3 Commits

Include renames

Author	SHA1	Message	Date
westfarn	b98f504afc	Admin Stripe invoices + recurring subscriptions (customers pay us) (#24) ... ## Summary - Closes #23 - Admin-only invoice dashboard under `/financial/invoices` (superuser) - One-off Stripe hosted invoices + email pay link (customers pay us) - Monthly (or weekly/yearly) Stripe Checkout subscriptions + email checkout link - Webhook at `/financial/stripe/webhook/` syncs invoice/subscription status - Env docs: `STRIPE_SECRET_KEY`, `STRIPE_PUBLISHABLE_KEY`, `STRIPE_WEBHOOK_SECRET` ## Test plan - [ ] Set Stripe **test** keys in local `.env` and restart app - [ ] As superuser: Dashboard → Invoices → create one-off invoice; confirm Stripe invoice + email - [ ] As superuser: create monthly subscription; open Checkout link; complete with test card `4242…` - [ ] Configure Stripe CLI or Dashboard webhook → confirm status updates to paid/active - [ ] Non-admin user cannot open `/financial/invoices` - [ ] Prod: add live keys + webhook secret to server `.env`, migrate, restart; point webhook to `https://aimloperations.com/financial/stripe/webhook/` ## Notes Uses stdlib HTTP to Stripe API (no `stripe` PyPI package) so deploys stay dependency-light.Reviewed-on: #24	2026-07-31 12:02:40 -07:00
westfarn	139f375f73	Fix logout 403 CSRF verification failed (#18) (#19) ... ## Summary - Closes #18 - Logout POST was failing CSRF Origin checks on HTTPS because `CSRF_TRUSTED_ORIGINS` was unset (Django 5) - Derive trusted origins from `DJANGO_ALLOWED_HOSTS` (override via `DJANGO_CSRF_TRUSTED_ORIGINS`) - Trust reverse-proxy TLS headers in prod/beta (`SECURE_PROXY_SSL_HEADER`, secure cookies) ## Test plan - [x] `python manage.py test public.tests.CsrfTrustedOriginsTests public.tests.LogoutCsrfTests` - [ ] Deploy, log in on aimloperations.com, click Log Out → redirect home, no 403 - [ ] Confirm login still works after deploy Reviewed-on: #19	2026-07-10 17:39:29 -07:00
westfarn	426cc82f04	Dockerize Django app with dev/beta/prod env config and uv (#6) ... ## Summary - Containerize the Django app with Docker and docker-compose (dev + production) - Refactor settings into `dev` / `beta` / `prod` environments driven by environment variables - Connect to PostgreSQL via `DATABASE_URL` or `DB_*` vars - Migrate package management from pip to uv (`pyproject.toml`, `uv.lock`) - Split Gitea workflows: PRs run unit tests only; pushes to `master` run tests, Docker validation, and deploy - Update deploy script to rsync code, preserve server `.env`, validate config, and run Docker compose Closes #4 ## Test plan - [x] `uv run python manage.py test` passes locally (10/10) - [x] `DJANGO_ENV=beta` and `DJANGO_ENV=prod` load with correct logging levels - [x] `scripts/validate-env.sh` rejects missing production variables - [ ] `docker compose up --build` starts app + Postgres locally - [ ] Containerized unit tests pass in CI Docker job - [ ] Server `.env` created from `.env.prod.example` before first production deploy - [ ] CI workflow runs on this PR (tests only, no deploy) Reviewed-on: #6	2026-07-07 11:23:50 -07:00