Bernard Siebens
fc6488ce55
Implements BILLING.md. The architecture was sound -- snapshot-on-Due, dated prices, asymmetric dry-run commands are all kept -- so this fixes the three hardcoded assumptions rather than rewriting. The real defect: grace ran from period_END, so an annual club used the whole unpaid year plus 45 days (~410 days) before anything switched it off. Grace now runs from the period START, and every clock is per-plan. - Tier -> Plan (+ TierPrice -> PlanPrice, and every FK). Migration 0004 is hand-written: run non-interactively, makemigrations emits DeleteModel+CreateModel and drops every price, subscription and due. Its two RemoveConstraints must come first, or SQLite's table-rebuild tries to render a constraint over a just-renamed column. Verified by round-tripping real rows through it. - Plan gains duration_months / renewal_lead_days / grace_days / is_trial, with CheckConstraints and a matching clean() so the form reports an impossible plan instead of 500ing on IntegrityError. - Existing dues keep their stored grace_until. Re-deriving it would put the date in the past for every open annual period and archive the entire paying customer base on the next --commit run. - Trials take their length from the trial plan's own duration_months; start_trial() loses its trial_months argument. - New BillingNotice service drives a club-facing warning: every level on the dashboard, and on every management page once urgent. - send_billing_reminders emails club admins, once per escalation level so a daily cron is not a daily email. SMTP settings are env-driven and provider-agnostic; the backend defaults to console. - Paying does not auto-restore an archived club -- the control panel surfaces a Reactivate prompt instead, since a club can also be archived by hand.
51 lines
2.0 KiB
Plaintext
51 lines
2.0 KiB
Plaintext
# Copy to .env.production and fill in. Everything here is read by python-decouple.
|
|
|
|
# --- Django ---
|
|
DJANGO_SECRET_KEY= # python -c "import secrets; print(secrets.token_urlsafe(64))"
|
|
DJANGO_DEBUG=False
|
|
# The leading dot matches every club subdomain.
|
|
DJANGO_ALLOWED_HOSTS=.rosterchief.app
|
|
DJANGO_CSRF_TRUSTED_ORIGINS=https://rosterchief.app,https://*.rosterchief.app
|
|
DJANGO_TIME_ZONE=Europe/Brussels
|
|
|
|
# --- Tenancy ---
|
|
# Drives subdomain resolution, the shared session cookie, and the WebAuthn RP ID (one passkey
|
|
# across every club).
|
|
ROSTERCHIEF_BASE_DOMAIN=rosterchief.app
|
|
ROSTERCHIEF_RP_NAME=RosterChief
|
|
|
|
# --- Services ---
|
|
DJANGO_DATABASE_URL=postgres://rosterchief:CHANGEME@db:5432/rosterchief
|
|
DJANGO_REDIS_URL=redis://redis:6379/0
|
|
|
|
# --- HTTPS (off by default in code; the deploy is what turns them on) ---
|
|
DJANGO_SECURE_SSL_REDIRECT=True
|
|
DJANGO_SESSION_COOKIE_SECURE=True
|
|
DJANGO_CSRF_COOKIE_SECURE=True
|
|
DJANGO_SECURE_HSTS_SECONDS=31536000
|
|
DJANGO_SECURE_HSTS_INCLUDE_SUBDOMAINS=True
|
|
# Preload is a one-way door — turn it on only once the wildcard cert has proven itself.
|
|
DJANGO_SECURE_HSTS_PRELOAD=False
|
|
|
|
# --- Static ---
|
|
DJANGO_STATICFILES_BACKEND=whitenoise.storage.CompressedManifestStaticFilesStorage
|
|
|
|
# --- Uploads: set these and club logos move off local disk (required for >1 app server) ---
|
|
# AWS_STORAGE_BUCKET_NAME=rosterchief-media
|
|
# AWS_S3_ENDPOINT_URL=https://fsn1.your-objectstorage.com
|
|
# AWS_S3_REGION_NAME=fsn1
|
|
# AWS_ACCESS_KEY_ID=
|
|
# AWS_SECRET_ACCESS_KEY=
|
|
|
|
# --- Email: any SMTP provider. Left unset, mail is PRINTED TO THE LOG and never delivered,
|
|
# which means send_billing_reminders will look like it worked while no club hears from you.
|
|
DJANGO_EMAIL_BACKEND=django.core.mail.backends.smtp.EmailBackend
|
|
DJANGO_EMAIL_HOST=smtp.example.com
|
|
DJANGO_EMAIL_PORT=587
|
|
DJANGO_EMAIL_HOST_USER=
|
|
DJANGO_EMAIL_HOST_PASSWORD=
|
|
DJANGO_EMAIL_USE_TLS=True
|
|
DJANGO_DEFAULT_FROM_EMAIL=RosterChief <noreply@rosterchief.app>
|
|
# Where a club is told to reply with a billing question.
|
|
ROSTERCHIEF_BILLING_CONTACT_EMAIL=billing@rosterchief.app
|