serve media files through app

contracts/migrations/0009_alter_contractfile_file.py

+# Generated by Django 4.1.4 on 2023-03-22 10:59
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('contracts', '0008_alter_contracteesignaturerepresentative_options_and_more'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='contractfile',
+            name='file',
+            field=models.FileField(upload_to='_private/', verbose_name='Soubor'),
+        ),
+    ]

contracts/models.py

@@ -532,7 +532,7 @@ class ContractFile(NameStrMixin, models.Model):
 
     file = models.FileField(
         verbose_name="Soubor",
-        upload_to="private/",
+        upload_to="_private/",
     )
 
     contract = models.ForeignKey(

media_server/admin.py

+from django.contrib import admin
+
+# Register your models here.

media_server/apps.py

+from django.apps import AppConfig
+
+
+class MediaServerConfig(AppConfig):
+    default_auto_field = 'django.db.models.BigAutoField'
+    name = 'media_server'

media_server/models.py

+from django.db import models
+
+# Create your models here.

media_server/tests.py

+from django.test import TestCase
+
+# Create your tests here.

media_server/urls.py

+from django.urls import path
+
+from . import views
+
+app_name = "media_server"
+urlpatterns = [
+    path(
+        "<path:path>",
+        views.view_media,
+        name="view_media",
+    ),
+]

media_server/views.py

+import os
+
+from django.core.files.storage import FileSystemStorage
+from django_downloadview import StorageDownloadView
+from django_http_exceptions import HTTPExceptions
+
+
+# Create your views here.
+
+storage = FileSystemStorage()
+
+
+class MediaView(StorageDownloadView):
+    attachment = False
+
+    def get_path(self, *args, **kwargs) -> str:
+        path = super().get_path(*args, **kwargs)
+
+        # Make sure path is clean
+        path = os.path.normpath(path)
+
+        if path.startswith("_"):  # Private path
+            raise HTTPExceptions.NOT_FOUND
+
+        return path
+
+
+view_media = MediaView.as_view(storage=storage)

nginx.conf

@@ -20,13 +20,4 @@ server {
         proxy_set_header X-Forwarded-Proto https;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     }
-
-    location /media/ {
-        alias /var/opt/contract_registry/media/
-    }
-
-    location ~ /media/private/ {
-        deny all;
-        return 404;
-    }
 }

registry/settings/base.py

@@ -64,6 +64,7 @@ INSTALLED_APPS = [
     "markdownx",
     "pirates",
     "webpack_loader",
+    "media_server",
     "shared",
     "contracts",
     "oidc",

registry/urls.py

@@ -28,5 +28,6 @@ urlpatterns = [
     path("", include("users.urls")),
     path("markdownx/", include("markdownx.urls")),
     path("oidc/", include("oidc.urls")),
+    path("media/", include("media_server.urls")),
     path("admin/", admin.site.urls),
 ] + pirates_urlpatterns