habsi/authentik
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

root: fix system check warnings (#8277)

Browse Source 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
This commit is contained in:
Jens L
2024-01-24 12:10:55 +01:00
committed by GitHub
parent 4f4815251e
commit 9ed2b74661
3 changed files with 14 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
authentik/root/settings.py
View File

@ -453,6 +453,17 @@ _DISALLOWED_ITEMS = [
"CELERY", "CELERY",
] ]
SILENCED_SYSTEM_CHECKS = [
# We use our own subclass of django.middleware.csrf.CsrfViewMiddleware
"security.W003",
# We don't set SESSION_COOKIE_SECURE since we use a custom SessionMiddleware subclass
"security.W010",
# HSTS: This is configured in reverse proxies/the go proxy, not in django
"security.W004",
# https redirect: This is configured in reverse proxies/the go proxy, not in django
"security.W008",
]
def _update_settings(app_path: str): def _update_settings(app_path: str):
try: try:

6
lifecycle/ak
View File

@ -50,10 +50,6 @@ function set_mode {
trap cleanup EXIT trap cleanup EXIT
} }
function run_django_checks {
python -m manage check --deploy
}
function cleanup { function cleanup {
rm -f ${MODE_FILE} rm -f ${MODE_FILE}
} }
@ -71,7 +67,6 @@ fi
if [[ "$1" == "server" ]]; then if [[ "$1" == "server" ]]; then
wait_for_db wait_for_db
set_mode "server" set_mode "server"
run_django_checks
# If we have bootstrap credentials set, run bootstrap tasks outside of main server # If we have bootstrap credentials set, run bootstrap tasks outside of main server
# sync, so that we can sure the first start actually has working bootstrap # sync, so that we can sure the first start actually has working bootstrap
# credentials # credentials
@ -82,7 +77,6 @@ if [[ "$1" == "server" ]]; then
elif [[ "$1" == "worker" ]]; then elif [[ "$1" == "worker" ]]; then
wait_for_db wait_for_db
set_mode "worker" set_mode "worker"
run_django_checks
check_if_root "python -m manage worker" check_if_root "python -m manage worker"
elif [[ "$1" == "worker-status" ]]; then elif [[ "$1" == "worker-status" ]]; then
wait_for_db wait_for_db

3
lifecycle/migrate.py
View File

@ -111,5 +111,8 @@ if __name__ == "__main__":
) from exc ) from exc
execute_from_command_line(["", "migrate_schemas"]) execute_from_command_line(["", "migrate_schemas"])
execute_from_command_line(["", "migrate_schemas", "--schema", "template", "--tenant"]) execute_from_command_line(["", "migrate_schemas", "--schema", "template", "--tenant"])
execute_from_command_line(
["", "check"] + ([] if CONFIG.get_bool("debug") else ["--deploy"])
)
finally: finally:
release_lock(curr) release_lock(curr)