codex-django-cli 0.2.0__py3-none-any.whl

codex_django_cli/__init__.py

@@ -0,0 +1,12 @@
+"""Interactive CLI entrypoints and scaffolding helpers for codex-django-cli.
+
+The CLI package powers both the end-user `codex-django` command and the
+lower-level blueprint rendering helpers used by individual scaffold commands.
+
+Examples:
+    Launch the CLI entrypoint from Python::
+
+        from codex_django_cli.main import main
+
+        raise SystemExit(main())
+"""

codex_django_cli/blueprints/deploy/shared/.dockerignore.j2

@@ -0,0 +1,24 @@
+.git
+.github
+.venv
+__pycache__
+*.pyc
+*.pyo
+*.pyd
+.Python
+*.egg-info
+dist/
+build/
+.mypy_cache
+.ruff_cache
+.pytest_cache
+htmlcov/
+.coverage
+*.log
+.env
+.env.*
+!.env.example
+node_modules/
+sandbox/
+docs/
+tests/

codex_django_cli/blueprints/deploy/shared/.env.example.j2

@@ -0,0 +1,64 @@
+# =============================================================
+# {{ project_name }} — Environment Variables
+# Copy to .env and fill in values before running.
+# =============================================================
+
+# --- General ---
+DEBUG=False
+SECRET_KEY={{ secret_key }}
+DOMAIN_NAME={{ domain_name }}
+ALLOWED_HOSTS={{ domain_name }},www.{{ domain_name }}
+SITE_BASE_URL=https://{{ domain_name }}/
+
+DJANGO_SETTINGS_MODULE={{ project_name }}.core.settings.prod
+
+# --- Database ---
+DATABASE_URL=postgresql://user:password@localhost:5432/{{ project_name }} # pragma: allowlist secret
+
+# --- Redis ---
+REDIS_HOST=redis
+REDIS_PORT=6379
+REDIS_PASSWORD=change_me_redis_password
+
+# --- Email (SMTP) ---
+SMTP_HOST=smtp.example.com
+SMTP_PORT=465
+SMTP_USER=noreply@{{ domain_name }}
+SMTP_PASSWORD=change_me
+SMTP_FROM_EMAIL=noreply@{{ domain_name }}
+SMTP_USE_TLS=False
+
+EMAIL_HOST=${SMTP_HOST}
+EMAIL_PORT=${SMTP_PORT}
+EMAIL_HOST_USER=${SMTP_USER}
+EMAIL_HOST_PASSWORD=${SMTP_PASSWORD}
+DEFAULT_FROM_EMAIL=${SMTP_FROM_EMAIL}
+EMAIL_USE_TLS=${SMTP_USE_TLS}
+
+{% if with_bot %}
+# --- Telegram Bot ---
+BOT_TOKEN=your_bot_token_here
+SUPERUSER_IDS=123456789
+OWNER_IDS=123456789
+BOT_DATA_MODE=api
+BACKEND_API_URL=http://backend:8000
+BOT_API_KEY=change_me_bot_api_key
+BACKEND_API_KEY=change_me_backend_api_key
+TELEGRAM_ADMIN_CHANNEL_ID=-1001234567890
+{% endif %}
+
+# --- Gunicorn ---
+GUNICORN_WORKERS=2
+
+# --- Logging ---
+LOG_LEVEL=INFO
+
+# --- Docker Images (prod) ---
+DOCKER_IMAGE_BACKEND=ghcr.io/your-org/{{ project_name }}-backend:latest
+{% if with_worker %}
+DOCKER_IMAGE_WORKER=ghcr.io/your-org/{{ project_name }}-worker:latest
+{% endif %}
+{% if with_bot %}
+DOCKER_IMAGE_BOT=ghcr.io/your-org/{{ project_name }}-bot:latest
+{% endif %}
+DOCKER_IMAGE_NGINX=ghcr.io/your-org/{{ project_name }}-nginx:latest

codex_django_cli/blueprints/deploy/shared/backend/Dockerfile.j2

@@ -0,0 +1,36 @@
+# === STAGE 1: Builder ===
+FROM python:{{ python_version }}-slim AS builder
+WORKDIR /app
+RUN apt-get update && apt-get install -y gcc g++ libpq-dev && rm -rf /var/lib/apt/lists/*
+
+COPY pyproject.toml README.md ./
+COPY src ./src
+
+RUN python -m venv /venv
+RUN /venv/bin/pip install --upgrade pip
+RUN /venv/bin/pip install --no-cache-dir .
+
+# === STAGE 2: Runtime ===
+FROM python:{{ python_version }}-slim
+WORKDIR /app
+RUN apt-get update && apt-get install -y libpq5 curl procps && rm -rf /var/lib/apt/lists/* && \
+    useradd -m -u 1000 appuser
+
+COPY --from=builder /venv /venv
+COPY src/{{ project_name }} /app
+COPY deploy/backend/entrypoint.sh /entrypoint.sh
+
+RUN mkdir -p /app/staticfiles /app/media /app/logs/backend && \
+    chown -R appuser:appuser /app && \
+    chmod -R 755 /app/media /app/logs/backend && \
+    chmod +x /entrypoint.sh
+
+USER appuser
+
+ENV PATH="/venv/bin:$PATH"
+ENV DJANGO_SETTINGS_MODULE="{{ project_name }}.core.settings.dev"
+
+HEALTHCHECK --interval=30s --timeout=10s --retries=3 CMD curl -f http://localhost:8000/api/v1/health || exit 1
+
+WORKDIR /app
+ENTRYPOINT ["/entrypoint.sh"]

codex_django_cli/blueprints/deploy/shared/backend/entrypoint.sh.j2

@@ -0,0 +1,20 @@
+#!/bin/sh
+set -e
+
+# If a command is passed (e.g. migrate), run only that
+if [ "$#" -gt 0 ]; then
+    echo "Running command: $@"
+    exec "$@"
+fi
+
+echo "Running collectstatic..."
+python /app/manage.py collectstatic --noinput
+
+echo "Running migrations..."
+python /app/manage.py migrate --noinput
+
+echo "Starting gunicorn..."
+exec gunicorn {{ project_name }}.core.wsgi:application \
+    --bind 0.0.0.0:8000 \
+    --workers ${GUNICORN_WORKERS:-2} \
+    --timeout 90

codex_django_cli/blueprints/deploy/shared/nginx/Dockerfile.local.j2

@@ -0,0 +1,14 @@
+FROM nginx:alpine
+
+# Remove default configs
+RUN rm /etc/nginx/conf.d/*
+
+# Copy main nginx config
+COPY deploy/nginx/nginx-main.conf /etc/nginx/nginx.conf
+
+# Copy local development site config (HTTP only)
+COPY deploy/nginx/site-local.conf /etc/nginx/conf.d/default.conf
+
+EXPOSE 80
+
+CMD ["nginx", "-g", "daemon off;"]

codex_django_cli/blueprints/deploy/shared/nginx/nginx-main.conf.j2

@@ -0,0 +1,67 @@
+events {
+    worker_connections 1024;
+}
+
+http {
+    server_tokens off;
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+
+    {% if enable_i18n %}
+    # --- Language Detection ---
+    map $http_accept_language $lang {
+        default en;
+        ~*^ru ru;
+        ~*^uk uk;
+        ~*^de de;
+        ~*^en en;
+    }
+    {% endif %}
+
+    # --- Logging Format (JSON) ---
+    log_format json_combined escape=json
+    '{'
+        '"time_local":"$time_local",'
+        '"remote_addr":"$remote_addr",'
+        '"remote_user":"$remote_user",'
+        '"request":"$request",'
+        '"status": "$status",'
+        '"body_bytes_sent":"$body_bytes_sent",'
+        '"request_time":"$request_time",'
+        '"http_referrer":"$http_referer",'
+        '"http_user_agent":"$http_user_agent",'
+        '"upstream_addr":"$upstream_addr",'
+        '"upstream_response_time":"$upstream_response_time"'
+    '}';
+
+    # --- Logging ---
+    access_log /var/log/nginx/access.log json_combined;
+    error_log /var/log/nginx/error.log warn;
+
+    # --- Performance ---
+    sendfile on;
+    tcp_nopush on;
+    tcp_nodelay on;
+    keepalive_timeout 65;
+
+    # --- Gzip ---
+    gzip on;
+    gzip_vary on;
+    gzip_proxied any;
+    gzip_comp_level 6;
+    gzip_types text/plain text/css application/json application/javascript
+               text/xml application/xml application/xml+rss text/javascript
+               image/svg+xml;
+
+    # --- Upstream (Backend) ---
+    upstream backend {
+        server backend:8000;
+    }
+
+    # --- Rate Limiting ---
+    limit_req_zone $binary_remote_addr zone=api_limit:10m rate=10r/s;
+    limit_req_zone $binary_remote_addr zone=general_limit:10m rate=30r/s;
+
+    # --- Site Configs ---
+    include /etc/nginx/conf.d/*.conf;
+}

codex_django_cli/blueprints/deploy/shared/nginx/site-local.conf.j2

@@ -0,0 +1,66 @@
+# ============================================
+# Local Development — HTTP Only (No SSL)
+# ============================================
+
+server {
+    listen 80;
+    server_name localhost;
+
+    client_max_body_size 10M;
+
+    # === Static Files ===
+    location /static/ {
+        alias /app/staticfiles/;
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+    }
+
+    # === Media ===
+    location /media/ {
+        alias /app/media/;
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+        add_header Access-Control-Allow-Origin "*";
+    }
+
+    # === API → Backend ===
+    location /api/ {
+        proxy_pass http://backend;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_connect_timeout 60s;
+        proxy_send_timeout 60s;
+        proxy_read_timeout 60s;
+    }
+
+    # === Swagger / OpenAPI ===
+    location /docs {
+        proxy_pass http://backend;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+
+    location /openapi.json {
+        proxy_pass http://backend;
+    }
+
+    # === Health ===
+    location /health {
+        proxy_pass http://backend/api/v1/health;
+        access_log off;
+    }
+
+    # === All other requests → Django Backend ===
+    location / {
+        proxy_pass http://backend;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}

codex_django_cli/blueprints/deploy/shared/worker/Dockerfile.j2

@@ -0,0 +1,25 @@
+# === STAGE 1: Builder ===
+FROM python:{{ python_version }}-slim AS builder
+WORKDIR /app
+
+COPY pyproject.toml README.md ./
+COPY src ./src
+
+RUN python -m venv /app/.venv
+RUN /app/.venv/bin/pip install --upgrade pip
+RUN /app/.venv/bin/pip install --no-cache-dir .
+
+# === STAGE 2: Runtime ===
+FROM python:{{ python_version }}-slim
+WORKDIR /app
+RUN useradd -m -u 1000 appuser
+COPY --from=builder /app/.venv /app/.venv
+
+COPY src/workers /app/src/workers
+COPY src/{{ project_name }} /app/src/{{ project_name }}
+
+RUN mkdir -p /app/logs && chown -R appuser:appuser /app
+
+USER appuser
+ENV PATH="/app/.venv/bin:$PATH"
+ENV PYTHONPATH="/app:$PYTHONPATH"

codex_django_cli/blueprints/deploy/stack/docker/base.Dockerfile.j2

@@ -0,0 +1,38 @@
+# === Base Image for {{ cluster_name }} Cluster (Multi-Stage) ===
+
+# ── Stage 1: Builder ──────────────────────────────────────────
+FROM python:{{ python_version }}-slim AS builder
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1
+
+RUN apt-get update && apt-get install -y \
+    gcc \
+    g++ \
+    libpq-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+COPY pyproject.toml README.md ./
+COPY src ./src
+RUN pip install --no-cache-dir --upgrade pip
+RUN pip install --no-cache-dir .
+
+# ── Stage 2: Runtime ──────────────────────────────────────────
+FROM python:{{ python_version }}-slim
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    IS_DOCKER=True
+
+RUN apt-get update && apt-get install -y \
+    libpq5 \
+    curl \
+    procps \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=builder /usr/local/lib/python{{ python_version }}/site-packages/ /usr/local/lib/python{{ python_version }}/site-packages/
+COPY --from=builder /usr/local/bin/ /usr/local/bin/
+
+WORKDIR /app

codex_django_cli/blueprints/deploy/stack/docker/django.Dockerfile.j2

@@ -0,0 +1,27 @@
+# === Django Project Image ===
+ARG BASE_IMAGE={{ project_name }}-base:latest
+FROM ${BASE_IMAGE}
+
+WORKDIR /app
+
+RUN useradd -m -u 1000 appuser
+
+# PROJECT_ID is set per-project during CI/CD build
+ARG PROJECT_ID={{ project_name }}
+COPY src/${PROJECT_ID} /app
+
+RUN mkdir -p /app/staticfiles /app/media /app/logs/backend && \
+    chown -R appuser:appuser /app && \
+    chmod -R 755 /app/media /app/logs/backend
+
+COPY deploy/docker/entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+USER appuser
+
+ENV PYTHONPATH="/app:$PYTHONPATH"
+
+HEALTHCHECK --interval=30s --timeout=10s --retries=3 \
+    CMD curl -f http://localhost:8000/api/v1/health || exit 1
+
+ENTRYPOINT ["/entrypoint.sh"]

codex_django_cli/blueprints/deploy/stack/docker/entrypoint.sh.j2

@@ -0,0 +1,19 @@
+#!/bin/sh
+set -e
+
+if [ "$#" -gt 0 ]; then
+    echo "Running command: $@"
+    exec "$@"
+fi
+
+echo "Running collectstatic..."
+python /app/manage.py collectstatic --noinput
+
+echo "Running migrations..."
+python /app/manage.py migrate --noinput
+
+echo "Starting gunicorn..."
+exec gunicorn {{ project_name }}.core.wsgi:application \
+    --bind 0.0.0.0:8000 \
+    --workers ${GUNICORN_WORKERS:-2} \
+    --timeout 90

codex_django_cli/blueprints/deploy/stack/docker-compose.apps.yml.j2

@@ -0,0 +1,41 @@
+services:
+  # --- Project Backend ---
+  backend:
+    image: ${DOCKER_IMAGE_BACKEND}
+    container_name: ${PROJECT_NAME:-{{ project_name }}}-backend
+    env_file:
+      - .env
+      - src/{{ project_name }}/.env
+    environment:
+      DJANGO_SETTINGS_MODULE: "{{ project_name }}.core.settings.prod"
+      PROJECT_NAME: ${PROJECT_NAME:-{{ project_name }}}
+    volumes:
+      - static_volume:/app/staticfiles/${PROJECT_NAME:-{{ project_name }}}
+      - media_volume:/app/media/${PROJECT_NAME:-{{ project_name }}}
+      - logs_volume:/app/logs/backend
+    expose:
+      - "8000"
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/api/v1/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+    restart: always
+    networks:
+      - {{ cluster_name }}-cluster-network
+
+volumes:
+  static_volume:
+    external: true
+    name: {{ cluster_name }}_cluster_static
+  media_volume:
+    external: true
+    name: {{ cluster_name }}_cluster_media
+  logs_volume:
+    driver: local
+
+networks:
+  {{ cluster_name }}-cluster-network:
+    external: true
+    name: {{ cluster_name }}-cluster-network

codex_django_cli/blueprints/deploy/stack/docker-compose.infra.yml.j2

@@ -0,0 +1,80 @@
+services:
+  # --- Shared Redis ---
+  redis:
+    image: redis:7-alpine
+    container_name: {{ cluster_name }}-cluster-redis
+    environment:
+      - REDIS_PASSWORD=${REDIS_PASSWORD:-change_me}
+    command: >
+      sh -c "redis-server --requirepass $${REDIS_PASSWORD} --appendonly yes"
+    volumes:
+      - redis-data:/data
+    healthcheck:
+      test: ["CMD", "sh", "-c", "REDISCLI_AUTH=$${REDIS_PASSWORD} redis-cli ping"]
+      interval: 10s
+      timeout: 5s
+      retries: 3
+    restart: unless-stopped
+    networks:
+      - {{ cluster_name }}-cluster-network
+{% if with_worker %}
+
+  # --- Shared Worker (Notifications) ---
+  worker:
+    image: ${DOCKER_IMAGE_WORKER}
+    container_name: {{ cluster_name }}-cluster-worker
+    env_file: .env
+    depends_on:
+      redis:
+        condition: service_healthy
+    command: arq src.workers.notification_worker.worker.WorkerSettings
+    restart: always
+    networks:
+      - {{ cluster_name }}-cluster-network
+{% endif %}
+
+  # --- Shared Nginx ---
+  nginx:
+    image: ${DOCKER_IMAGE_NGINX}
+    container_name: {{ cluster_name }}-cluster-nginx
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./nginx/conf.d:/etc/nginx/conf.d:ro
+      - static_volume:/app/staticfiles:ro
+      - media_volume:/app/media:ro
+      - certs_volume:/etc/letsencrypt:ro
+      - certbot_challenge_volume:/var/www/certbot:ro
+    depends_on:
+      - redis
+    restart: always
+    networks:
+      - {{ cluster_name }}-cluster-network
+
+  # --- Shared Certbot ---
+  certbot:
+    image: certbot/certbot:latest
+    container_name: {{ cluster_name }}-cluster-certbot
+    volumes:
+      - certs_volume:/etc/letsencrypt
+      - certbot_challenge_volume:/var/www/certbot
+    entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"
+    networks:
+      - {{ cluster_name }}-cluster-network
+
+volumes:
+  redis-data:
+  static_volume:
+    name: {{ cluster_name }}_cluster_static
+  media_volume:
+    name: {{ cluster_name }}_cluster_media
+  certs_volume:
+    name: {{ cluster_name }}_cluster_certs
+  certbot_challenge_volume:
+    name: {{ cluster_name }}_cluster_certbot_challenge
+
+networks:
+  {{ cluster_name }}-cluster-network:
+    name: {{ cluster_name }}-cluster-network
+    driver: bridge

codex_django_cli/blueprints/deploy/stack/docker-compose.local.apps.yml.j2

@@ -0,0 +1,41 @@
+services:
+  # --- Project Backend (Local with Hot-Reload) ---
+  backend:
+    build:
+      context: ..
+      dockerfile: deploy/docker/django.Dockerfile
+      args:
+        BASE_IMAGE: {{ project_name }}-base:latest
+        PROJECT_ID: {{ project_name }}
+    image: {{ project_name }}-backend:local
+    container_name: {{ project_name }}-backend-local
+    env_file: ../.env
+    environment:
+      - PROJECT_NAME={{ project_name }}
+      - DEBUG=True
+      - DJANGO_SETTINGS_MODULE={{ project_name }}.core.settings.dev
+    volumes:
+      - ../src/{{ project_name }}:/app
+      - static_local:/app/staticfiles/{{ project_name }}
+      - media_local:/app/media/{{ project_name }}
+    expose:
+      - "8000"
+    command: python manage.py runserver 0.0.0.0:8000
+    depends_on:
+      - redis
+      - db
+    networks:
+      - {{ cluster_name }}-cluster-local-network
+
+volumes:
+  static_local:
+    external: true
+    name: {{ cluster_name }}_cluster_static_local
+  media_local:
+    external: true
+    name: {{ cluster_name }}_cluster_media_local
+
+networks:
+  {{ cluster_name }}-cluster-local-network:
+    external: true
+    name: {{ cluster_name }}-cluster-local-network