d0a550fee6
- Extract comment templates into reusable partials (_comment.html, _comment_form.html, _comment_list.html, _reply_form.html, etc.) - Add HTMX progressive enhancement: inline form submission with partial responses, delta polling for live updates, form reset on success, success/moderation toast feedback - Integrate Cloudflare Turnstile for invisible bot protection: server-side token validation with hostname check, fail-closed on errors/timeouts, feature-flagged via TURNSTILE_SECRET_KEY env var - Auto-approve comments that pass Turnstile; keep manual approval as fallback when Turnstile is disabled (model default stays False) - Add CommentReaction model with UniqueConstraint for session-based anonymous reactions (heart/thumbs-up), toggle support, separate rate-limit bucket (20/min) - Add comment poll endpoint (GET /comments/poll/<id>/?after_id=N) for HTMX delta polling without duplicates - Update CSP middleware to allow challenges.cloudflare.com in script-src, connect-src, and frame-src - Self-host htmx.min.js (v2.0.4) to minimize CSP surface area - Add django-htmx middleware and requests to dependencies - Add Unapprove bulk action to Wagtail admin for moderation - Extend PII purge command to anonymize reaction session_key - Design refresh: neon glow avatars, solid hover shadows, gradient section header, cyan reply borders, grid-pattern empty state, neon-pink focus glow on form inputs - Add turnstile_site_key to template context via context processor - 18 new tests covering HTMX contracts, Turnstile success/failure/ timeout/hostname-mismatch, polling deltas, reaction toggle/dedup/ rate-limit, CSP headers, and PII purge extension Closes #43 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
No Hype AI
Django 5.2 + Wagtail 7 blog engine for No Hype AI.
Environment Variables
Required:
SECRET_KEYDATABASE_URLALLOWED_HOSTSDEBUGWAGTAIL_SITE_NAME
Also used:
WAGTAILADMIN_BASE_URLCONSENT_POLICY_VERSIONEMAIL_BACKENDEMAIL_HOSTEMAIL_PORTEMAIL_USE_TLSEMAIL_HOST_USEREMAIL_HOST_PASSWORDDEFAULT_FROM_EMAILNEWSLETTER_PROVIDER
Containerized Development
docker compose build
docker compose run --rm web python manage.py migrate
docker compose up
App is exposed on http://localhost:8035.
Test/Lint/Typecheck (Docker)
docker compose run --rm web pytest
docker compose run --rm web ruff check .
docker compose run --rm web mypy apps config
Deploy Runbook
git pull origin main
pip install -r requirements/production.txt
python manage.py migrate --run-syncdb
python manage.py collectstatic --noinput
python manage.py tailwind build
python manage.py check_content_integrity
sudo systemctl reload gunicorn
Backups
- PostgreSQL dump daily:
pg_dump | gzip > backup-$(date +%Y%m%d).sql.gz MEDIA_ROOTrsynced offsite daily- Restore DB:
gunzip -c backup-YYYYMMDD.sql.gz | psql "$DATABASE_URL" - Restore media:
rsync -avz <backup-host>:/path/to/media/ /srv/nohypeai/media/
Runtime Notes
- Keep Caddy serving
/static/and/media/directly in production. - Keep Gunicorn behind Caddy and run from a systemd service/socket pair.
- Use
python manage.py purge_old_comment_data --months 24in cron for comment-data retention.