Sync changes to the main branch

.cursor/mcp.json

@@ -0,0 +1,9 @@
+{
+    "mcpServers": {
+      "10x-mvp-tracker": {
+        "command": "npx",
+        "args": ["-y", "@przeprogramowani/10x-mvp-tracker@latest"],
+        "transport": "stdio"
+      }
+    }
+}

.dockerignore

@@ -0,0 +1,38 @@
+.git
+.gitignore
+.github
+.cursor
+
+__pycache__/
+*.py[cod]
+*.pyo
+*.pyd
+
+.venv/
+venv/
+env/
+
+.pytest_cache/
+htmlcov/
+.coverage
+.coverage.*
+junit.xml
+
+# Local/dev config & secrets
+.env
+.env.*
+config.yaml
+
+# Runtime/generated artifacts
+app/celerybeat-schedule
+app/celerybeat-schedule.*
+**/celerybeat-schedule
+**/celerybeat-schedule.*
+
+# Media/static outputs (generated or mounted at runtime)
+media/
+static/
+staticfiles/
+app/media/
+app/static/
+app/staticfiles/

.env.example

@@ -0,0 +1,71 @@
+# Django Settings
+# Environment variable names can match YAML paths exactly (dot-separated lowercase)
+# or use traditional format (uppercase with underscores)
+# Both formats work: 'django.secret_key' OR 'DJANGO_SECRET_KEY'
+django.secret_key=your-secret-key-here-change-in-production
+django.debug=True
+django.allowed_hosts=localhost,127.0.0.1
+django.site_id=1
+# Alternative uppercase format also works:
+# DJANGO_SECRET_KEY=your-secret-key-here-change-in-production
+# DJANGO_DEBUG=True
+
+# Database Configuration
+# Dot-separated format (matches YAML exactly) or uppercase underscore format
+# For VPS: Use local database
+database.name=gallery
+database.user=postgres
+database.password=postgres
+database.host=db
+database.port=5432
+# For Local GPU Worker: Use VPS database via WireGuard VPN
+# database.host=10.0.0.1
+# database.port=5432
+# Alternative: DATABASE_NAME, DATABASE_USER, etc. also work
+
+# Authentication Configuration
+# Dot-separated format (matches YAML exactly)
+authentication.account_email_verification=none
+# Options: 'mandatory', 'optional', or 'none'
+
+# Social Authentication - Google
+# Dot-separated format preferred, uppercase underscore also works
+social_auth.google.enabled=true
+social_auth.google.client_id=your-google-client-id
+social_auth.google.secret=your-google-secret
+
+# Social Authentication - Facebook
+social_auth.facebook.enabled=false
+social_auth.facebook.app_id=your-facebook-app-id
+social_auth.facebook.app_secret=your-facebook-app-secret
+
+# Social Authentication - GitHub
+social_auth.github.enabled=false
+social_auth.github.client_id=your-github-client-id
+social_auth.github.secret=your-github-secret
+
+# Celery Configuration
+# Dot-separated format (matches YAML exactly)
+# For VPS: Use local Redis
+celery.broker_url=redis://redis:6379/0
+celery.result_backend=redis://redis:6379/0
+# For Local GPU Worker: Use VPS Redis via WireGuard VPN
+# celery.broker_url=redis://10.0.0.1:6379/0
+# celery.result_backend=redis://10.0.0.1:6379/0
+REDIS_PORT=6379
+
+# Flower Configuration (Celery Monitoring)
+# Note: FLOWER_USERNAME and FLOWER_PASSWORD are still used directly (not from config.yaml)
+FLOWER_PORT=5555
+FLOWER_USERNAME=admin
+FLOWER_PASSWORD=change-this-password-in-production
+
+# SeaweedFS / S3 Configuration
+# Dot-separated format (matches YAML exactly)
+storage.use_s3=False
+storage.s3.access_key_id=
+storage.s3.secret_access_key=
+storage.s3.bucket_name=gallery
+storage.s3.endpoint_url=http://seaweedfs:8333
+storage.s3.region_name=us-east-1
+storage.s3.use_ssl=False

.github/workflows/README.md

@@ -0,0 +1,72 @@
+# GitHub Actions Workflows
+
+This directory contains GitHub Actions workflows for CI/CD.
+
+## Workflows
+
+### `tests.yml` (Enabled)
+
+Runs the full test suite (unit + e2e with Playwright) on every pull request and push to main branches.
+
+**Features:**
+- Tests on Python 3.11 and 3.12
+- **uv** for installs with dependency cache (`enable-cache: true`, keyed by `uv.lock`)
+- **Playwright** for e2e: Chromium only; browser binaries cached (`~/.cache/ms-playwright`, keyed by `uv.lock`); on cache hit only OS deps are installed
+- Uses SQLite (no external database required)
+- Generates coverage reports
+- Uploads test results as artifacts
+- Optional Codecov integration
+
+**Triggers:**
+- Pull requests to `main`, `master`, or `develop`
+- Pushes to `main`, `master`, or `develop`
+
+### `tests.yml.disabled` (Legacy / Disabled)
+
+Previous test workflow (pip-based, no Playwright). Superseded by `tests.yml`.
+
+### `lint.yml.disabled` (Currently Disabled)
+
+Runs code quality checks (optional - can be enabled when you add linting tools).
+
+**Features:**
+- Checks code formatting with `black`
+- Checks import sorting with `isort`
+- Runs `ruff` for linting
+
+**Note:** Currently set to not fail the build (`|| true`). Remove this when you're ready to enforce linting.
+
+## Setup
+
+### Codecov (Optional)
+
+If you want to use Codecov for coverage tracking:
+
+1. Sign up at [codecov.io](https://codecov.io)
+2. Add your repository
+3. The workflow will automatically upload coverage reports
+
+If you don't want Codecov, the workflow will still work - it just won't upload coverage (the step is set to `continue-on-error: true`).
+
+## Customization
+
+### Enable Lint Workflow
+
+To enable the lint workflow, rename `lint.yml.disabled` → `lint.yml`.
+
+### Add More Python Versions
+
+Edit `.github/workflows/tests.yml`:
+
+```yaml
+matrix:
+  python-version: ["3.11", "3.12", "3.13"]
+```
+
+### Add PostgreSQL for Integration Tests
+
+Uncomment the PostgreSQL service section in `tests.yml` if you need it for integration tests.
+
+### Enable Linting Enforcement
+
+Edit `.github/workflows/lint.yml` (after enabling) and remove `|| true` from the commands to make linting failures block PRs.

.github/workflows/lint.yml.disabled

@@ -0,0 +1,44 @@
+name: Lint
+
+on:
+  pull_request:
+    branches:
+      - main
+      - master
+      - develop
+  push:
+    branches:
+      - main
+      - master
+      - develop
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+          cache: 'pip'
+
+      - name: Install linting dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install ruff black isort mypy
+
+      - name: Run ruff
+        run: |
+          ruff check app/ || true
+
+      - name: Check code formatting with black
+        run: |
+          black --check app/ || true
+
+      - name: Check import sorting with isort
+        run: |
+          isort --check-only app/ || true

.github/workflows/tests.yml

@@ -0,0 +1,82 @@
+name: Tests
+
+on:
+  pull_request:
+    branches:
+      - main
+      - master
+      - develop
+  push:
+    branches:
+      - main
+      - master
+      - develop
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12"]
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v4
+        with:
+          enable-cache: true
+          cache-dependency-glob: "uv.lock"
+
+      - name: Install dependencies
+        run: uv sync --locked --extra dev
+
+      - name: Cache Playwright browsers
+        id: playwright-cache
+        uses: actions/cache@v4
+        with:
+          path: ~/.cache/ms-playwright
+          key: playwright-${{ runner.os }}-${{ hashFiles('uv.lock') }}
+          restore-keys: |
+            playwright-${{ runner.os }}-
+
+      - name: Install Playwright Chromium
+        run: |
+          if [ "${{ steps.playwright-cache.outputs.cache-hit }}" != "true" ]; then
+            uv run playwright install chromium --with-deps
+          else
+            uv run playwright install-deps
+          fi
+
+      - name: Run tests with pytest (unit + e2e)
+        env:
+          DJANGO_SETTINGS_MODULE: config.test_settings
+        run: |
+          uv run pytest --cov=app --cov-report=xml --cov-report=term-missing --junitxml=junit.xml -v
+
+      - name: Upload coverage to Codecov (optional)
+        uses: codecov/codecov-action@v4
+        if: always()
+        continue-on-error: true
+        with:
+          file: ./coverage.xml
+          flags: unittests
+          name: codecov-umbrella
+          fail_ci_if_error: false
+
+      - name: Upload test results
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: test-results-${{ matrix.python-version }}
+          path: |
+            junit.xml
+            coverage.xml
+          retention-days: 30