43594777e0
The SecurityHeadersMiddleware applied a strict style-src policy to all responses, blocking inline styles that Wagtail admin relies on for layout. Skip the custom CSP for /cms/ and /django-admin/ paths. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
No Hype AI
Django 5.2 + Wagtail 7 blog engine for No Hype AI.
Environment Variables
Required:
SECRET_KEYDATABASE_URLALLOWED_HOSTSDEBUGWAGTAIL_SITE_NAME
Also used:
WAGTAILADMIN_BASE_URLCONSENT_POLICY_VERSIONEMAIL_BACKENDEMAIL_HOSTEMAIL_PORTEMAIL_USE_TLSEMAIL_HOST_USEREMAIL_HOST_PASSWORDDEFAULT_FROM_EMAILNEWSLETTER_PROVIDER
Containerized Development
docker compose build
docker compose run --rm web python manage.py migrate
docker compose up
App is exposed on http://localhost:8035.
Test/Lint/Typecheck (Docker)
docker compose run --rm web pytest
docker compose run --rm web ruff check .
docker compose run --rm web mypy apps config
Deploy Runbook
git pull origin main
pip install -r requirements/production.txt
python manage.py migrate --run-syncdb
python manage.py collectstatic --noinput
python manage.py tailwind build
python manage.py check_content_integrity
sudo systemctl reload gunicorn
Backups
- PostgreSQL dump daily:
pg_dump | gzip > backup-$(date +%Y%m%d).sql.gz MEDIA_ROOTrsynced offsite daily- Restore DB:
gunzip -c backup-YYYYMMDD.sql.gz | psql "$DATABASE_URL" - Restore media:
rsync -avz <backup-host>:/path/to/media/ /srv/nohypeai/media/
Runtime Notes
- Keep Caddy serving
/static/and/media/directly in production. - Keep Gunicorn behind Caddy and run from a systemd service/socket pair.
- Use
python manage.py purge_old_comment_data --months 24in cron for comment-data retention.