DjangoPlay is a modular enterprise backend showcasing Django at its best — domain-driven design, a dedicated service layer, fail-closed permissions via a centralized policy engine, append-only audit logging, and subdomain routing. Built for Python & Django developers to learn, design and explore more.
Every system decision reflects production constraints — fail-closed permissions, append-only history, decoupled message brokers, and zero-latency SSE token streaming.
Pluggable provider registry for xAI (Grok), OpenAI, OpenRouter free models, and Ollama. Stream SSE responses with ephemeral user keys decoded safely in memory.
Deny-by-default access evaluation. Missing permission checks raise immediate configuration errors rather than accidental passes.
100% state change traceability with JSON delta snapshots, automated PII masking, and decoupled Celery event bus processing.
Subdomains for docs, issues, and learning routed cleanly via django-hosts, guarded by Turnstile bot defense and AbuseIPDB filtering.
Bot & abuse filtering before reaching Django
First point of contact. Inspects all inbound HTTPS traffic across subdomains, performing Cloudflare Turnstile bot verification and AbuseIPDB reputation filtering before proxying to the Nginx gateway.
Strict domain isolation via django-hosts (issues, docs, learning)
Cloudflare Turnstile token validation on all public endpoints
Automated AbuseIPDB reputation scoring & edge drops
Search or filter apps across business, security, financial, and AI service domains.
Multi-provider streaming (SSE) chat assistant with BYOK token headers, ephemeral decryption, OpenRouter catalog, and rate-limit guardrails.
Connect directly to the live deployed platform, read comprehensive documentation on the docs subdomain, inspect issues and release notes, or review open-source PyPI packages.