website/TODO.md

# To-do

* split the template/content files out from `conservancy/static` into their own
  `content` directory (avoid mixing static and non-static content)
* ask Denver about why so many license files
* serve a 400 in Apache for a hostname we don't explicitly support
* use `<detail>` elements for supporter page hidden sections, rather than
  complex jQuery - or consider Alpine.js
* replace `internalNavigate` with inline flexbox layout
* add tests for main pages returning 200


# Done

* remove `ForceCanonicalHostnameMiddleware` by ensuring canonical redirect and
  HTTPS redirect is done by Apache
* standardise settings to replace `settings.py` and `djangocommonsettings.py`
  with `settings/prod.py` and move `SECRET_KEY` to an environment variable
* migrate to Django 4.2 LTS
* review `apache2` directory - may be unused
* add deployment script that runs migrations and collects static files
* switch `ParameterValidator` to use `SECRET_KEY` if possible to minimize
  non-standard settings
* install staticfiles app
Add to-do file This allows me to track improvements we'd like to make, but not necessarily straight away. 2023-10-26 12:33:29 +11:00			`# To-do`

Handle trailing slashes in static content 2024-03-20 15:45:46 +11:00			* split the template/content files out from `conservancy/static` into their own
			`content` directory (avoid mixing static and non-static content)
Delegate management of canonical URLs to Apache This middleware is mostly redundant: * redirecting to canonical URLs can be done more simply in Apache * appending a forward slash is a default in CommonMiddleware now * we're no longer using Squid cache May need to update Apache to strip/redirect trailing "index.html". 2024-03-20 14:54:54 +11:00			`* ask Denver about why so many license files`
podjango: Fix linting warnings 2024-02-23 15:02:04 +11:00			`* serve a 400 in Apache for a hostname we don't explicitly support`
Handle trailing slashes in static content 2024-03-20 15:45:46 +11:00			* use `<detail>` elements for supporter page hidden sections, rather than
			`complex jQuery - or consider Alpine.js`
Add to-do file This allows me to track improvements we'd like to make, but not necessarily straight away. 2023-10-26 12:33:29 +11:00			* replace `internalNavigate` with inline flexbox layout
			`* add tests for main pages returning 200`


			`# Done`

Handle trailing slashes in static content 2024-03-20 15:45:46 +11:00			* remove `ForceCanonicalHostnameMiddleware` by ensuring canonical redirect and
			`HTTPS redirect is done by Apache`
Switch settings to use "the one true way" approach The advantage of this approach is that the production and dev configurations are in version control, so there's less opportunity for surprises. As advocated by Jacob Kaplan-Moss (OSCON 2011) and Two Scoops of Django book. 2024-03-20 13:29:37 +11:00			* standardise settings to replace `settings.py` and `djangocommonsettings.py`
			with `settings/prod.py` and move `SECRET_KEY` to an environment variable
Upgrade to Django 4.2 LTS 2024-03-19 22:14:20 +11:00			`* migrate to Django 4.2 LTS`
Tidy-ups 2024-03-18 17:59:56 +11:00			* review `apache2` directory - may be unused
			`* add deployment script that runs migrations and collects static files`
Update to-dos 2023-10-26 13:24:17 +11:00			* switch `ParameterValidator` to use `SECRET_KEY` if possible to minimize
			`non-standard settings`
Add to-do file This allows me to track improvements we'd like to make, but not necessarily straight away. 2023-10-26 12:33:29 +11:00			`* install staticfiles app`