feat: add django-whitenoise

.gitignore

@@ -10,3 +10,6 @@ wheels/
 .venv
 
 .env
+
+# Collected static files (generated by `manage.py collectstatic`)
+staticfiles/

highscore/app/settings.py

@@ -41,6 +41,7 @@ SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 
 MIDDLEWARE = [
     "django.middleware.security.SecurityMiddleware",
+    "whitenoise.middleware.WhiteNoiseMiddleware",
     "django.contrib.sessions.middleware.SessionMiddleware",
     "django.middleware.common.CommonMiddleware",
     "django.middleware.csrf.CsrfViewMiddleware",
@@ -118,4 +119,30 @@ USE_TZ = True
 # Static files (CSS, JavaScript, Images)
 # https://docs.djangoproject.com/en/6.0/howto/static-files/
 
-STATIC_URL = "static/"
+# STATIC_URL/MEDIA_URL are literal strings; Django never prepends SCRIPT_NAME to
+# them, so the prefix must be added manually for the admin assets to load under
+# the /scores sub-path.
+STATIC_URL = f"{FORCE_SCRIPT_NAME.rstrip('/')}/static/"
+STATIC_ROOT = BASE_DIR / "staticfiles"
+
+# WhiteNoise serves static files directly from the app (no separate web server
+# needed), with compression and far-future cache headers. In production the
+# manifest backend hashes filenames for cache-busting (requires collectstatic);
+# locally we skip the manifest and serve straight from the finders so no
+# collectstatic step is needed.
+STORAGES = {
+    "default": {
+        "BACKEND": "django.core.files.storage.FileSystemStorage",
+    },
+    "staticfiles": {
+        "BACKEND": (
+            "whitenoise.storage.CompressedStaticFilesStorage"
+            if DEBUG
+            else "whitenoise.storage.CompressedManifestStaticFilesStorage"
+        ),
+    },
+}
+
+# Serve static files from the app dirs in development (we run under daphne, which
+# does not auto-serve static like runserver does).
+WHITENOISE_USE_FINDERS = DEBUG

highscore/scores/api/views.py

@@ -32,7 +32,7 @@ def submit_score(
     x_game_version: GameVersionHeader = None,
 ) -> None:
     version = resolve_version(x_game_version)
-    Score.objects.create(username=payload.username, points=payload.points, version=version)
+    Score.objects.create(username=payload.username.strip(), points=payload.points, version=version)
 
 
 @router.get("", response=list[ScoreOut])

makefile

@@ -6,3 +6,4 @@ help:
 
 setup:
 	/opt/uv/uv run python highscore/manage.py migrate
+	/opt/uv/uv run python highscore/manage.py collectstatic

pyproject.toml

@@ -17,6 +17,7 @@ dependencies = [
     "django-ninja>=1.6.2",
     "psycopg>=3.3.4",
     "pydantic-settings>=2.14.1",
+    "whitenoise>=6.12.0",
 ]
 
 [project.scripts]

uv.lock

@@ -791,6 +791,7 @@ dependencies = [
     { name = "django-ninja" },
     { name = "psycopg" },
     { name = "pydantic-settings" },
+    { name = "whitenoise" },
 ]
 
 [package.dev-dependencies]
@@ -811,6 +812,7 @@ requires-dist = [
     { name = "django-ninja", specifier = ">=1.6.2" },
     { name = "psycopg", specifier = ">=3.3.4" },
     { name = "pydantic-settings", specifier = ">=2.14.1" },
+    { name = "whitenoise", specifier = ">=6.12.0" },
 ]
 
 [package.metadata.requires-dev]
@@ -1001,6 +1003,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/bd/6e/95b0e537de1f4d4301f76f944642c6da50d1511cc7b3d64dc418a66c7509/wcwidth-0.8.1-py3-none-any.whl", hash = "sha256:f453740b1e4a4f3291faa37944c555d71056c4da08d59809b307ef4feba695c8", size = 323092, upload-time = "2026-06-08T05:57:21.413Z" },
 ]
 
+[[package]]
+name = "whitenoise"
+version = "6.12.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/cb/2a/55b3f3a4ec326cd077c1c3defeee656b9298372a69229134d930151acd01/whitenoise-6.12.0.tar.gz", hash = "sha256:f723ebb76a112e98816ff80fcea0a6c9b8ecde835f8ddda25df7a30a3c2db6ad", size = 26841, upload-time = "2026-02-27T00:05:42.028Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/db/eb/d5583a11486211f3ebd4b385545ae787f32363d453c19fffd81106c9c138/whitenoise-6.12.0-py3-none-any.whl", hash = "sha256:fc5e8c572e33ebf24795b47b6a7da8da3c00cff2349f5b04c02f28d0cc5a3cc2", size = 20302, upload-time = "2026-02-27T00:05:40.086Z" },
+]
+
 [[package]]
 name = "zope-interface"
 version = "8.5"