A website template for hackathons run by IEEE University of Toronto Student Branch.
- Luke Cheseldine
- Mustafa Abdulrahman (PM)
- Karandeep Lubana
- Terry Luan
- Dalia Mahidashti
- Carmen Chau
- Samuel Liu
- Daniel Qiu
- Ishika Mittal
- Kenny Cui
- Himanish Jindal
- Abubukker Chaudhary
- Natalie Chan
- Python 3.8 or higher
- Docker
- Docker Compose
For local development, create a Python virtual environment.
We recommend you use Anaconda (or Miniconda), as it makes managing virtual environments with different Python versions easier:
$ conda create -n hackathon_site python=3.8
This will create a new conda environment named hackathon_site
(you may choose a different name). Then, activate the environment:
$ conda activate hackathon_site
Alternatively, you can use venv provided under the standard library, but note that you must already have Python 3.8 installed first:
$ python3.8 -m venv venv
How you activate the environment depends on your operating system, consult the docs for further information.
Install the requirements in hackathon_site/requirements.txt
. This should be done regularly as new requirements are added, not just the first time you set up.
$ cd hackathon_site
$ pip install -r requirements.txt
In order to run the django and react development servers locally (or run tests), the following environment variables are used. Those in bold are required.
Variable | Required value | Default | Description |
---|---|---|---|
DEBUG | 1 | 0 | Run Django in debug mode. Required to run locally. |
SECRET_KEY | Something secret, create your own | None | Secret key for cryptographic signing. Must not be shared. Required. |
DB_HOST | 127.0.0.1 | Postgres database host. | |
DB_USER | postgres | User on the postgres database. Must have permissions to create and modify tables. | |
DB_PASSWORD | Password for the postgres user. | ||
DB_PORT | 5432 | Port the postgres server is open on. | |
DB_NAME | hackathon_site | Postgres database name. | |
REDIS_URI | 172.17.0.1:6379/1 | Redis URI. <host>:<port>/<database> . |
|
REACT_APP_DEV_SERVER_URL | http://localhost:8000 | Path to the django development server, used by React. Update the port if you aren't using the default 8000. | |
RECAPTCHA_PUBLIC_KEY | Something | A recaptcha public key that will skip the challenge | Key info: https://www.google.com/recaptcha/ |
RECAPTCHA_PRIVATE_KEY | Something | A recaptcha private key that will skip the challenge | Key info: https://www.google.com/recaptcha/ |
Specifying SECRET_KEY
is still required to run tests, because the settings file expects it to be set. DEBUG
is forced to False
by Django.
In the GitHub action for Python tests, DEBUG
is set to be 1
. SECRET_KEY
is taken from the DJANGO_SECRET_KEY
repository secret. In order to run tests on a fork of this repo, you will need to create this secret yourself.
Before the development server can be ran, the database must be running. This project is configured to use PostgreSQL.
You may install Postgres on your machine if you wish, but we recommend running it locally using docker. A docker-compose service is available in development/docker-compose.yml. To run all the services, including the database:
$ docker-compose -f development/docker-compose.yml up -d
To shut down the database and all other services:
$ docker-compose -f development/docker-compose.yml down
To run only the database service:
$ docker-compose -f development/docker-compose.yml up -d postgres
The postgres container uses a volume mounted to development/.postgres-data/
for persistent data storage, so you can safely stop the service without losing any data in your local database.
A note about security: by default, the Postgres service is run with trust authentication for convenience, so no passwords are required even if they are set. You should not store any sensitive information in your local database, or broadcast your database host publicly with these settings.
Migrations are Django's way of managing changes to the database structure. Before you run the development server, you should run any unapplied migrations; this should be done every time you pull an update to the codebase, not just the first time you set up:
$ cd hackathon_site
$ python manage.py migrate
This application also relies on a cache, for which we use Redis.
You may install Redis on your machine if you wish, but we recommend running it locally using docker. A Redis service is available in development/docker-compose.yml. To run all the services, including the database:
$ docker-compose -f development/docker-compose.yml up -d
To run only the redis service:
$ docker-compose -f development/docker-compose.yml up -d redis
If you run multiple instances of this application in production using Redis through Docker (perhaps in Swarm mode), you should make sure that the Redis databases used between applications do not conflict. The easiest way to do this is to change the database id in the Redis URI environment variable, eg to 172.17.0.1:6379/2
.
Finally, you can run the development server, by default on port 8000. From above, you should already be in the top-level hackathon_site
directory:
$ python manage.py runserver
If you would like to run on a port other than 8000, specify a port number after runserver
.
In order to access most of the functionality of the site (the React dashboard or otherwise), you will need to have user accounts to test with.
To start, create an admin user. This will give you access to the admin site, and will bypass all Django permissions checks:
$ python manage.py createsuperuser
Once a superuser is created (and the Django dev server is running), you can log in to the admin site at http://localhost:8000/admin
. Note that creating a superuser does not give it a first or last name, so you should set those from the admin site otherwise some parts of the site may behave weird. Our regular sign up flow also assumes that username and email are the same, so we recommend creating your superuser accordingly.
The easiest way to add new users is via the admin site, through the "Users" link of the "Authentication and Authorization" panel. When adding a user, you will be prompted for only a username and a password. The react site uses email to log in, so make sure to click "Save and continue editing" and add a first name, last name, and email address.
Profiles are used by participants who have either been accepted or waitlisted. Some features of the React dashboard require the user to have a profile. This can be done through the "Profiles" link of the "Event" panel on the admin site. Click "Add profile", select a user from the dropdown, either add them to an existing team (if you have any) or click the green "+" to create a team, pick a status, fill out any other required fields, and click save.
Django tests are run using Django's test system, based on the standard python unittest
module.
A custom settings settings module is available for testing, which tells Django to use an in-memory sqlite3 database instead of the postgresql database and to use an in-memory cache instead of Redis. To run the full test suite locally:
$ cd hackathon_site
$ python manage.py test --settings=hackathon_site.settings.ci
Django has fixtures which are hardcoded files (YAML/JSON) that provide initial data for models. They are placed in a fixtures folder under each app.
More information at this link.
To load fixtures into the database, use the command python manage.py loaddata <fixturename>
where <fixturename>
is the name of the fixture file you’ve created. Each time you run loaddata, the data will be read from the fixture and re-loaded into the database. Note this means that if you change one of the rows created by a fixture and then run loaddata again, you’ll wipe out any changes you’ve made.
React tests are handled by Jest. To run the full suite of React tests:
$ cd hackathon_site/dashboard/frontend
$ yarn test
The top level hackathon_site folder contains the Django project that encapsulates this template.
The main project configs are in hackathon_site/hackathon_site, including the main settings file settings/__init__.py and top-level URL config.
The dashboard app contains the React project for the inventory management and hardware sign-out platform.
The event app contains the public-facing templates for the landing page.
The registration app contains models, forms, and templates for user registration, including signup and application templates. Since these templates are similar to the landing page, they may extend templates and use static files from the event
app.
Templates served from Django can be placed in any app. We use Jinja 2 as our templating engine, instead of the default Django Template Language. Within each app, Jinja 2 templates must be placed in a folder called jinja2/<app_name>/
(i.e., the full path will be hackathon_site/<app_name>/jinja2/<app_name>/
). Templates can then be referenced in views as <app_name>/your_template.html
.
Static files are placed within each app, in a folder named static/<app_name>/
(same convention as templates). For example, SCSS files for the Event app may be in hackathon_site/event/static/event/styles/scss/
. They can then be referenced in templates as <app_name>/<path to static file>
, for example event/styles/css/styles.css
(assuming the SCSS has been compiled to CSS).
To compile the SCSS automatically when you save, run following task running while you work:
$ cd hackathon_site
$ yarn run scss-watch
To compile all SCSS files at once, run:
$ yarn run scss
Django can serve static files automatically in development. In a production environment, static files must be collected:
$ python manage.py collectstatic
This will place static files in hackathon_site/static/
. These must be served separately, for example using Nginx, as Django cannot serve static files in production. Read more about how Django handles static files.
This repository is setup as a template. To read more about how to use a template and what a template repository is, see GitHub's doc page.
Before you begin, note that the main workflow file uses the pull_request_target
trigger. This means that pull requests from forks will run workflows in the base branch, and will have access to repository secrets. For the base template repo, this is not a security concern since the only secret used in tests is DJANGO_SECRET_KEY
, and is meaningless in this repository. However, an instance of this repository will likely have other secrets set. Unless you are absolutely sure that code run by workflows for pull requests, such as tests, does not have access to important secrets, you should change this trigger type back to pull_request
. This means that pull requests from forks (of your fork) will not run actions. Alternatively, if tests only need access to secret keys so they don't complain, use a different secret in the workflow files for running tests.
If you are interested in receiving updates to this template in your project, we recommend that you fork this repository into your own account or organization. This will give you the entire commit history of the project, and will allow you to make pull requests from this repository into your own to perform updates.
Unfortunately, GitHub does not allow you to fork your own repository. As a result, the forking option is not available to the owner account or organization. This means that IEEE UofT cannot use this template by forking it, and if you choose to fork your own generic copy of this template for instantiating, you will not be able to fork that fork.
Note: develop
is our default branch, but it should not be considered the most stable branch. If you want only the most stable releases, we recommend that you apply your customizations on top of the master
branch.
This is our recommended approach to instantiate this template, if forking is unavailable to you. In the end, this gives a similar result to copying the repository (below), but maintains the "generated from ieeeuoft/hackathon-template" message on GitHub. If you don't care about that, then copying is simpler.
-
Create an instance of the template by clicking "Use this template".
Note: By default, using a template creates a new repository based off only the default branch, which for this repository is
develop
. We recommend that you apply your customizations on top of the more stablemaster
branch. To do so, make sure you check "Include all branches".Creating a repository from a template flattens all commits into a single initial commit. If you never plan on merging updates from the upstream template, you may proceed in customizing your instance from here and ignore all of the following steps.
-
Clone your new instance locally via the method of your choosing.
-
In order to pull history and updates, you will need to add the original template as a remote on the git repository. Note that this only happens on your cloned instance, changing remotes has no effect on the repository you created on GitHub.
$ git remote add upstream [email protected]:ieeeuoft/hackathon-template.git
If you do not have git configured to clone over SSH, you may use the HTTPS url instead:
https://github.com/ieeeuoft/hackathon-template.git
-
Merge in whichever branch you would like to base your customizations off from upstream right away to get the history. For the rest of this example, we assume you are using
master
.$ git fetch upstream $ git merge upstream/master master --allow-unrelated-histories $ git push origin master
-
Use the repository as you see fit, by creating feature branches off of
master
. We recommend a Gitflow workflow. -
When you want to pull an update from the upstream template, we recommend merging it into a new branch so that you can review the changes, resolve any conflicts, and merge it into your base branch by a pull request for added visibility.
$ git checkout master $ git checkout -b update-from-upstream-template $ git fetch upstream $ git merge upstream/master update-from-upstream-template $ git push -u origin update-from-upstream-template
-
Make a PR on your repo to merge
update-from-upstream-template
into your base branch.
This approach is very similar to using the template, but you lose the "generated from ..." text. You gain the added benefit of keeping the entire commit history of the repository, and not having to deal with fetching it upfront.
-
Import a new repository at https://github.com/new/import. Set the old repository's clone URL to
https://github.com/ieeeuoft/hackathon-template.git
. -
Clone your new instance locally via the method of your choosing.
-
Add the original template as a remote on the git repository.
$ git remote add upstream [email protected]:ieeeuoft/hackathon-template.git
If you do not have git configured to clone over SSH, you may use the HTTPS url instead:
https://github.com/ieeeuoft/hackathon-template.git
-
Use the repository as you see fit, by creating feature branches off of
master
. We recommend a Gitflow workflow. -
When you want to pull an update from the upstream template, we recommend merging it into a new branch so that you can review the changes, resolve any conflicts, and merge it into your base branch by a pull request for added visibility.
$ git checkout master $ git checkout -b update-from-upstream-template $ git fetch upstream $ git merge upstream/master update-from-upstream-template $ git push -u origin update-from-upstream-template
-
Make a PR on your repo to merge
update-from-upstream-template
into your base branch.
This project was designed to be generic and customizable. At minimum, you will want to update templates to include your event's name and logo, but you may customize them to whatever degree you wish. See file structure for more details about templates.
Core event settings and constants, such as cutoff dates, are kept at the bottom of the settings file. These settings can be imported and used in any view, form, or in general any other python file. See the Django docs on settings to read more about how to use them.
Some settings you will definitely want to change are:
HACKATHON_NAME
- The name of your hackathon, for use in templatesDEFAULT_FROM_EMAIL
- This can be used in templates, and it will also be used by Django's email system)CONTACT_EMAIL
- By default, the same asDEFAULT_FROM_EMAIL
. The email users should contact you at, for use in templatesREGISTRATION_OPEN_DATE
- When registration opensREGISTRATION_CLOSE_DATE
- When registration closesEVENT_START_DATE
- When the event startsEVENT_END_DATE
- When the event endsMEDIA_ROOT
- The path on the server where user-uploaded files will end up, including resumes
You will also need to set the necessary settings for your email server, so that Django can send emails to users. Read about those settings here.
Near the top of the settings file, you must also set ALLOWED_HOSTS
and CORS_ORIGIN_REGEX_WHITELIST
for your domain.
For convenience, some constants have been passed into the context of all Jinja templates by default, so they can be used right away. See the Jinja2 config file for full details.
Both the Event App and Dashboard App are styled by seperate SCSS files found in their respective directories.
Warning: Deleting items in styles.css
, _mixins.scss
, and _variables.scss
will mess up styling throughout all template pages. Please read the following carefully and make sure you know what you're doing when you're modifying the aforementioned files.
Materialize is the CSS framework that the Event App uses. Review their documentation to get a further understanding of how the template is styled.
In order to determine the original source of a class, class names in kebab notation are from Materialize and class names in camel case are found in styles.scss
. We recommend you follow this convention when adding your own classes.
SCSS mixins are stored in _mixin.scss
. Currently, there are 2 mixin functions: @mixin flexPosition
to be used if you want to style a class with CSS Flexbox and @mixin responsive
to be used in place of Media Queries. If you are not familiar with mixins, example usages of both mixins are in styles.scss
.
Color, font family, and font size variables are stored in _variables.scss
. Edit the values in the map to customize for your hackathons branding. For further organization, the variables are stored into maps and called using SCSS functions.
For example:
$fonts: (
body: "Nunito",
header: "Roboto",
);
@function font($fonts-name) {
@return map-get($fonts, $fonts-name); //(name of map, key)
}
Instead of calling...
h1 { font-family: $header; }
...you should get the $header
variable through the font
function:
h1 { font-family: font(header); }
This template may be deployed however you wish, we recommend you read Django's documentation on deploying.
Gunicorn is included in requirements.txt
already, and deploying through gunicorn with a reverse proxy such as Nginx is our recommended approach. The template is fully configured to be deployed under a subdirectory of your website through a reverse proxy, provided that the SCRIPT_NAME
header is set. You may also set the path prefix explicitly in the settings file with FORCE_SCRIPT_NAME
.
Static files are configured to be served under the static/
path, and are expected to be in a folder called static
in the django project root (adjacent to manage.py
). In production, you should run python manage.py collectstatic
to move all static files into the static
folder, and configure your web server to serve them directly. Read more about managing static files in Django in the docs.
User-uploaded files are handled differently in Django than static files. We recommend you read the pages on Django file uploads and the security of user-uploaded content before proceeding.
This template is configured to expect user-uploaded content to be served at media/
, per the MEDIA_URL
setting (you are free to change this, for example to an off-domain URL). User-uploaded content will be put in the folder defined by MEDIA_ROOT
, which defaults to /var/www/media/
and should almost certainly be configured for your server. Whatever you set it to, make sure the folder exists and is accessible by Django.
Some user-uploaded content, such as resumes, should not be served to the general public. Others, such as pictures of hardware, should be. Hence, we recommend the following:
- Upload all public-facing files with the prefix
uploads/
, so that they end up atmedia/uploads/
. Configure your web server to serve this folder, e.g./var/www/media/uploads/
, tomedia/uploads/
under your domain. - Upload all private files to another prefix, e.g.
resumes/
, so that they end up at e.g.media/resumes/
. For any users that should be able to see these files (such as staff members in this case), have a view that validates the user's permission, then reads in the data from disk and returns it directly in the HTTP response. Keep in mind that there are performance downsides to this approach.