welton/RRBEC
1
0
Fork 0
mirror of https://github.com/welton89/RRBEC.git synced 2026-04-06 05:55:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: configure CSRF_TRUSTED_ORIGINS via environment variables for production domains

Browse Source
This commit is contained in:
Welton Moura
2026-04-05 12:20:40 -03:00
parent aec59990a7
commit df83dac830
2 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
docker-compose.yml
View File

@@ -11,6 +11,7 @@ services:
environment: environment:
- DEBUG=True - DEBUG=True
- ALLOWED_HOSTS=* - ALLOWED_HOSTS=*
- CSRF_TRUSTED_ORIGINS=https://raulrockbar.com.br,https://api.raulrockbar.com.br
volumes: volumes:
- /DATA/AppData/rrbec-api-django:/app - /DATA/AppData/rrbec-api-django:/app

6
gestaoRaul/settings.py
View File

@@ -39,7 +39,11 @@ SECRET_KEY = os.getenv(
# SECURITY WARNING: don't run with debug turned on in production! # SECURITY WARNING: don't run with debug turned on in production!
DEBUG = os.getenv("DEBUG", "True") == "True" DEBUG = os.getenv("DEBUG", "True") == "True"
ALLOWED_HOSTS = ["*"] CSRF_TRUSTED_ORIGINS = (
os.getenv("CSRF_TRUSTED_ORIGINS", "").split(",")
if os.getenv("CSRF_TRUSTED_ORIGINS")
else []
)
# Application definition # Application definition