Browse Source

Add settings required for SSL

pull/350/head
Michael Perel 5 years ago
committed by Clemens Wolff
parent
commit
482e308649
1 changed files with 3 additions and 0 deletions
  1. 3
      app/app/settings.py

3
app/app/settings.py

@ -266,6 +266,9 @@ if DATABASES['default'].get('ENGINE') == 'sql_server.pyodbc':
# Honor the 'X-Forwarded-Proto' header for request.is_secure()
SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
SESSION_COOKIE_SECURE = env.bool('SESSION_COOKIE_SECURE', False)
CSRF_COOKIE_SECURE = env.bool('CSRF_COOKIE_SECURE', False)
CSRF_TRUSTED_ORIGINS = env.list('CSRF_TRUSTED_ORIGINS', [])
# Allow all host headers
# ALLOWED_HOSTS = ['*']

Loading…
Cancel
Save