Migrar HIMP para Web com interface moderna, catálogos e controlo de acesso

.dockerignore

@@ -0,0 +1,9 @@
+.git
+.env
+.env.*
+.venv
+**/__pycache__
+**/*.sqlite3
+web/private_media
+web/staticfiles
+work

.gitattributes

@@ -0,0 +1 @@
+* text=auto eol=lf

.github/workflows/web.yml

@@ -0,0 +1,44 @@
+name: HIMP Web
+on:
+  push:
+  pull_request:
+permissions:
+  contents: read
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_DB: himp
+          POSTGRES_USER: himp
+          POSTGRES_PASSWORD: ci-only-password
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready --health-interval 10s
+          --health-timeout 5s --health-retries 5
+    env:
+      DJANGO_DEBUG: "true"
+      DATABASE_URL: postgres://himp:ci-only-password@localhost:5432/himp
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+          cache: pip
+          cache-dependency-path: requirements-web.txt
+      - run: pip install -r requirements-web.txt
+      - run: python web/manage.py makemigrations --check --dry-run
+      - run: python web/manage.py migrate --noinput
+      - run: python web/manage.py bootstrap_roles
+      - run: python web/manage.py collectstatic --noinput
+      - run: python web/manage.py test office --verbosity 2
+      - name: Production settings checks
+        env:
+          DJANGO_DEBUG: "false"
+          DJANGO_SECRET_KEY: ci-only-placeholder-long-enough-for-security-checks-1234567890
+          DJANGO_ALLOWED_HOSTS: himp.example.com
+          DJANGO_CSRF_TRUSTED_ORIGINS: https://himp.example.com
+        run: python web/manage.py check --deploy --fail-level WARNING

.gitignore

@@ -0,0 +1,13 @@
+.env
+.env.*
+!.env.example
+__pycache__/
+*.py[cod]
+.venv/
+*.sqlite3
+web/private_media/
+web/staticfiles/
+credentials*.json
+token*.json
+*.zip
+.pytest_cache/

Dockerfile

@@ -0,0 +1,13 @@
+FROM python:3.13-slim
+ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 DJANGO_DEBUG=false
+WORKDIR /app
+COPY requirements-web.txt ./
+RUN pip install --no-cache-dir -r requirements-web.txt
+COPY web/ ./
+RUN DJANGO_DEBUG=true python manage.py collectstatic --noinput \
+    && groupadd --gid 10001 himp \
+    && useradd --uid 10001 --gid himp --no-create-home himp \
+    && mkdir -p private_media && chown himp:himp private_media
+USER himp
+EXPOSE 8000
+CMD ["gunicorn", "himp.wsgi:application", "--bind", "0.0.0.0:8000", "--workers", "2", "--timeout", "60", "--access-logfile", "-"]