Public/bloonsworld
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

finally solved the csrf bug thing omg

Browse Source
This commit is contained in:
Walter 2025-02-21 03:22:17 +01:00
parent dbd8425fc7
commit 3e275180cc
3 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.env.example
View File

@ -1,4 +1,5 @@
DJANGO_ALLOWED_HOSTS=localhost 127.0.0.1 [::1] vf bloons.walter.lol DJANGO_ALLOWED_HOSTS=localhost 127.0.0.1 [::1] vf bloons.walter.lol
DJANGO_CSRF_TRUSTED_ORIGINS=bloons.walter.lol
DJANGO_SECRET_KEY=password123 DJANGO_SECRET_KEY=password123
DJANGO_DEBUG=1 DJANGO_DEBUG=1
SQL_ENGINE=django.db.backends.postgresql SQL_ENGINE=django.db.backends.postgresql

2
app/settings/settings.py
View File

@ -31,7 +31,7 @@ def load_insecure_key():
SECRET_KEY = os.environ.get("DJANGO_SECRET_KEY") or load_insecure_key() SECRET_KEY = os.environ.get("DJANGO_SECRET_KEY") or load_insecure_key()
ALLOWED_HOSTS = os.environ.get("DJANGO_ALLOWED_HOSTS", "*").split(" ") ALLOWED_HOSTS = os.environ.get("DJANGO_ALLOWED_HOSTS", "*").split(" ")
CSRF_TRUSTED_ORIGINS = list(f"https://{x.replace('https://', '')}" for x in os.environ.get("DJANGO_ALLOWED_HOSTS", "*").split(" ")) CSRF_TRUSTED_ORIGINS = list(f"https://{x.replace('https://', '')}" for x in os.environ.get("DJANGO_CSRF_TRUSTED_ORIGINS", "*").split(" "))
SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https") SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
print(f"{DEBUG=}") print(f"{DEBUG=}")

1
docker-compose-example.yml
View File

@ -14,6 +14,7 @@ services:
- DJANGO_SECRET_KEY - DJANGO_SECRET_KEY
- DJANGO_ALLOWED_HOSTS - DJANGO_ALLOWED_HOSTS
- DJANGO_DEBUG - DJANGO_DEBUG
- DJANGO_CSRF_TRUSTED_ORIGINS
- SQL_ENGINE - SQL_ENGINE
- SQL_DATABASE - SQL_DATABASE
- SQL_USER - SQL_USER