Django 6.1 + Docker ASMR Programming - No Talking

mkdir empresa && cd empresa

# Dockerfile
FROM python:3.14-slim

COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/

ENV PYTHONUNBUFFERED=1 \
    UV_LINK_MODE=copy \
    UV_PROJECT_ENVIRONMENT=/opt/venv

WORKDIR /app

# compose.yaml
services:
  db:
    image: postgres:18-alpine
    env_file: .env
    volumes:
      - pgdata:/var/lib/postgresql

  mailpit:
    image: axllent/mailpit
    ports:
      - "8025:8025"

  web:
    build: .
    command: uv run python manage.py runserver 0.0.0.0:8000
    env_file: .env
    volumes:
      - .:/app
      - venv:/opt/venv
    ports:
      - "8000:8000"
    depends_on:
      - db
      - mailpit

volumes:
  pgdata:
  venv:

# .env
SECRET_KEY=troque-esta-chave
DEBUG=True
ALLOWED_HOSTS=localhost,127.0.0.1
POSTGRES_DB=empresa
POSTGRES_USER=postgres
POSTGRES_PASSWORD=troque-esta-senha
POSTGRES_HOST=db
EMAIL_HOST=mailpit
EMAIL_PORT=1025

docker compose build
docker compose run --rm web uv init --bare --name empresa
docker compose run --rm web uv add django psycopg[binary] python-decouple

# pyproject.toml
[project]
name = "empresa"
version = "0.1.0"
requires-python = ">=3.14"
dependencies = [
    "django>=6.1.1",
    "psycopg[binary]>=3.3.6",
    "python-decouple>=3.8",
]

docker compose run --rm web uv run django-admin startproject config .
docker compose run --rm web uv run python manage.py startapp core
docker compose run --rm web uv run python manage.py startapp accounts
docker compose run --rm web uv run python manage.py startapp person

mkdir -p core/templates/core
mkdir -p accounts/templates/registration
mkdir -p person/templates/person
mkdir -p person/management/commands
touch person/management/__init__.py person/management/commands/__init__.py

# config/settings.py
from pathlib import Path

from decouple import Csv, config

BASE_DIR = Path(__file__).resolve().parent.parent

SECRET_KEY = config('SECRET_KEY')

DEBUG = config('DEBUG', default=False, cast=bool)

ALLOWED_HOSTS = config('ALLOWED_HOSTS', default='', cast=Csv())

INSTALLED_APPS = [
    'core',
    'accounts',
    'person',
    'django.contrib.admin',
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.messages',
    'django.contrib.staticfiles',
]

# MIDDLEWARE, ROOT_URLCONF, TEMPLATES e WSGI_APPLICATION: iguais ao gerado.

DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.postgresql',
        'NAME': config('POSTGRES_DB'),
        'USER': config('POSTGRES_USER'),
        'PASSWORD': config('POSTGRES_PASSWORD'),
        'HOST': config('POSTGRES_HOST', default='db'),
        'PORT': 5432,
    }
}

# AUTH_PASSWORD_VALIDATORS: igual ao gerado.

LANGUAGE_CODE = 'pt-br'

TIME_ZONE = 'America/Sao_Paulo'

USE_I18N = True

USE_TZ = True

STATIC_URL = 'static/'

# Email
# https://docs.djangoproject.com/en/6.1/topics/email/#topic-email-configuration

MAILERS = {
    'default': {
        'BACKEND': 'django.core.mail.backends.smtp.EmailBackend',
        'OPTIONS': {
            'host': config('EMAIL_HOST', default='localhost'),
            'port': config('EMAIL_PORT', default=1025, cast=int),
        },
    },
}

AUTH_USER_MODEL = 'accounts.User'

LOGIN_URL = 'login'
LOGIN_REDIRECT_URL = 'core:index'
LOGOUT_REDIRECT_URL = 'core:index'

DEFAULT_FROM_EMAIL = 'nao-responda@empresa.com'

# core/models.py
from django.db import models


class TimeStampedModel(models.Model):
    """Guarda quando o registro foi criado e quando foi alterado pela última vez."""

    created = models.DateTimeField('criado em', auto_now_add=True)
    modified = models.DateTimeField('modificado em', auto_now=True)

    class Meta:
        abstract = True


class ActiveModel(models.Model):
    """Permite desativar um registro sem apagá-lo do banco."""

    active = models.BooleanField('ativo', default=True)

    class Meta:
        abstract = True

# core/views.py
from django.shortcuts import render


def index(request):
    return render(request, 'core/index.html')

# core/urls.py
from django.urls import path

from . import views

app_name = 'core'

urlpatterns = [
    path('', views.index, name='index'),
]

<!-- core/templates/base.html -->
<!DOCTYPE html>
<html lang="pt-br" data-theme="dark">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>{% block title %}Empresa{% endblock %}</title>
  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@picocss/pico@2/css/pico.min.css">
  <style>nav form { margin: 0; }</style>
</head>
<body>
  <header class="container">
    <nav>
      <ul>
        <li><a href="{% url 'core:index' %}"><strong>Empresa</strong></a></li>
      </ul>
      <ul>
        {% if user.is_authenticated %}
          <li><a href="{% url 'person:employee_list' %}">Funcionários</a></li>
          <li>{{ user.email }}</li>
          <li>
            <form method="post" action="{% url 'logout' %}">
              {% csrf_token %}
              <button type="submit" class="outline">Sair</button>
            </form>
          </li>
        {% else %}
          <li><a href="{% url 'login' %}" role="button">Entrar</a></li>
        {% endif %}
      </ul>
    </nav>
  </header>
  <main class="container">
    {% block content %}{% endblock %}
  </main>
</body>
</html>

<!-- core/templates/core/index.html -->
{% extends 'base.html' %}

{% block content %}
  <h1>Bem-vindo à Empresa</h1>
  {% if user.is_authenticated %}
    <p>Você entrou como <strong>{{ user.email }}</strong>.</p>
    <p>
      Grupos:
      {% for group in user.groups.all %}
        <mark>{{ group.name }}</mark>
      {% empty %}
        nenhum
      {% endfor %}
    </p>
  {% else %}
    <p>Entre com o seu e-mail para ver os funcionários.</p>
  {% endif %}
{% endblock %}

<!-- core/templates/403.html -->
{% extends 'base.html' %}

{% block content %}
  <article>
    <h2>Acesso negado</h2>
    <p>Você não tem permissão para acessar esta página.</p>
    <a href="{% url 'core:index' %}">Voltar para o início</a>
  </article>
{% endblock %}

# config/urls.py
from django.contrib import admin
from django.urls import include, path

urlpatterns = [
    path('', include('core.urls')),
    path('accounts/', include('accounts.urls')),
    path('employees/', include('person.urls')),
    path('admin/', admin.site.urls),
]

# accounts/models.py
from django.contrib.auth.models import AbstractUser, BaseUserManager
from django.db import models


class UserManager(BaseUserManager):
    """Cria usuários usando o e-mail no lugar do username."""

    use_in_migrations = True

    def _create_user(self, email, password, **extra_fields):
        if not email:
            raise ValueError('O e-mail é obrigatório.')
        email = self.normalize_email(email)
        user = self.model(email=email, **extra_fields)
        user.set_password(password)
        user.save(using=self._db)
        return user

    def create_user(self, email, password=None, **extra_fields):
        extra_fields.setdefault('is_staff', False)
        extra_fields.setdefault('is_superuser', False)
        return self._create_user(email, password, **extra_fields)

    def create_superuser(self, email, password=None, **extra_fields):
        extra_fields.setdefault('is_staff', True)
        extra_fields.setdefault('is_superuser', True)
        return self._create_user(email, password, **extra_fields)


class User(AbstractUser):
    """Usuário que entra com o e-mail: o username sai e o e-mail vira único."""

    username = None
    email = models.EmailField('e-mail', unique=True)

    USERNAME_FIELD = 'email'
    REQUIRED_FIELDS = []

    objects = UserManager()

    def __str__(self):
        return self.email

# accounts/forms.py
from django.contrib.auth.forms import AdminUserCreationForm, UserChangeForm

from .models import User


class CustomUserCreationForm(AdminUserCreationForm):
    class Meta:
        model = User
        fields = ('email',)


class CustomUserChangeForm(UserChangeForm):
    class Meta:
        model = User
        fields = ('email',)

# accounts/admin.py
from django.contrib import admin
from django.contrib.auth.admin import UserAdmin

from .forms import CustomUserChangeForm, CustomUserCreationForm
from .models import User


@admin.register(User)
class CustomUserAdmin(UserAdmin):
    add_form = CustomUserCreationForm
    form = CustomUserChangeForm
    ordering = ('email',)
    list_display = ('email', 'first_name', 'last_name', 'is_staff')
    search_fields = ('email', 'first_name', 'last_name')
    fieldsets = (
        (None, {'fields': ('email', 'password')}),
        ('Dados pessoais', {'fields': ('first_name', 'last_name')}),
        ('Permissões', {'fields': ('is_active', 'is_staff', 'is_superuser', 'groups')}),
    )
    add_fieldsets = (
        (None, {'classes': ('wide',), 'fields': ('email', 'password1', 'password2')}),
    )

# accounts/urls.py
from django.urls import include, path

urlpatterns = [
    path('', include('django.contrib.auth.urls')),
]

<!-- accounts/templates/registration/login.html -->
{% extends 'base.html' %}

{% block content %}
  <article>
    <h2>Entrar</h2>
    <form method="post">
      {% csrf_token %}
      {{ form }}
      <button type="submit">Entrar</button>
    </form>
    <a href="{% url 'password_reset' %}">Esqueci minha senha</a>
  </article>
{% endblock %}

<!-- accounts/templates/registration/password_reset_form.html -->
{% extends 'base.html' %}

{% block content %}
  <article>
    <h2>Esqueci minha senha</h2>
    <p>Digite o seu e-mail e enviaremos um link para criar uma senha nova.</p>
    <form method="post">
      {% csrf_token %}
      {{ form }}
      <button type="submit">Enviar link</button>
    </form>
  </article>
{% endblock %}

<!-- accounts/templates/registration/password_reset_done.html -->
{% extends 'base.html' %}

{% block content %}
  <article>
    <h2>Confira o seu e-mail</h2>
    <p>Se o e-mail estiver cadastrado, você vai receber o link em instantes.</p>
  </article>
{% endblock %}

<!-- accounts/templates/registration/password_reset_confirm.html -->
{% extends 'base.html' %}

{% block content %}
  <article>
    {% if validlink %}
      <h2>Nova senha</h2>
      <form method="post">
        {% csrf_token %}
        {{ form }}
        <button type="submit">Salvar senha</button>
      </form>
    {% else %}
      <h2>Link inválido</h2>
      <p>Este link já foi usado ou expirou.</p>
      <a href="{% url 'password_reset' %}">Pedir um link novo</a>
    {% endif %}
  </article>
{% endblock %}

<!-- accounts/templates/registration/password_reset_complete.html -->
{% extends 'base.html' %}

{% block content %}
  <article>
    <h2>Senha alterada</h2>
    <p>Pronto! Agora é só entrar com a senha nova.</p>
    <a href="{% url 'login' %}" role="button">Entrar</a>
  </article>
{% endblock %}

# person/models.py
from django.db import models

from core.models import ActiveModel, TimeStampedModel


class Employee(TimeStampedModel, ActiveModel):
    """Funcionário da empresa. O salário só aparece para quem tem a permissão view_salary."""

    class Role(models.TextChoices):
        SELLER = 'seller', 'Vendedor'
        MANAGER = 'manager', 'Gerente'

    name = models.CharField('nome', max_length=100)
    email = models.EmailField('e-mail', unique=True)
    role = models.CharField('cargo', max_length=20, choices=Role)
    salary = models.DecimalField('salário', max_digits=10, decimal_places=2)
    hired_on = models.DateField('admissão')

    class Meta:
        ordering = ('name',)
        verbose_name = 'funcionário'
        verbose_name_plural = 'funcionários'
        permissions = [
            ('view_salary', 'Pode ver o salário'),
        ]

    def __str__(self):
        return self.name

# person/forms.py
from django import forms

from .models import Employee


class EmployeeForm(forms.ModelForm):
    class Meta:
        model = Employee
        fields = ('name', 'email', 'role', 'salary', 'hired_on', 'active')

# person/views.py
"""CRUD de funcionários.

O PermissionRequiredMixin manda quem não entrou para o login e devolve 403 para quem
entrou mas não tem a permissão.
"""
from django.contrib.auth.mixins import PermissionRequiredMixin
from django.urls import reverse_lazy
from django.views.generic import CreateView, DeleteView, ListView, UpdateView

from .forms import EmployeeForm
from .models import Employee


class EmployeeListView(PermissionRequiredMixin, ListView):
    model = Employee
    permission_required = 'person.view_employee'


class EmployeeCreateView(PermissionRequiredMixin, CreateView):
    model = Employee
    form_class = EmployeeForm
    permission_required = 'person.add_employee'
    success_url = reverse_lazy('person:employee_list')


class EmployeeUpdateView(PermissionRequiredMixin, UpdateView):
    model = Employee
    form_class = EmployeeForm
    permission_required = 'person.change_employee'
    success_url = reverse_lazy('person:employee_list')


class EmployeeDeleteView(PermissionRequiredMixin, DeleteView):
    model = Employee
    permission_required = 'person.delete_employee'
    success_url = reverse_lazy('person:employee_list')

# person/urls.py
from django.urls import path

from . import views

app_name = 'person'

urlpatterns = [
    path('', views.EmployeeListView.as_view(), name='employee_list'),
    path('new/', views.EmployeeCreateView.as_view(), name='employee_create'),
    path('<int:pk>/edit/', views.EmployeeUpdateView.as_view(), name='employee_update'),
    path('<int:pk>/delete/', views.EmployeeDeleteView.as_view(), name='employee_delete'),
]

# person/admin.py
from django.contrib import admin

from .models import Employee


@admin.register(Employee)
class EmployeeAdmin(admin.ModelAdmin):
    list_display = ('name', 'email', 'role', 'active')
    list_filter = ('role', 'active')
    search_fields = ('name', 'email')

<!-- person/templates/person/employee_list.html -->
{% extends 'base.html' %}

{% block content %}
  <h2>Funcionários</h2>
  {% if perms.person.add_employee %}
    <a href="{% url 'person:employee_create' %}" role="button">Novo funcionário</a>
  {% endif %}
  <table>
    <thead>
      <tr>
        <th>Nome</th>
        <th>E-mail</th>
        <th>Cargo</th>
        {% if perms.person.view_salary %}<th>Salário</th>{% endif %}
        <th></th>
      </tr>
    </thead>
    <tbody>
      {% for employee in object_list %}
        <tr>
          <td>{{ employee.name }}</td>
          <td>{{ employee.email }}</td>
          <td>{{ employee.get_role_display }}</td>
          {% if perms.person.view_salary %}<td>R$ {{ employee.salary }}</td>{% endif %}
          <td>
            {% if perms.person.change_employee %}
              <a href="{% url 'person:employee_update' employee.pk %}">Editar</a>
            {% endif %}
            {% if perms.person.delete_employee %}
              <a href="{% url 'person:employee_delete' employee.pk %}">Excluir</a>
            {% endif %}
          </td>
        </tr>
      {% endfor %}
    </tbody>
  </table>
{% endblock %}

<!-- person/templates/person/employee_form.html -->
{% extends 'base.html' %}

{% block content %}
  <article>
    <h2>{% if object %}Editar{% else %}Novo{% endif %} funcionário</h2>
    <form method="post">
      {% csrf_token %}
      {{ form }}
      <button type="submit">Salvar</button>
    </form>
  </article>
{% endblock %}

<!-- person/templates/person/employee_confirm_delete.html -->
{% extends 'base.html' %}

{% block content %}
  <article>
    <h2>Excluir funcionário</h2>
    <p>Tem certeza que deseja excluir <strong>{{ object }}</strong>?</p>
    <form method="post">
      {% csrf_token %}
      <button type="submit" class="secondary">Excluir</button>
      <a href="{% url 'person:employee_list' %}">Cancelar</a>
    </form>
  </article>
{% endblock %}

# person/management/commands/create_groups.py
from django.contrib.auth.models import Group, Permission
from django.core.management.base import BaseCommand

# Cada grupo recebe só as permissões do app person listadas aqui.
GROUPS = {
    'Vendedor': ['view_employee', 'add_employee'],
    'Gerente': [
        'view_employee',
        'add_employee',
        'change_employee',
        'delete_employee',
        'view_salary',
    ],
}


class Command(BaseCommand):
    help = 'Cria os grupos Vendedor e Gerente com as permissões de cada um.'

    def handle(self, *args, **options):
        for name, codenames in GROUPS.items():
            group, _ = Group.objects.get_or_create(name=name)
            permissions = Permission.objects.filter(
                content_type__app_label='person',
                codename__in=codenames,
            )
            group.permissions.set(permissions)
            self.stdout.write(self.style.SUCCESS(f'{name}: {permissions.count()} permissões'))

docker compose up -d

docker compose exec web uv run python manage.py makemigrations
docker compose exec web uv run python manage.py migrate
docker compose exec web uv run python manage.py create_groups

Vendedor: 2 permissões
Gerente: 5 permissões

docker compose exec web uv run python manage.py shell

seller = User.objects.create_user(email='vendedor@empresa.com', password='senha12345')
seller.groups.add(Group.objects.get(name='Vendedor'))
manager = User.objects.create_user(email='gerente@empresa.com', password='senha12345')
manager.groups.add(Group.objects.get(name='Gerente'))
User.objects.create_superuser(email='admin@empresa.com', password='senha12345')
Employee.objects.create(name='Ana Souza', email='ana@empresa.com', role='manager', salary=9500, hired_on='2021-03-01')
Employee.objects.create(name='Bruno Lima', email='bruno@empresa.com', role='seller', salary=4200, hired_on='2023-07-10')
Employee.objects.create(name='Carla Mendes', email='carla@empresa.com', role='seller', salary=4350, hired_on='2024-02-05')
exit()