westfarn
139f375f73
Unit Tests / test (push) Successful in 11s
## Summary - Closes #18 - Logout POST was failing CSRF Origin checks on HTTPS because `CSRF_TRUSTED_ORIGINS` was unset (Django 5) - Derive trusted origins from `DJANGO_ALLOWED_HOSTS` (override via `DJANGO_CSRF_TRUSTED_ORIGINS`) - Trust reverse-proxy TLS headers in prod/beta (`SECURE_PROXY_SSL_HEADER`, secure cookies) ## Test plan - [x] `python manage.py test public.tests.CsrfTrustedOriginsTests public.tests.LogoutCsrfTests` - [ ] Deploy, log in on aimloperations.com, click Log Out → redirect home, no 403 - [ ] Confirm login still works after deploy Reviewed-on: #19
44 lines
1.4 KiB
Bash
44 lines
1.4 KiB
Bash
# Server-side production environment file.
|
|
# Copy to /home/westfarn/Documents/django_live_sites/Company_Site/.env
|
|
# This file is NOT deployed from git — rsync excludes .env so server values persist.
|
|
|
|
# Environment level: dev | beta | prod
|
|
DJANGO_ENV=prod
|
|
DJANGO_DEBUG=false
|
|
DJANGO_SECRET_KEY=replace-with-a-long-random-secret
|
|
DJANGO_ALLOWED_HOSTS=aimloperations.com,www.aimloperations.com
|
|
# Optional override; when unset, https:// origins are derived from DJANGO_ALLOWED_HOSTS.
|
|
# DJANGO_CSRF_TRUSTED_ORIGINS=https://aimloperations.com,https://www.aimloperations.com
|
|
|
|
# Logging (optional override; defaults: dev=DEBUG, beta=INFO, prod=WARNING)
|
|
# DJANGO_LOG_LEVEL=WARNING
|
|
|
|
# PostgreSQL — DATABASE_URL is used by Django; DB_* are used by the db container.
|
|
DATABASE_URL=postgres://company_site:replace-db-password@db:5432/company_site
|
|
DB_NAME=company_site
|
|
DB_USER=company_site
|
|
DB_PASSWORD=replace-db-password
|
|
|
|
# Analytics
|
|
TIANJI_ENABLED=true
|
|
TIANJI_TRACKER_URL=https://tianji.aimloperations.com/tracker.js
|
|
TIANJI_WEBSITE_ID=replace-with-production-website-id
|
|
|
|
# reCAPTCHA
|
|
RECAPTCHA_PUBLIC_KEY=replace-with-production-public-key
|
|
RECAPTCHA_PRIVATE_KEY=replace-with-production-private-key
|
|
|
|
# Email (SMTP2GO)
|
|
EMAIL_HOST=mail.smtp2go.com
|
|
EMAIL_HOST_USER=replace-with-smtp-user
|
|
EMAIL_HOST_PASSWORD=replace-with-smtp-password
|
|
EMAIL_PORT=2525
|
|
EMAIL_USE_TLS=true
|
|
|
|
# Gunicorn
|
|
GUNICORN_WORKERS=2
|
|
GUNICORN_BIND=0.0.0.0:8000
|
|
|
|
# Host port exposed by docker-compose.prod.yml
|
|
WEB_PORT=8000
|