Firewall on Demand

# -*- coding: utf-8 -*- vim:fileencoding=utf-8:

# vim: tabstop=4:shiftwidth=4:softtabstop=4:expandtab

# Django settings for flowspy project.

# Copyright © 2011-2015 Greek Research and Technology Network (GRNET S.A.)

# Copyright © 2011-2014 Leonidas Poulopoulos (@leopoul)

# Copyright © 2014-2015 Stavros Kroustouris (@kroustou)

#

# Permission to use, copy, modify, and/or distribute this software for any

# purpose with or without fee is hereby granted, provided that the above

# copyright notice and this permission notice appear in all copies.

#

# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD

# TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND

# FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR

# CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,

# DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS

# ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS

# SOFTWARE.

import os

import djcelery

djcelery.setup_loader()

from celery.schedules import crontab

DEBUG = False

TEMPLATE_DEBUG = DEBUG

ADMINS = (

    ('AdminName', 'adminmail@admin.com'),

)

MANAGERS = ADMINS

here = lambda x: os.path.join(os.path.abspath(os.path.dirname(__file__)), x)

DATABASES = {

    'default': {

        'ENGINE': 'django.db.backends.', # Add 'postgresql_psycopg2', 'mysql', 'sqlite3' or 'oracle'.

        'NAME': '',                      # Or path to database file if using sqlite3.

        'USER': '',                      # Not used with sqlite3.

        'PASSWORD': '',                  # Not used with sqlite3.

        'HOST': '',                      # Set to empty string for localhost. Not used with sqlite3.

        'PORT': '',                      # Set to empty string for default. Not used with sqlite3.

    }

}

# Hosts/domain names that are valid for this site; required if DEBUG is False

# See https://docs.djangoproject.com/en/1.4/ref/settings/#allowed-hosts

ALLOWED_HOSTS = []

# Local time zone for this installation. Choices can be found here:

# http://en.wikipedia.org/wiki/List_of_tz_zones_by_name

# although not all choices may be available on all operating systems.

# In a Windows environment this must be set to your system time zone.

TIME_ZONE = 'Europe/Athens'

# Language code for this installation. All choices can be found here:

# http://www.i18nguy.com/unicode/language-identifiers.html

_ = lambda s: s

LANGUAGES = (

    ('el', _('Greek')),

    ('en', _('English')),

)

# Language code for this installation. All choices can be found here:

# http://www.i18nguy.com/unicode/language-identifiers.html

LANGUAGE_CODE = 'en'

LOCALE_PATHS = (

    os.path.join(os.path.dirname(os.path.dirname(os.path.abspath(__file__))), 'locale'),

)

SITE_ID = 1

# If you set this to False, Django will make some optimizations so as not

# to load the internationalization machinery.

USE_I18N = True

# If you set this to False, Django will not format dates, numbers and

# calendars according to the current locale.

USE_L10N = True

# If you set this to False, Django will not use timezone-aware datetimes.

USE_TZ = True

# Absolute filesystem path to the directory that will hold user-uploaded files.

# Example: "/home/media/media.lawrence.com/media/"

MEDIA_ROOT = ''

# URL that handles the media served from MEDIA_ROOT. Make sure to use a

# trailing slash.

# Examples: "http://media.lawrence.com/media/", "http://example.com/media/"

MEDIA_URL = ''

# Absolute path to the directory static files should be collected to.

# Don't put anything in this directory yourself; store your static files

# in apps' "static/" subdirectories and in STATICFILES_DIRS.

# Example: "/home/media/media.lawrence.com/static/"

STATIC_ROOT = '/path/to/projects/flowspy/static'

# URL prefix for static files.

# Example: "http://media.lawrence.com/static/"

STATIC_URL = 'https://example.com/static/'

# Additional locations of static files

STATICFILES_DIRS = (

    # Put strings here, like "/home/html/static" or "C:/www/django/static".

    # Always use forward slashes, even on Windows.

    # Don't forget to use absolute paths, not relative paths.

)

# List of finder classes that know how to find static files in

# various locations.

STATICFILES_FINDERS = (

    'django.contrib.staticfiles.finders.FileSystemFinder',

    'django.contrib.staticfiles.finders.AppDirectoriesFinder',

#    'django.contrib.staticfiles.finders.DefaultStorageFinder',

)

# Make this unique, and don't share it with anybody.

SECRET_KEY = '<PLACE RANDOM CHARS HERE>eg. @@5234#$%345345^@#$%*()123^@12!&!()$JMNDF#$@(@#8FRNJWX_'

# List of callables that know how to import templates from various sources.

TEMPLATE_LOADERS = (

    'django.template.loaders.filesystem.Loader',

    'django.template.loaders.app_directories.Loader',

#     'django.template.loaders.eggs.Loader',

)

TEMPLATE_CONTEXT_PROCESSORS = (

    "django.contrib.auth.context_processors.auth",

    "django.core.context_processors.debug",

    "django.core.context_processors.i18n",

    "django.core.context_processors.media",

    "django.core.context_processors.static",

    "django.contrib.messages.context_processors.messages",

    "context.global_vars.settings_vars",

)

MIDDLEWARE_CLASSES = (

    'django.middleware.cache.UpdateCacheMiddleware',

    'django.middleware.common.CommonMiddleware',

    'django.contrib.sessions.middleware.SessionMiddleware',

    'django.middleware.locale.LocaleMiddleware',

    'django.middleware.csrf.CsrfViewMiddleware',

    'django.contrib.auth.middleware.AuthenticationMiddleware',

    'django.contrib.messages.middleware.MessageMiddleware',

    # Uncomment the next line for simple clickjacking protection:

    # 'django.middleware.clickjacking.XFrameOptionsMiddleware',

    'django.middleware.cache.FetchFromCacheMiddleware',

    'django.contrib.flatpages.middleware.FlatpageFallbackMiddleware',

)

ROOT_URLCONF = 'flowspy.urls'

# Python dotted path to the WSGI application used by Django's runserver.

WSGI_APPLICATION = 'flowspy.wsgi.application'

AUTHENTICATION_BACKENDS = (

    'djangobackends.shibauthBackend.shibauthBackend',

    'django.contrib.auth.backends.ModelBackend',

)

TEMPLATE_DIRS = (

	'/path/to/templates/',

    '/path/to/rest_framework/templates/',

    # Put strings here, like "/home/html/django_templates" or "C:/www/django/templates".

    # Always use forward slashes, even on Windows.

    # Don't forget to use absolute paths, not relative paths.

)

INSTALLED_APPS = (

    'longerusername',

    'django.contrib.auth',

    'django.contrib.contenttypes',

    'django.contrib.sessions',

    'django.contrib.sites',

    'django.contrib.flatpages',

    'django.contrib.messages',

    'django.contrib.staticfiles',

    'flowspec',

    'poller',

    'south',

    # Uncomment the next line to enable the admin:

    'django.contrib.admin',

    # Uncomment the next line to enable admin documentation:

    # 'django.contrib.admindocs',

    'djcelery',

    'peers',

	'registration',

    'accounts',

    'tinymce',

    'widget_tweaks',

)

# A sample logging configuration. The only tangible logging

# performed by this configuration is to send an email to

# the site admins on every HTTP 500 error when DEBUG=False.

# See http://docs.djangoproject.com/en/dev/topics/logging for

# more details on how to customize your logging configuration.

LOGGING = {

    'version': 1,

    'disable_existing_loggers': False,

    'filters': {

        'require_debug_false': {

            '()': 'django.utils.log.RequireDebugFalse'

        }

    },

    'handlers': {

        'mail_admins': {

            'level': 'ERROR',

            'filters': ['require_debug_false'],

            'class': 'django.utils.log.AdminEmailHandler'

        }

    },

    'loggers': {

        'django.request': {

            'handlers': ['mail_admins'],

            'level': 'ERROR',

            'propagate': True,

        },

    }

}

LOGIN_URL = '/welcome'

# CACHES = {

#     'default': {

#         'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',

#         'LOCATION': '127.0.0.1:11211',

#     }

# }

CACHES = {

    'default': {

        'BACKEND': 'django.core.cache.backends.dummy.DummyCache',

    }

}

AUTH_PROFILE_MODULE = 'accounts.UserProfile'

NETCONF_DEVICE = ""

NETCONF_USER = ""

NETCONF_PASS = ""

NETCONF_PORT = 830

ROUTES_FILTER = "<configuration><routing-options><flow/></routing-options></configuration>"

ROUTE_FILTER = "<configuration><routing-options><flow><route><name>%s</name></route></flow></routing-options></configuration>"

COMMIT_CONFIRMED_TIMEOUT = "120"

EXPIRATION_DAYS_OFFSET = 7

COMMIT = True

USE_X_FORWARDED_HOST = True

BROKER_HOST = "localhost"

BROKER_PORT = 11300

POLLS_TUBE = 'polls'

BROKER_VHOST = "/"

CELERY_CONCURRENCY = 1

# List of modules to import when celery starts.

CELERY_IMPORTS = ("flowspec.tasks", )

SERVER_EMAIL = "Example FoD Service <noreply@example.com>"

EMAIL_SUBJECT_PREFIX = "[FoD] "

EXPIRATION_NOTIFY_DAYS = 4

PREFIX_LENGTH = 29

POLL_SESSION_UPDATE = 60.0

BROKER_URL = "beanstalk://localhost:11300//"

SHIB_AUTH_ENTITLEMENT = 'urn:mace'

SHIB_ADMIN_DOMAIN = 'grnet.gr'

SHIB_LOGOUT_URL = 'https://example.com/Shibboleth.sso/Logout'

# BCC mail addresses

NOTIFY_ADMIN_MAILS = ["admin@admin.com"]

UI_USER_THEN_ACTIONS = ['discard', 'rate-limit']

UI_USER_PROTOCOLS = ['icmp', 'tcp', 'udp']

PROTECTED_SUBNETS = ['10.10.0.0/16']

CELERYBEAT_SCHEDULE = {

    "every-day-sync": {

        "task": "flowspec.tasks.check_sync",

        "schedule": crontab(minute=01, hour=01),

        "args": (),

    },

    "notify-expired": {

        "task": "flowspec.tasks.notify_expired",

        "schedule": crontab(minute=01, hour=02),

        "args": (),

    },

}

# whois

PRIMARY_WHOIS = 'whois.example.com'

ALTERNATE_WHOIS = 'whois.example.net'

ACCOUNT_ACTIVATION_DAYS = 7

#Shibboleth attribute map

SHIB_USERNAME = ['HTTP_EPPN']

SHIB_SLUGIFY_USERNAME = False

SHIB_MAIL = ['mail', 'HTTP_MAIL', 'HTTP_SHIB_INETORGPERSON_MAIL']

SHIB_FIRSTNAME = ['HTTP_SHIB_INETORGPERSON_GIVENNAME']

SHIB_LASTNAME = ['HTTP_SHIB_PERSON_SURNAME']

SHIB_ENTITLEMENT = ['HTTP_SHIB_EP_ENTITLEMENT']

TINYMCE_JS_URL = STATIC_URL +'js/tinymce/tiny_mce.js'

TINYMCE_DEFAULT_CONFIG = {

    'extended_valid_elements' :  'iframe[src|width|height|name|align]',

    'plugins': "table,spellchecker,paste,searchreplace",

    'theme': "advanced",

}

import _version

SW_VERSION = _version.VERSION

LOG_FILE_LOCATION = "/var/log/fod"

# Change the following values only if you know what you are doing!!!

# To integrate FoD with tables (Peer, Networks, Contacts)

# from your CRM platform, set the following values to False and create the views that are

# exact matches of the tables in peers/models.py

PEER_MANAGED_TABLE = True

PEER_RANGE_MANAGED_TABLE = True

PEER_TECHC_MANAGED_TABLE = True