deploy(cloud-run): migrate from Fly.io to GCP Cloud Run, port settings

- Dockerfile: rebuild as linux/amd64 two-stage image; remove Fly volume
  mounts and gosu; collectstatic at build time with placeholder SECRET_KEY
- settings.py: remove IS_FLY/FLY_APP_NAME detection; DATABASE_URL-first
  with SQLite fallback for local dev; Cloud Run ALLOWED_HOSTS via K_SERVICE;
  CSRF origins updated; MEDIA_ROOT simplified
- data.json: full SQLite fixture dump (72 objects) for Neon blog_db seeding
- portfolio: css, template, and templatetag improvements from prior work

Author: ericgitangu

Dockerfile

@@ -1,59 +1,46 @@
-# Stage 1: Build stage
-FROM python:3.11-slim as builder
+FROM --platform=linux/amd64 python:3.11-slim AS builder
 
 WORKDIR /app
 
-# Install build dependencies
 RUN apt-get update && apt-get install -y --no-install-recommends \
     build-essential \
     libpq-dev \
     && rm -rf /var/lib/apt/lists/*
 
-# Create virtual environment
 RUN python -m venv /opt/venv
 ENV PATH="/opt/venv/bin:$PATH"
 
-# Install Python dependencies
 COPY requirements.txt .
 RUN pip install --no-cache-dir --upgrade pip && \
     pip install --no-cache-dir -r requirements.txt && \
     pip install --no-cache-dir gunicorn dj-database-url
 
-# Stage 2: Production stage
-FROM python:3.11-slim
+FROM --platform=linux/amd64 python:3.11-slim
 
-# Set environment variables
 ENV PYTHONDONTWRITEBYTECODE=1 \
     PYTHONUNBUFFERED=1 \
     PATH="/opt/venv/bin:$PATH" \
     PORT=8000
 
 WORKDIR /app
 
-# Install runtime dependencies only
 RUN apt-get update && apt-get install -y --no-install-recommends \
     libpq5 \
     && rm -rf /var/lib/apt/lists/* \
     && useradd --create-home --shell /bin/bash appuser
 
-# Copy virtual environment from builder
 COPY --from=builder /opt/venv /opt/venv
-
-# Copy application code
 COPY --chown=appuser:appuser . .
 
-# Create directories for static and media files
-RUN mkdir -p /app/staticfiles /data/media && \
-    chown -R appuser:appuser /app /data
+RUN mkdir -p /app/staticfiles /app/uploads && \
+    chown -R appuser:appuser /app
 
-# Collect static files
-RUN python manage.py collectstatic --noinput --clear
+# collectstatic needs a non-empty SECRET_KEY at build time; not the production key
+RUN SECRET_KEY=collectstatic-placeholder python manage.py collectstatic --noinput --clear
 
-# Switch to non-root user
 USER appuser
-
-# Expose port
 EXPOSE 8000
 
-# Run gunicorn
-CMD ["gunicorn", "--bind", "0.0.0.0:8000", "--workers", "2", "--threads", "4", "--worker-class", "gthread", "--worker-tmp-dir", "/dev/shm", "--access-logfile", "-", "--error-logfile", "-", "blog.wsgi:application"]
+CMD ["gunicorn", "--bind", "0.0.0.0:8000", "--workers", "2", "--threads", "4", \
+     "--worker-class", "gthread", "--worker-tmp-dir", "/dev/shm", \
+     "--access-logfile", "-", "--error-logfile", "-", "blog.wsgi:application"]

blog/settings.py

@@ -3,33 +3,26 @@
 
 BASE_DIR = Path(__file__).resolve().parent.parent
 
-# Detect Fly.io environment
-FLY_APP_NAME = os.getenv('FLY_APP_NAME')
-IS_FLY = FLY_APP_NAME is not None
-
 SECRET_KEY = os.getenv('SECRET_KEY')
 
 DEBUG = os.getenv('DEBUG', 'False').lower() == 'true'
 
 ALLOWED_HOSTS = [
     'localhost',
     '127.0.0.1',
-    '.fly.dev',
-    '.internal',
     'blog.ericgitangu.com',
-    'deveric-blog.azurewebsites.net',
     'developer.ericgitangu.com',
+    '.run.app',
 ]
 
-# Allow Fly.io internal health check IPs
-if IS_FLY:
+# Cloud Run sets K_SERVICE; allow all on managed infra for health checks
+if os.getenv('K_SERVICE'):
     ALLOWED_HOSTS.append('*')
 
 CSRF_TRUSTED_ORIGINS = [
-    'https://*.fly.dev',
     'https://blog.ericgitangu.com',
-    'https://deveric-blog.azurewebsites.net',
     'https://developer.ericgitangu.com',
+    'https://*.run.app',
 ]
 
 INSTALLED_APPS = [
@@ -73,27 +66,23 @@
 
 WSGI_APPLICATION = 'blog.wsgi.application'
 
-# Database configuration
-if IS_FLY:
-    # Fly.io provides DATABASE_URL
-    import dj_database_url
+# Database — DATABASE_URL takes precedence (Cloud Run / CI); fallback to SQLite for local dev
+import dj_database_url as _dj_db_url
+
+_db_url = os.getenv('DATABASE_URL')
+if _db_url:
     DATABASES = {
-        'default': dj_database_url.config(
-            default=os.getenv('DATABASE_URL'),
+        'default': _dj_db_url.config(
+            default=_db_url,
             conn_max_age=600,
             conn_health_checks=True,
         )
     }
 else:
-    # Local development or Azure config
     DATABASES = {
         'default': {
-            'ENGINE': 'django.db.backends.postgresql_psycopg2',
-            'NAME': os.getenv('DBNAME'),
-            'USER': os.getenv('DBUSER'),
-            'PASSWORD': os.getenv('DBPASS'),
-            'HOST': os.getenv('DBHOST'),
-            'PORT': os.getenv('DBPORT'),
+            'ENGINE': 'django.db.backends.sqlite3',
+            'NAME': BASE_DIR / 'db.sqlite3',
         }
     }
 
@@ -124,10 +113,7 @@
 }
 
 # Media files
-if IS_FLY:
-    MEDIA_ROOT = '/data/media'  # Fly Volume mount point
-else:
-    MEDIA_ROOT = BASE_DIR / 'uploads'
+MEDIA_ROOT = BASE_DIR / 'uploads'
 
 MEDIA_URL = '/media/'
 
@@ -136,8 +122,7 @@
 # Security settings for production
 if not DEBUG:
     SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
-    # SSL redirect handled by Fly.io proxy (force_https in fly.toml)
-    # Disable Django's redirect to allow internal health checks
+    # Cloud Run handles TLS termination upstream; Django must not redirect
     SECURE_SSL_REDIRECT = False
     SESSION_COOKIE_SECURE = True
     CSRF_COOKIE_SECURE = True