diff --git a/conf/settings.py b/conf/settings.py index adc0805..e15e977 100644 --- a/conf/settings.py +++ b/conf/settings.py @@ -127,6 +127,7 @@ LANGUAGES = ( ("pl", "Polski"), ("pt", "Português"), ("pt-br", "Português brasileiro"), + ("ro", "Română"), ("ru", "Русский"), ("sk", "Slovenčina"), ("sl", "Slovenščina"), @@ -218,12 +219,12 @@ TEMPLATES = [ ] -# GitHub username for sending pull requests. +# GitHub username and token for sending pull requests. # Please see the documentation for more details. GITHUB_USERNAME = "__GITHUBUSER__" GITHUB_TOKEN = "__GITHUBTOKEN__" -# GitLab username for sending merge requests. +# GitLab username and token for sending merge requests. # Please see the documentation for more details. GITLAB_USERNAME = None GITLAB_TOKEN = None @@ -336,6 +337,14 @@ AUTH_PASSWORD_VALIDATORS = [ # }, ] +# Password hashing (prefer Argon) +PASSWORD_HASHERS = [ + "django.contrib.auth.hashers.Argon2PasswordHasher", + "django.contrib.auth.hashers.PBKDF2PasswordHasher", + "django.contrib.auth.hashers.PBKDF2SHA1PasswordHasher", + "django.contrib.auth.hashers.BCryptSHA256PasswordHasher", +] + # Allow new user registrations REGISTRATION_OPEN = True @@ -623,6 +632,7 @@ SECURE_REDIRECT_EXEMPT = (r"healthz/$",) # Allowing HTTP access to health check # Session cookie age (in seconds) SESSION_COOKIE_AGE = 1000 SESSION_COOKIE_AGE_AUTHENTICATED = 1209600 +SESSION_COOKIE_SAMESITE = "Lax" # Increase allowed upload size DATA_UPLOAD_MAX_MEMORY_SIZE = 50000000 @@ -630,6 +640,7 @@ DATA_UPLOAD_MAX_MEMORY_SIZE = 50000000 LANGUAGE_COOKIE_SECURE = SESSION_COOKIE_SECURE LANGUAGE_COOKIE_HTTPONLY = SESSION_COOKIE_HTTPONLY LANGUAGE_COOKIE_AGE = SESSION_COOKIE_AGE_AUTHENTICATED * 10 +LANGUAGE_COOKIE_SAMESITE = SESSION_COOKIE_SAMESITE # Some security headers SECURE_BROWSER_XSS_FILTER = True @@ -896,7 +907,7 @@ CELERY_RESULT_BACKEND = CELERY_BROKER_URL CELERY_WORKER_MAX_MEMORY_PER_CHILD = 200000 CELERY_BEAT_SCHEDULE_FILENAME = os.path.join(DATA_DIR, "celery", "beat-schedule") CELERY_TASK_ROUTES = { - "weblate.trans.tasks.auto_translate": {"queue": "translate"}, + "weblate.trans.tasks.auto_translate*": {"queue": "translate"}, "weblate.accounts.tasks.notify_*": {"queue": "notify"}, "weblate.accounts.tasks.send_mails": {"queue": "notify"}, "weblate.utils.tasks.settings_backup": {"queue": "backup"}, @@ -920,6 +931,7 @@ MATOMO_SITE_ID = None MATOMO_URL = None GOOGLE_ANALYTICS_ID = None SENTRY_DSN = None +SENTRY_ENVIRONMENT = None AKISMET_API_KEY = None try: diff --git a/scripts/_common.sh b/scripts/_common.sh index 025a55f..250be18 100644 --- a/scripts/_common.sh +++ b/scripts/_common.sh @@ -12,7 +12,7 @@ pkg_dependencies="libxml2-dev libxslt-dev libfreetype6-dev libjpeg-dev libz-dev libpq-dev libglib2.0-dev mailutils python-celery-common hub" # Weblate's version for PIP and settings file -weblate_version="4.5.3" +weblate_version="4.6" debian_maj_version=$(sed 's/\..*//' /etc/debian_version)