From dcffd5e056708e76a8b177172dadf03882b91dca Mon Sep 17 00:00:00 2001 From: vickytechkey Date: Sun, 23 Aug 2026 10:00:44 +0530 Subject: [PATCH] chore: migrate email service to dedicated SSL-enabled nginx server and remove default values from email settings --- core/settings.py | 10 +++++----- scratch/nginx_default | 29 +++++++++++++++++++++-------- 2 files changed, 26 insertions(+), 13 deletions(-) diff --git a/core/settings.py b/core/settings.py index 3cac687..f971e75 100644 --- a/core/settings.py +++ b/core/settings.py @@ -142,8 +142,8 @@ MEDIA_ROOT = BASE_DIR / 'media' email_secret = get_secret("arn:aws:secretsmanager:ap-south-2:764709663363:secret:emailcredentials-DOIQtc") EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend' -EMAIL_HOST = email_secret.get('smtp', 'smtp.hostinger.com') -EMAIL_PORT = int(email_secret.get('smtp_port', 465)) -EMAIL_USE_SSL = True # Assuming SSL for port 465 -EMAIL_HOST_USER = email_secret.get('username', 'info@tradhox.com') -EMAIL_HOST_PASSWORD = email_secret.get('password', '') +EMAIL_HOST = email_secret.get('smtp') +EMAIL_PORT = int(email_secret.get('smtp_port')) +EMAIL_USE_SSL = True +EMAIL_HOST_USER = email_secret.get('username') +EMAIL_HOST_PASSWORD = email_secret.get('password') diff --git a/scratch/nginx_default b/scratch/nginx_default index 94883e8..0c438c7 100644 --- a/scratch/nginx_default +++ b/scratch/nginx_default @@ -28,14 +28,6 @@ server { proxy_set_header X-Forwarded-Proto $scheme; } - location /emailservice/ { - proxy_pass http://127.0.0.1:8091/; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - } - location /crm { proxy_pass http://127.0.0.1:8081; proxy_set_header Host $host; @@ -65,3 +57,24 @@ server { proxy_set_header X-Forwarded-Proto $scheme; } } + +server { + listen 9002 ssl; + listen [::]:9002 ssl; + + server_name _; + + ssl_certificate /etc/nginx/ssl/chained.crt; + ssl_certificate_key /etc/nginx/ssl/private.key; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers HIGH:!aNULL:!MD5; + + location / { + proxy_pass http://127.0.0.1:8091/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } +}