Home > Article > Backend Development > What is the correct way to read and write configuration in a Python project?
This method is very simple, but it has serious security issues. We all know that we should not The configuration is written in the code. If someone uploads our source code to github, then the database configuration is equivalent to being disclosed to the world. Of course, this simple configuration can also be used when the configuration file does not contain sensitive information. method.
to make the configuration files and code independent. The file format of json, yaml or ini is usually used to store the configuration.
Combines environment variables and python libraries to read external files. First of all, development usually does not come into contact with the generation environment, so the configuration file of the generation environment is written by operation and maintenance, and operation and maintenance will apply all After the required configuration is written, place it in the specified location on the production server, and the code reads the configuration from the specified location.
In order to facilitate unified debugging of the program, a system environment variable (XXX_CONFIG_PATH) can be agreed in advance to specify the storage path of the configuration file.
For example: export XXX_CONFIG_PATH =
/home/test/configs/config.ini This is to set temporary environment variables
查看环境变量: env 设置永久环境变量 1.在/etc/profile 的文件下编辑,所改变的环境变量是面向所有用户的 export CLASSPATH = /../...该路径为绝对路径 2.在当前用户目录下./barsh_profile文件中修改 进行修改的话,仅对当前的用户生效 vim /home/wens/.barshc export CLASSPATH = /../...该路径为绝对路径 最后使用source命令 可以直接使环境变量生效 source/home/wens/.barshc //直接跟环境变量的文件
查看环境变量: set 查看某个环境变量: set path 修改环境变量 输入 “set 变量名=变量内容”即可。比如将path设置为“d:nmake.exe”,只要输入set path="d:nmake.exe" 注意:所有的在cmd命令行下对环境变量的修改只对当前窗口有效,不是永久性的修改。也就是说当关闭此cmd命令行窗口后,将不再起作用。 永久性修改环境变量的方法有两种: 一种是直接修改注册表 另一种是通过我的电脑-〉属性-〉高级,来设置系统的环境变量(查看详细) 设置了环境变量后,需要重启 pycharm 生效
This method It is common in practice not to use files to store configuration information, but to store all configuration information in environment variables. Operations and maintenance use ansible deployment scripts to import the information that needs to be configured into environment variables before running the program.
Not using file storage strengthens the protection of configuration information such as passwords to a certain extent, but it also increases the workload of operation and maintenance, especially when the configuration needs to be modified.
In some microservice architectures, a configuration center will be specially developed. The program will directly read the configuration from online, and the management of the configuration will also be done. Develop a GUI to facilitate development and operation and maintenance.
-app -__init.py -app.py -settings -__init__.py -base.py -dev.py -prod.py
Among them, add judgment logic to determine the current environment to use the development environment Or a production environment, thus loading different configuration parameters. # settings/__init__.py
import os
# os.environ.get() 用于获取系统中的环境变量,因为在生产环境中,一般都会把一些关键性的参数写到系统的环境中。
# 所以PROFILE的值其实就是我们配置的环境变量的值。如果没有配这个值,默认走dev的配置。
# PYTHON_PRO_PROFILE = os.environ.get("PYTHON_PRO_PROFILE", "dev")
PYTHON_PRO_PROFILE = os.environ.get("PYTHON_PRO_PROFILE")
print("是开发环境还是生产环境: ", PYTHON_PRO_PROFILE)
if PYTHON_PRO_PROFILE == "dev":
from .dev import *
elif PYTHON_PRO_PROFILE == "prod":
from .prod import *
else:
raise Exception("Not supported runtime profile {}".format(PYTHON_PRO_PROFILE))
base.py stores some common configurations, and then in the development environment dev.py and the production environment prod. Import the variables of base.py in py. # settings/base.py
import os
import time
# os.path.abspath: 获取完整路径(包含文件名)
current_exec_abspath = os.path.abspath(__file__)
current_exec_dir_name, _ = os.path.split(current_exec_abspath)
current_up_dir, _ = os.path.split(current_exec_dir_name)
current_up2_dir, _ = os.path.split(current_up_dir)
print('------log dir=------', current_up2_dir)
# 日志文件路径设置
log_path = f"{current_up2_dir}/logs"
if not os.path.exists(log_path):
os.makedirs(log_path)
t = time.strftime("%Y_%m_%d")
log_path_file = f"{log_path}/interface_log_{t}.log"
dev.py:# 导入了base下所有参数
from .base import *
database = {
"protocol": "mysql+mysqlconnector",
"username": "xxxxxx",
"password": "hash string",
"port": 3306,
"database": "repo"
}
prod.py:# 导入了base下所有参数
from .base import *
database = {
"protocol": "xxxxxxxxxxx",
"username": "xxxxxxxxxxx",
"password": "xxxxxxxxxxx",
"port": 3344,
"database": "xxxx"
}
对于一些敏感信息可在环境变量里设置,通过如下方法获取,例如:
MAIL_SERVER = os.environ.get('MAIL_SERVER', 'smtp.163.com')
MAIL_USERNAME = os.environ.get('MAIL_USERNAME') or 'test'
MAIL_PASSWORD = os.environ.get('MAIL_PASSWORD') or '12345678'
The above is the detailed content of What is the correct way to read and write configuration in a Python project?. For more information, please follow other related articles on the PHP Chinese website!