Firewall on Demand

# Django settings for flowspy project.

# -*- coding: utf-8 -*- vim:fileencoding=utf-8:

# vim: tabstop=4:shiftwidth=4:softtabstop=4:expandtab

#Copyright © 2011-2013 Greek Research and Technology Network (GRNET S.A.)

#Developed by Leonidas Poulopoulos (leopoul-at-noc-dot-grnet-dot-gr),

#GRNET NOC

#

#Permission to use, copy, modify, and/or distribute this software for any

#purpose with or without fee is hereby granted, provided that the above

#copyright notice and this permission notice appear in all copies.

#

#THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH REGARD

#TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND

#FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR

#CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,

#DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS

#ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS

#SOFTWARE.

#

import os

import djcelery

djcelery.setup_loader()

from celery.schedules import crontab

DEBUG = False

TEMPLATE_DEBUG = DEBUG

ADMINS = (

    ('AdminName', 'adminmail@admin.com'),

)

here = lambda x: os.path.join(os.path.abspath(os.path.dirname(__file__)), x)

MANAGERS = ADMINS

DATABASES = {

    'default': {

        'ENGINE': 'django.db.backends.mysql', # Add 'postgresql_psycopg2', 'postgresql', 'mysql', 'sqlite3' or 'oracle'.

        'NAME': 'flowspec',                      # Or path to database file if using sqlite3.

        'USER': '',                      # Not used with sqlite3.

        'PASSWORD': '',                  # Not used with sqlite3.

        'HOST': '',                      # Set to empty string for localhost. Not used with sqlite3.

        'PORT': '',                      # Set to empty string for default. Not used with sqlite3.

        'OPTIONS':  {

        "init_command": "SET storage_engine=MYISAM",

        }

    }

}

# Local time zone for this installation. Choices can be found here:

# http://en.wikipedia.org/wiki/List_of_tz_zones_by_name

# although not all choices may be available on all operating systems.

# On Unix systems, a value of None will cause Django to use the same

# timezone as the operating system.

# If running in a Windows environment this must be set to the same as your

# system time zone.

TIME_ZONE = 'Europe/Athens'

# Language code for this installation. All choices can be found here:

# http://www.i18nguy.com/unicode/language-identifiers.html

_ = lambda s: s

LANGUAGES = (

    ('el', _('Greek')),

    ('en', _('English')),

)

# Language code for this installation. All choices can be found here:

# http://www.i18nguy.com/unicode/language-identifiers.html

LANGUAGE_CODE = 'en'

SITE_ID = 1

# If you set this to False, Django will make some optimizations so as not

# to load the internationalization machinery.

USE_I18N = True

# If you set this to False, Django will not format dates, numbers and

# calendars according to the current locale

USE_L10N = True

# Absolute path to the directory that holds media.

# Example: "/home/media/media.lawrence.com/"

MEDIA_ROOT = ''

# URL that handles the media served from MEDIA_ROOT. Make sure to use a

# trailing slash if there is a path component (optional in other cases).

# Examples: "http://media.lawrence.com", "http://example.com/media/"

MEDIA_URL = ''

# URL prefix for admin media -- CSS, JavaScript and images. Make sure to use a

# trailing slash.

# Examples: "http://foo.com/media/", "/media/".

ADMIN_MEDIA_PREFIX = '/admin/media/'

# Make this unique, and don't share it with anybody.

SECRET_KEY = 'fju0e4zu-thi7qf@93voi5eeot21@a*e54)%89xe-7iorqcimk'

# List of callables that know how to import templates from various sources.

TEMPLATE_LOADERS = (

    'django.template.loaders.filesystem.Loader',

    'django.template.loaders.app_directories.Loader',

#     'django.template.loaders.eggs.Loader',

)

TEMPLATE_CONTEXT_PROCESSORS = (

    "django.contrib.auth.context_processors.auth",

    "django.core.context_processors.debug",

    "django.core.context_processors.i18n",

    "django.core.context_processors.media",

    "django.contrib.messages.context_processors.messages"

)

MIDDLEWARE_CLASSES = (

    'django.middleware.cache.UpdateCacheMiddleware',

    'django.middleware.common.CommonMiddleware',

    'django.contrib.sessions.middleware.SessionMiddleware',

    'django.middleware.locale.LocaleMiddleware',

    'django.middleware.csrf.CsrfViewMiddleware',

    'django.contrib.auth.middleware.AuthenticationMiddleware',

    'django.contrib.messages.middleware.MessageMiddleware',

    'django.middleware.cache.FetchFromCacheMiddleware',

    'django.contrib.flatpages.middleware.FlatpageFallbackMiddleware',

)

AUTHENTICATION_BACKENDS = (

    'flowspy.djangobackends.shibauthBackend.shibauthBackend',

    'django.contrib.auth.backends.ModelBackend',

)

ROOT_URLCONF = 'flowspy.urls'

STATIC_URL = '/path/to/static'

TEMPLATE_DIRS = (

    '/path/to/templates/',

    # Put strings here, like "/home/html/django_templates" or "C:/www/django/templates".

    # Always use forward slashes, even on Windows.

    # Don't forget to use absolute paths, not relative paths.

)

INSTALLED_APPS = (

    'monkey_patch',

    'django.contrib.auth',

    'django.contrib.contenttypes',

    'django.contrib.sessions',

    'django.contrib.sites',

    'django.contrib.messages',

    'django.contrib.flatpages',

    'flowspec',

    'poller',

    'south',

    # Uncomment the next line to enable the admin:

    'django.contrib.admin',

    # Uncomment the next line to enable admin documentation:

    'django.contrib.admindocs',

    'django_extensions',

    'djcelery',

    'peers',

	'registration',

    'accounts',

    'tinymce',

)

LOGIN_URL = '/fod/welcome'

CACHE_BACKEND = "memcached://127.0.0.1:11211/?timeout=3600"

AUTH_PROFILE_MODULE = 'accounts.UserProfile'

NETCONF_DEVICE = ""

NETCONF_USER = ""

NETCONF_PASS = ""

ROUTES_FILTER = "<configuration><routing-options><flow/></routing-options></configuration>"

ROUTE_FILTER = "<configuration><routing-options><flow><route><name>%s</name></route></flow></routing-options></configuration>"

COMMIT_CONFIRMED_TIMEOUT = "120"

EXPIRATION_DAYS_OFFSET = 7

COMMIT = True

USE_X_FORWARDED_HOST = True

BROKER_HOST = "localhost"

BROKER_PORT = 11300

POLLS_TUBE = 'polls'

BROKER_VHOST = "/"

CELERY_CONCURRENCY = 1

# List of modules to import when celery starts.

CELERY_IMPORTS = ("flowspec.tasks", )

SERVER_EMAIL = "GRNET FoD Service <noreply@grnet.gr>"

EMAIL_SUBJECT_PREFIX = "[FoD] "

LOG_FILE_LOCATION = here("log")

EXPIRATION_NOTIFY_DAYS = 4

PREFIX_LENGTH = 29 

POLL_SESSION_UPDATE = 60.0

BROKER_URL = "beanstalk://localhost:11300//"

SHIB_AUTH_ENTITLEMENT = 'urn:mace'

SHIB_ADMIN_DOMAIN = 'grnet.gr'

SHIB_LOGOUT_URL = 'https://example.com/Shibboleth.sso/Logout'

# BCC mail addresses

NOTIFY_ADMIN_MAILS = ["admin@admin.com"]

UI_USER_THEN_ACTIONS = ['discard', 'rate-limit']

UI_USER_PROTOCOLS = ['icmp', 'tcp', 'udp']

PROTECTED_SUBNETS = ['10.10.0.0/16']

CELERYBEAT_SCHEDULE = { 

    "every-day-sync": {

        "task": "flowspec.tasks.check_sync",

        "schedule": crontab(minute=01, hour=01),

        "args": (),

    },

    "notify-expired": {

        "task": "flowspec.tasks.notify_expired",

        "schedule": crontab(minute=01, hour=02),

        "args": (),

    },

}

# whois

PRIMARY_WHOIS = 'whois.grnet.gr'

ALTERNATE_WHOIS = 'whois.ripe.net'

ACCOUNT_ACTIVATION_DAYS = 7

#Shibboleth attribute map

SHIB_USERNAME = ['HTTP_EPPN']

SHIB_MAIL = ['mail', 'HTTP_MAIL', 'HTTP_SHIB_INETORGPERSON_MAIL']

SHIB_FIRSTNAME = ['HTTP_SHIB_INETORGPERSON_GIVENNAME']

SHIB_LASTNAME = ['HTTP_SHIB_PERSON_SURNAME']

SHIB_ENTITLEMENT = ['HTTP_SHIB_EP_ENTITLEMENT']

TINYMCE_JS_URL = '/fodstatic/js/tinymce/tiny_mce.js'

TINYMCE_DEFAULT_CONFIG = {

    'extended_valid_elements' :  'iframe[src|width|height|name|align]',

    'plugins': "table,spellchecker,paste,searchreplace",

    'theme': "advanced",

}