managecommand 0.1.0

Run, schedule, and audit Django management commands without SSH access

managecommand

Python client for ManageCommand - run, schedule, and audit Django management commands without SSH access.

Installation

pip install managecommand

Quick Start

1. Add to your INSTALLED_APPS:

INSTALLED_APPS = [
    # ...
    'managecommand',
]

2. Add your API key to settings.py:

MANAGECOMMAND_API_KEY = "dc_your_api_key_here"

3. Start the runner:

python manage.py managecommand start

The runner will connect to ManageCommand, sync your available commands, and start polling for executions.

Configuration

API key

Your project's API key (get this from the ManageCommand dashboard)

MANAGECOMMAND_API_KEY = "dc_..."

Enabled (allowed) commands

Enable additional commands:

import managecommand
MANAGECOMMAND_ALLOWED_COMMANDS = tuple(
    *managecommand.DEFAULT_ALLOWED_COMMANDS,
    "my_custom_command",
    "another_command",
)

Or explicitly allow only specific commands (skip the default ones):

MANAGECOMMAND_ALLOWED_COMMANDS = (
    "my_custom_command",
    "another_command",
)

Order does not matter.

By default, only commands in DEFAULT_ALLOWED_COMMANDS can be executed remotely:

Default value:

DEFAULT_ALLOWED_COMMANDS = (
    # Database
    "migrate", "showmigrations", "dbbackup", "createcachetable",
    # Static files
    "collectstatic", "findstatic",
    # Maintenance
    "clearsessions", "check", "sendtestemail", "diffsettings",
    # Data
    "dumpdata", "inspectdb",
    # Testing
    "test",
    # django-extensions
    "show_urls", "validate_templates", "clear_cache",
    # Wagtail
    "fixtree", "publish_scheduled", "update_index",
)

DISCLAIMER: This list is not fully vetted. You are encouraged to only allow commands that you trust and have vetted yourself.

Alternative - Blocklist Mode

Alternative to the "ALLOWED" list is the "DISALLOWED" list.

In this mode all commands are allowed except for the ones in the blocklist.

This mode is inherently less secure because newly added commands are automatically allowed.

CAUTION: Any new commands will by allowed by default in this mode!

MANAGECOMMAND_USE_BLOCKLIST = True

Default value:

DEFAULT_DISALLOWED_COMMANDS = (
    # Database destruction
    "flush", "sqlflush", "reset_db", "dbrestore", "loaddata",
    # Interactive shells
    "shell", "shell_plus", "dbshell",
    # Development servers
    "runserver", "runserver_plus", "testserver",
    # Security sensitive
    "createsuperuser", "changepassword",
    # File modifications
    "makemigrations", "squashmigrations",
)

DISCLAIMER: This list is not exhaustive. You are responsible for ensuring that only safe commands are allowed.

Optional / Advanced Settings

# Server URL (default: https://app.managecommand.com)
MANAGECOMMAND_SERVER_URL = "https://app.managecommand.com"

# Runner heartbeat interval in seconds (default: 30, minimum: 5)
MANAGECOMMAND_HEARTBEAT_INTERVAL = 30

# HTTP request timeout in seconds (default: 30)
MANAGECOMMAND_REQUEST_TIMEOUT = 30

# Max retries for failed requests (default: 3)
MANAGECOMMAND_MAX_RETRIES = 3

# Hosts allowed to use HTTP instead of HTTPS (default: localhost only)
MANAGECOMMAND_ALLOW_HTTP_HOSTS = ['localhost', '127.0.0.1', '::1']

Metadata-Only Mode

For commands that produce sensitive output (credentials, PII) or very high-volume output, you can enable metadata-only mode. In this mode, the command executes normally but stdout/stderr are not captured or stored.

# Commands that always run in metadata-only mode
MANAGECOMMAND_METADATAONLY_COMMANDS = (
    "generate_api_keys",
    "export_user_data",
    "sync_large_dataset",
)

Additionally, the dashboard can also enable metadata-only mode on a per-command basis via the command configuration settings. Either the client setting or the dashboard setting will trigger metadata-only mode.

In metadata-only mode:

• The command executes normally
• Exit code and duration are still tracked
• Output shows: "(metadata-only mode, no output captured)"

Running the Runner

Current architecture supports only 1 runner per project.

Foreground

python manage.py managecommand start

Starts the runner in the foreground. Press Ctrl+C to stop.

This is the recommended option for Kubernetes, systemd, Docker, and similar process managers that handle lifecycle and restarts.

Background (detached)

python manage.py managecommand start -d

Starts the runner in the background.

This is recommended for development and testing only. It can be used in production where other process managers are not available. YMMV.

Managing the Runner

Use these commands to manage a runner.

Works whether the runner is running in the foreground or background.

# Check if the runner is running
python manage.py managecommand status

# Stop the background runner
python manage.py managecommand stop [--force]

# Restart the runner
python manage.py managecommand restart [-d]

License

MIT