Add some secure settings

2020-08-21 13:40:02 +02:00 · 2020-08-21 13:40:02 +02:00 · d53d4f9823
parent 02f64aef12
commit d53d4f9823
1 changed files with 4 additions and 0 deletions
--- a/blog/settings.py
+++ b/blog/settings.py
@ -53,6 +53,10 @@ HOSTS = os.getenv("HOSTS")
 if HOSTS:
    ALLOWED_HOSTS.extend(HOSTS.split(";"))

+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
+SESSION_COOKIE_SECURE = not DEBUG
+CSRF_COOKIE_SECURE = not DEBUG
+

 # Application definition