feat: configure CSRF_TRUSTED_ORIGINS via environment variables for production domains

docker-compose.yml

@@ -11,6 +11,7 @@ services:
     environment:
       - DEBUG=True
       - ALLOWED_HOSTS=*
+      - CSRF_TRUSTED_ORIGINS=https://raulrockbar.com.br,https://api.raulrockbar.com.br
 
     volumes:
       - /DATA/AppData/rrbec-api-django:/app

gestaoRaul/settings.py

@@ -39,7 +39,11 @@ SECRET_KEY = os.getenv(
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = os.getenv("DEBUG", "True") == "True"
 
-ALLOWED_HOSTS = ["*"]
+CSRF_TRUSTED_ORIGINS = (
+    os.getenv("CSRF_TRUSTED_ORIGINS", "").split(",")
+    if os.getenv("CSRF_TRUSTED_ORIGINS")
+    else []
+)
 
 
 # Application definition