Stage and prod config

apps/core/services/file_access.py

@@ -13,5 +13,4 @@ def has_download_permission(private_file: PrivateFile) -> bool:
         return True
 
     relative_path = Path(private_file.full_path).relative_to(settings.PRIVATE_STORAGE_ROOT)
-    print("!--Relative path:", relative_path)
     return Play.objects.filter(url_download=relative_path, published=True).exists()

infra_deploy/prod/lubimovka_backend_prod_deploy.yml

@@ -18,6 +18,7 @@ services:
     volumes:
       - static_value_prod:/code/staticfiles/
       - ./media:/code/media/
+      - ./protected_media:/code/protected_media/
       - ./logs/backend_logs/:/code/logs/
     depends_on:
       - postgres
@@ -32,6 +33,7 @@ services:
     volumes:
       - static_value_prod:/code/staticfiles/
       - ./media:/code/media/
+      - ./protected_media:/code/protected_media/
       - ./logs/backend_logs/:/code/logs/
     command: >
       sh -c "

infra_deploy/prod/lubimovka_frontend_prod_deploy.yml

@@ -20,6 +20,7 @@ services:
       - ./logs/swag_logs/:/config/log/
       - static_value_prod:/config/prod/static/
       - ./media:/config/prod/media/
+      - ./protected_media:/config/prod/protected_media/
     ports:
       - 443:443
       - 80:80

infra_deploy/prod/swag/swag_nginx_prod.conf

@@ -34,7 +34,7 @@ server {
     # proxy_http_version 1.1;
     # proxy_set_header Connection "";
     }
-    location ~^/(api|admin|files) {
+    location ~^/(api|admin|files|private-media) {
         include /config/nginx/proxy.conf;
         set $upstream_app backend_prod;
         set $upstream_port 8000;
@@ -53,6 +53,11 @@ server {
         add_header Content-disposition "attachment; filename=$1";
     }
 
+    location /private-redirect/ {
+        internal;
+        alias   /config/prod/protected_media/;
+    }
+
     location ~^/(media|static) {
         set $width $arg_w;
         if ($arg_w = ''){

infra_deploy/stage/lubimovka_backend_stage_deploy.yml

@@ -20,6 +20,7 @@ services:
     volumes:
       - static_value_stage:/code/staticfiles/
       - ./media:/code/media/
+      - ./protected_media:/code/protected_media/
       - ./logs/backend_logs/:/code/logs/
     depends_on:
       - postgres
@@ -34,6 +35,7 @@ services:
     volumes:
       - static_value_stage:/code/staticfiles/
       - ./media:/code/media/
+      - ./protected_media:/code/protected_media/
       - ./logs/backend_logs/:/code/logs/
     command: >
       sh -c "

infra_deploy/stage/lubimovka_frontend_stage_deploy.yml

@@ -21,6 +21,7 @@ services:
       - ./logs/swag_logs/:/config/log/
       - static_value_stage:/config/stage/static/
       - ./media:/config/stage/media/
+      - ./protected_media:/config/stage/protected_media/
     ports:
       - 443:443
       - 80:80

infra_deploy/stage/swag/swag_nginx_stage.conf

@@ -36,7 +36,7 @@ server {
     # proxy_http_version 1.1;
     # proxy_set_header Connection "";
     }
-    location ~^/(api|admin|files) {
+    location ~^/(api|admin|files|private-media) {
         include /config/nginx/proxy.conf;
         set $upstream_app backend;
         set $upstream_port 8000;
@@ -55,6 +55,12 @@ server {
         add_header Content-disposition "attachment; filename=$1";
     }
 
+
+    location /private-redirect/ {
+        internal;
+        alias   /config/stage/protected_media/;
+    }
+
     location ~^/(media|static) {
         set $width $arg_w;
         if ($arg_w = ''){