pxa-drm-server 0.1.0__tar.gz

pxa_drm_server-0.1.0/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

pxa_drm_server-0.1.0/MANIFEST.in

@@ -0,0 +1,8 @@
+include LICENSE
+include README.md
+include requirements.txt
+include domain_core.py
+include config/config.yaml
+recursive-include pxa_drm_server *.yaml
+recursive-include tests *.py
+global-exclude __pycache__/* *.py[cod]

pxa_drm_server-0.1.0/PKG-INFO

@@ -0,0 +1,311 @@
+Metadata-Version: 2.4
+Name: pxa-drm-server
+Version: 0.1.0
+Summary: 파일 암복호화 API 서버 — domain_core 세 함수만 구현하면 되는 FastAPI 기반 DRM 서버 (pxa-common)
+Author: Kwanghyun Daniel Lee
+License-Expression: Apache-2.0
+Project-URL: Homepage, https://github.com/asulikeit/pxa-drm-server-py
+Project-URL: Repository, https://github.com/asulikeit/pxa-drm-server-py
+Project-URL: Issues, https://github.com/asulikeit/pxa-drm-server-py/issues
+Keywords: pxa,drm,encryption,decryption,fastapi,s3,api-server
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Web Environment
+Classifier: Framework :: FastAPI
+Classifier: Intended Audience :: Developers
+Classifier: Natural Language :: Korean
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Internet :: WWW/HTTP :: HTTP Servers
+Classifier: Topic :: Security :: Cryptography
+Classifier: Topic :: Software Development :: Libraries :: Application Frameworks
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: pxa-common==0.1.1
+Requires-Dist: fastapi==0.128.0
+Requires-Dist: uvicorn[standard]>=0.30
+Requires-Dist: python-multipart>=0.0.9
+Requires-Dist: boto3>=1.34
+Requires-Dist: PyYAML>=6.0
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0; extra == "dev"
+Requires-Dist: httpx>=0.27; extra == "dev"
+Dynamic: license-file
+
+# pxa-drm-server
+
+파일 **암복호화 API 서버**. `pxa-common==0.1.1` 위에 `fastapi==0.128.0` 으로 만들었다.
+
+개발자는 **`domain_core.py` 에 세 함수만 구현**하면 된다.
+REST API, 로깅, 에러 처리, 표준 응답 포맷, 오브젝트 스토리지 입출력,
+첨부파일 처리는 서버가 전부 담당한다.
+
+```python
+# domain_core.py — 개발자가 작성하는 유일한 파일
+def encrypt(filepath: str) -> bool:   # 암호화 성공 True / 실패 False
+def decrypt(filepath: str) -> bool:   # 복호화 성공 True / 실패 False
+def check(filepath: str) -> bool:     # 암호화되어 있으면 True (파일 수정 금지)
+```
+
+---
+
+## 1. 빠르게 실행하기
+
+```bash
+pip install pxa-drm-server
+
+pxa-drm-server init          # domain_core.py 와 config/config.yaml 을 만든다
+
+# domain_core.py 의 세 함수를 실제 DRM 모듈 호출로 바꾼다 (기본은 동작 확인용 샘플)
+
+PXA_CONFIG=config/config.yaml pxa-drm-server
+```
+
+저장소를 직접 받아서 쓸 때는 `pip install -e ".[dev]"` 로 설치하면
+`domain_core.py` 와 `config/config.yaml` 이 이미 들어 있으므로 `init` 없이 바로 실행된다.
+
+실행 방법은 세 가지 모두 같다.
+
+```bash
+PXA_CONFIG=config/config.yaml pxa-drm-server
+PXA_CONFIG=config/config.yaml python -m pxa_drm_server
+PXA_CONFIG=config/config.yaml uvicorn pxa_drm_server.asgi:app --host 0.0.0.0 --port 8000
+```
+
+- Swagger UI: `http://localhost:8000/docs`
+- 상태 확인: `GET /api/v1/health`
+
+### CLI
+
+| 명령 | 설명 |
+|---|---|
+| `pxa-drm-server` | 서버 실행 (`run` 과 동일) |
+| `pxa-drm-server init [--dir DIR] [--force]` | 시작 템플릿 생성. 이미 있는 파일은 건너뛰고, `--force` 면 덮어쓴다 |
+
+---
+
+## 2. 기본 제공 API
+
+| 대상 | 호출 |
+|---|---|
+| 서버 로컬 경로 | `GET \| POST /api/v1/encrypt?filepath=/download/file.docx` |
+| 서버 로컬 경로 | `GET \| POST /api/v1/decrypt?filepath=/download/file.docx` |
+| 오브젝트 스토리지 | `GET \| POST /api/v1/encrypt?uri=ABC:download/file.docx` |
+| 오브젝트 스토리지 | `GET \| POST /api/v1/decrypt?uri=ABC:download/file.docx` |
+| 첨부파일 | `POST /api/v1/encrypt` (multipart, `file=@file.docx`) |
+| 첨부파일 | `POST /api/v1/decrypt` (multipart, `file=@file.docx`) |
+| 암호화 여부 확인 | `GET \| POST /api/v1/check` (위 세 가지 대상 모두 지원) |
+
+`filepath`, `uri`, `file` 중 **정확히 하나**를 지정한다.
+하나도 없으면 `pxa-20002`, 둘 이상이면 `pxa-20001` 로 응답한다.
+
+```bash
+# 로컬 경로
+curl "http://localhost:8000/api/v1/encrypt?filepath=/download/file.docx"
+
+# 오브젝트 스토리지 (ABC 는 config 에 등록한 버킷 별칭)
+curl "http://localhost:8000/api/v1/decrypt?uri=ABC:download/file.docx"
+
+# 첨부파일 -> 처리된 파일을 그대로 내려받는다
+curl -F "file=@file.docx" "http://localhost:8000/api/v1/encrypt" -o encrypted.docx
+
+# 첨부파일 -> 파일 대신 JSON 결과만 받고 싶을 때
+curl -F "file=@file.docx" "http://localhost:8000/api/v1/encrypt?response=json"
+```
+
+### 응답 포맷
+
+pxa-common 규약을 따른다. **HTTP 상태는 항상 200**이고 정상/비정상은 `code` 로 구분한다.
+(첨부파일 요청이 성공했을 때만 예외적으로 결과 파일이 바로 내려간다.)
+
+```json
+{
+  "success": true,
+  "code": "pxa-10000",
+  "message": "'file.docx' 파일을 암호화했습니다.",
+  "result": {
+    "operation": "encrypt",
+    "source": {"type": "local", "location": "/download/file.docx", "filename": "file.docx"},
+    "size": 29,
+    "elapsed_ms": 1.8
+  }
+}
+```
+
+`check` 는 `result.encrypted` 에 true/false 가 담긴다.
+
+### 에러 코드
+
+| 코드 | 의미 |
+|---|---|
+| `pxa-20001` | 요청 검증 실패 (대상 중복 지정, `response` 값 오류 등) |
+| `pxa-20002` | `filepath / uri / file` 중 아무것도 없음 |
+| `pxa-21001` | `encrypt()` 가 False 반환 |
+| `pxa-21002` | `decrypt()` 가 False 반환 |
+| `pxa-21003` | 도메인 함수에서 예외 발생 |
+| `pxa-21004` | 도메인 함수 미구현 |
+| `pxa-21005` | 도메인 함수가 True/False 가 아닌 값을 반환 |
+| `pxa-22001` | 대상 파일/오브젝트 없음 |
+| `pxa-22002` | 허용되지 않은 경로 (`local.allowed_roots`) |
+| `pxa-22003` | `uri` 형식 오류 |
+| `pxa-22004` | 설정에 없는 버킷 별칭 |
+| `pxa-22005` | 오브젝트 스토리지 입출력 오류 |
+| `pxa-22006` | 첨부파일 처리 오류 |
+| `pxa-22007` | 첨부파일 크기 초과 |
+
+---
+
+## 3. 개발자가 작성하는 코드
+
+`domain_core.py` 하나가 전부다.
+
+```python
+def encrypt(filepath: str) -> bool:
+    ok = my_drm.protect(filepath)     # 실제 DRM 모듈 호출
+    return bool(ok)
+```
+
+지켜야 할 것
+
+1. `filepath` 는 **서버가 준비해 둔 로컬 파일 경로**다. 오브젝트 스토리지든 첨부파일이든
+   여기까지 오면 똑같은 로컬 파일이므로 경로만 신경 쓰면 된다.
+2. `encrypt` / `decrypt` 는 **그 경로의 파일을 제자리에서 바꾸면** 된다.
+   성공하면 서버가 원래 위치(로컬 경로 / 오브젝트 스토리지 / 응답 파일)로 되돌려 놓는다.
+3. `check` 는 **파일을 수정하면 안 된다**(읽기 전용).
+4. 실패는 `False` 를 반환하거나 예외를 던지면 된다. 서버가 표준 에러 응답으로 바꾸고 로그를 남긴다.
+5. 오래 걸리는 동기 함수여도 된다. 서버가 워커 스레드에서 호출한다. `async def` 도 그대로 동작한다.
+
+`check()` 는 선택 사항이다. 없으면 서버는 기동되지만 `/api/v1/check` 는 `pxa-21004` 로 응답한다.
+
+---
+
+## 4. 설정
+
+우선순위는 **환경변수(`PXA_*`) > `config.yaml` > 기본값** 이고, 파일 경로는 `PXA_CONFIG` 로 지정한다
+(pxa-common 설정 기능).
+
+```yaml
+app:     { name: "pxa-drm-server", debug: false }
+server:  { host: "0.0.0.0", port: 8000 }
+logging: { dir: "./logs", level: "INFO", filename: "drm-server.log", backup_count: 14 }
+
+drm:
+  domain_module: "domain_core"     # import 할 모듈명
+  # domain_file: "./domain_core.py"  # 파일 경로로 직접 지정(우선 적용)
+  work_dir: null                   # 임시 작업 디렉토리(null 이면 OS 임시 디렉토리)
+  max_upload_size_mb: 512          # 0 이하면 제한 없음
+  upload_response: "file"          # 첨부파일 기본 응답: file | json
+
+local:
+  allowed_roots: []                # 비우면 모든 경로 허용. 예: ["/download", "/data"]
+  in_place: false                  # false 권장 (아래 "안전 처리" 참고)
+
+storage:
+  buckets:
+    ABC:                           # uri 의 "ABC:download/file.docx" 에서 ABC
+      bucket: "abc-bucket"
+      endpoint_url: "https://s3.example.com"
+      region: "us-east-1"
+      addressing_style: "path"     # MinIO/Ceph 등 S3 호환 스토리지는 path 권장
+      verify_ssl: true
+      access_key: ""               # 환경변수 주입 권장
+      secret_key: ""
+```
+
+### 접근키는 환경변수로
+
+```bash
+export PXA_STORAGE__BUCKETS__ABC__ACCESS_KEY=...
+export PXA_STORAGE__BUCKETS__ABC__SECRET_KEY=...
+export PXA_SERVER__PORT=9000
+```
+
+버킷 별칭은 **대소문자를 구분하지 않는다**. pxa-common 이 환경변수 경로를 소문자로 바꾸기 때문에,
+`config.yaml` 의 `ABC` 와 환경변수의 `abc` 를 서버가 하나로 합쳐 준다.
+`uri` 에는 `ABC:` 든 `abc:` 든 쓸 수 있고, `s3://ABC/download/file.docx` 형식도 받는다.
+
+---
+
+## 5. 동작 방식
+
+```
+요청 -> 대상 해석(filepath/uri/file) -> 로컬 작업 파일 준비
+     -> domain_core.encrypt|decrypt|check(filepath)
+     -> 성공 시에만 원래 위치로 반영 -> 표준 응답 -> 임시 파일 정리
+```
+
+**안전 처리**
+
+- `local.in_place: false`(기본값)이면 작업본을 만들어 처리하고, 성공했을 때만 원본을
+  원자적으로(`os.replace`) 교체한다. 도메인이 실패하거나 예외를 던져도 **원본은 그대로** 남는다.
+- 오브젝트 스토리지는 성공했을 때만 같은 키로 다시 올린다(`ContentType` 유지).
+- `check` 는 읽기 전용이라 큰 파일이어도 복사하지 않고 원본을 그대로 읽는다.
+- 임시 작업 디렉토리는 요청이 끝나면(파일 응답이면 전송 완료 후) 지운다.
+
+**보안**
+
+- `local.allowed_roots` 를 지정하면 그 디렉토리 하위 경로만 처리한다(경로 정규화 후 검사).
+  비워 두면 서버가 접근 가능한 모든 경로를 허용하므로, 외부에 노출되는 환경에서는 지정을 권장한다.
+- 접근키는 config 파일 대신 환경변수로 주입한다.
+
+**로깅** — `pxa-common` 의 `setup_logging()` + `RequestLoggingMiddleware`.
+request-id 와 처리시간이 함께 남고, 설정한 디렉토리에 자정마다 회전 저장된다.
+
+```
+2026-09-14 21:41:03,815 | INFO | pxa | encrypt 요청: source=local location=/download/file.docx
+2026-09-14 21:41:03,816 | INFO | pxa | encrypt 완료: location=/download/file.docx result=True (1.8ms)
+2026-09-14 21:41:03,816 | INFO | pxa | [4126cfffb094] GET /api/v1/encrypt -> 200 (3.1ms)
+```
+
+---
+
+## 6. 구조
+
+```
+domain_core.py              # ★ 개발자가 작성하는 유일한 파일
+config/config.yaml          # 설정 (접근키는 환경변수 권장)
+pxa_drm_server/
+  app.py                    # FastAPI 앱 조립 (로깅/예외/미들웨어/라우터)
+  asgi.py                   # ASGI 진입점 (uvicorn 이 잡는 app)
+  main.py                   # CLI 진입점 (run / init)
+  api/v1/routes.py          # encrypt / decrypt / check / health
+  service.py                # 공통 처리 흐름
+  domain.py                 # domain_core 로딩 및 호출
+  sources/                  # 대상별 입출력 (local / objectstorage / upload)
+  config.py  codes.py  errors.py  runtime.py  workspace.py
+  messages/drm.yaml         # 메시지 카탈로그
+  templates/                # init 이 복사하는 시작 템플릿
+tests/
+```
+
+## 7. 테스트
+
+```bash
+pip install -e ".[dev]"
+pytest
+```
+
+## 8. 배포 (PyPI)
+
+```bash
+pip install build twine
+
+rm -rf dist build *.egg-info
+python -m build              # dist/ 에 sdist + wheel 생성
+twine check dist/*
+
+twine upload --repository testpypi dist/*    # 먼저 TestPyPI 로 확인
+twine upload dist/*                          # PyPI 업로드
+```
+
+- 버전은 `pyproject.toml` 의 `project.version` 한 곳에서 관리한다.
+  `pxa_drm_server.__version__` 은 설치된 패키지 메타데이터에서 읽으므로 따로 고칠 필요가 없다
+  (`tests/test_packaging.py` 가 둘이 어긋나지 않는지 검사한다).
+- PyPI 는 같은 버전을 다시 올릴 수 없다. 올린 뒤 고칠 것이 생기면 `0.1.1` 로 올려서 배포한다.
+- 인증은 API 토큰을 쓴다(`~/.pypirc` 또는 `TWINE_USERNAME=__token__`, `TWINE_PASSWORD=pypi-...`).
+- `domain_core.py` 와 `config/config.yaml` 은 패키지에 직접 담기지 않고
+  `pxa_drm_server/templates/` 로 들어가 `init` 이 꺼내 준다.