Django 5 rejects HTTPS POSTs without CSRF_TRUSTED_ORIGINS; derive them from ALLOWED_HOSTS and trust the reverse-proxy TLS headers in prod/beta.
44 lines
1.4 KiB
Bash
44 lines
1.4 KiB
Bash
# Server-side production environment file.
|
|
# Copy to /home/westfarn/Documents/django_live_sites/Company_Site/.env
|
|
# This file is NOT deployed from git — rsync excludes .env so server values persist.
|
|
|
|
# Environment level: dev | beta | prod
|
|
DJANGO_ENV=prod
|
|
DJANGO_DEBUG=false
|
|
DJANGO_SECRET_KEY=replace-with-a-long-random-secret
|
|
DJANGO_ALLOWED_HOSTS=aimloperations.com,www.aimloperations.com
|
|
# Optional override; when unset, https:// origins are derived from DJANGO_ALLOWED_HOSTS.
|
|
# DJANGO_CSRF_TRUSTED_ORIGINS=https://aimloperations.com,https://www.aimloperations.com
|
|
|
|
# Logging (optional override; defaults: dev=DEBUG, beta=INFO, prod=WARNING)
|
|
# DJANGO_LOG_LEVEL=WARNING
|
|
|
|
# PostgreSQL — DATABASE_URL is used by Django; DB_* are used by the db container.
|
|
DATABASE_URL=postgres://company_site:replace-db-password@db:5432/company_site
|
|
DB_NAME=company_site
|
|
DB_USER=company_site
|
|
DB_PASSWORD=replace-db-password
|
|
|
|
# Analytics
|
|
TIANJI_ENABLED=true
|
|
TIANJI_TRACKER_URL=https://tianji.aimloperations.com/tracker.js
|
|
TIANJI_WEBSITE_ID=replace-with-production-website-id
|
|
|
|
# reCAPTCHA
|
|
RECAPTCHA_PUBLIC_KEY=replace-with-production-public-key
|
|
RECAPTCHA_PRIVATE_KEY=replace-with-production-private-key
|
|
|
|
# Email (SMTP2GO)
|
|
EMAIL_HOST=mail.smtp2go.com
|
|
EMAIL_HOST_USER=replace-with-smtp-user
|
|
EMAIL_HOST_PASSWORD=replace-with-smtp-password
|
|
EMAIL_PORT=2525
|
|
EMAIL_USE_TLS=true
|
|
|
|
# Gunicorn
|
|
GUNICORN_WORKERS=2
|
|
GUNICORN_BIND=0.0.0.0:8000
|
|
|
|
# Host port exposed by docker-compose.prod.yml
|
|
WEB_PORT=8000
|