feat(admin): palette + interface

highscore/app/settings.py

@@ -23,8 +23,15 @@ ALLOWED_HOSTS = env.allowed_hosts
 
 # Application definition
 
+# admin_interface (and its colorfield dependency) must precede the admin app to
+# override its templates. PaletteAdminConfig subclasses AdminConfig, so it *is*
+# django.contrib.admin with a custom site that powers the Ctrl/Cmd+K palette;
+# PaletteConfig must precede it so palette's admin/base.html override wins.
 INSTALLED_APPS = [
-    "django.contrib.admin",
+    "admin_interface",
+    "colorfield",
+    "palette.apps.PaletteConfig",
+    "palette.apps.PaletteAdminConfig",
     "django.contrib.auth",
     "django.contrib.contenttypes",
     "django.contrib.sessions",
@@ -34,6 +41,11 @@ INSTALLED_APPS = [
     *env.installed_apps,
 ]
 
+# Required by admin_interface: it renders related-object popups as modals inside
+# same-origin iframes, and W019 warns about the X-Frame-Options that enables.
+X_FRAME_OPTIONS = "SAMEORIGIN"
+SILENCED_SYSTEM_CHECKS = ["security.W019"]
+
 API_SECRET = env.api_secret
 USE_X_FORWARDED_HOST = True
 FORCE_SCRIPT_NAME = env.force_script_name