add default entries creation on post-migrate signal and refactor application model logic

app_gateway/setup_defaults.py

@@ -0,0 +1,33 @@
+import logging
+
+logger = logging.getLogger(__name__)
+
+
+def create_default_entries(**kwargs):
+    from app_gateway.models import AccessPolicy, Application, ApplicationPolicy, RESERVED_APP_NAME
+
+    # Default access policies
+    public_policy, created = AccessPolicy.objects.get_or_create(
+        policy_type='public',
+        defaults={'display_name': 'Public'},
+    )
+    if created:
+        logger.info("Created default AccessPolicy: Public")
+
+    deny_policy, created = AccessPolicy.objects.get_or_create(
+        policy_type='deny',
+        defaults={'display_name': 'Deny'},
+    )
+    if created:
+        logger.info("Created default AccessPolicy: Deny")
+
+    # Reserved wireguard_webadmin application
+    app, created = Application.objects.get_or_create(
+        display_name=RESERVED_APP_NAME,
+        defaults={'upstream': 'http://wireguard-webadmin:8000'},
+    )
+    if created:
+        logger.info("Created default Application: %s", RESERVED_APP_NAME)
+        if not ApplicationPolicy.objects.filter(application=app).exists():
+            ApplicationPolicy.objects.create(application=app, default_policy=public_policy)
+            logger.info("Assigned default policy 'Public' to application '%s'", RESERVED_APP_NAME)