoQ3q45JZBX1B#D!#+0*$T5vMrME+U<MYO0efmWtBZY`e0R(MGw=rt
z(D@)y30;esL49=Kpj!aMJi4`@O&^MsBQ3fXGlMvTB1|fxNfoxm5GEb{(#E+KGlM1_
zgl#^Ay|S<!iqKcb^`#C6;Tq(T8DIuJGeEr`N}1~a@%R0|4&s3sU<Upt10vt@T20)W
zt*vvrq*^OcZ%|1nE;IO^f`%@|7)zzNf~p1mk_<%GVrCFMDEuLyY2bkw_*Dkp06=$N
Ar~m)}

literal 0
HcmV?d00001

diff --git a/innovedus_cms/.dockerignore b/innovedus_cms/.dockerignore
index b7c39d7..51cb76f 100644
--- a/innovedus_cms/.dockerignore
+++ b/innovedus_cms/.dockerignore
@@ -1,3 +1,11 @@
 fly.toml
 .git/
+__pycache__/
+*.py[cod]
+.venv/
+.env
+.env.*
 *.sqlite3
+*.log
+media/
+static/
diff --git a/innovedus_cms/Dockerfile b/innovedus_cms/Dockerfile
index 3c36327..5015c92 100644
--- a/innovedus_cms/Dockerfile
+++ b/innovedus_cms/Dockerfile
@@ -4,6 +4,7 @@ FROM python:${PYTHON_VERSION}
 
 ENV PYTHONDONTWRITEBYTECODE 1
 ENV PYTHONUNBUFFERED 1
+ENV DJANGO_SETTINGS_MODULE=mysite.settings.production
 
 RUN mkdir -p /code
 
diff --git a/innovedus_cms/mysite/settings/production.py b/innovedus_cms/mysite/settings/production.py
index efc862f..f08a8f9 100644
--- a/innovedus_cms/mysite/settings/production.py
+++ b/innovedus_cms/mysite/settings/production.py
@@ -1,3 +1,7 @@
+import os
+
+from django.core.exceptions import ImproperlyConfigured
+
 from .base import *
 
 DEBUG = False
@@ -8,6 +12,19 @@ DEBUG = False
 # See https://docs.djangoproject.com/en/5.2/ref/contrib/staticfiles/#manifeststaticfilesstorage
 STORAGES["staticfiles"]["BACKEND"] = "django.contrib.staticfiles.storage.ManifestStaticFilesStorage"
 
+def _csv(key, fallback):
+    value = os.getenv(key, fallback)
+    return [item.strip() for item in value.split(",") if item.strip()]
+
+
+SECRET_KEY = os.getenv("DJANGO_SECRET_KEY")
+if not SECRET_KEY:
+    raise ImproperlyConfigured("DJANGO_SECRET_KEY must be set in production.")
+
+ALLOWED_HOSTS = _csv("DJANGO_ALLOWED_HOSTS", "innovedus-cms.fly.dev")
+CSRF_TRUSTED_ORIGINS = _csv("DJANGO_CSRF_TRUSTED_ORIGINS", "https://innovedus-cms.fly.dev")
+WAGTAILADMIN_BASE_URL = os.getenv("WAGTAILADMIN_BASE_URL", WAGTAILADMIN_BASE_URL)
+
 try:
     from .local import *
 except ImportError: