mohamad
26 lines
640 B
Python
26 lines
640 B
Python
import os
|
|
|
|
from .base import * # noqa: F401, F403
|
|
|
|
SECRET_KEY = os.environ["DJANGO_SECRET_KEY"]
|
|
|
|
DEBUG = False
|
|
|
|
ALLOWED_HOSTS = os.environ.get("ALLOWED_HOSTS", "").split(",")
|
|
|
|
SECURE_HSTS_SECONDS = 31536000
|
|
SECURE_HSTS_INCLUDE_SUBDOMAINS = True
|
|
SECURE_HSTS_PRELOAD = True
|
|
SECURE_SSL_REDIRECT = os.environ.get("SECURE_SSL_REDIRECT", "True") == "True"
|
|
SESSION_COOKIE_SECURE = True
|
|
CSRF_COOKIE_SECURE = True
|
|
SECURE_BROWSER_XSS_FILTER = True
|
|
SECURE_CONTENT_TYPE_NOSNIFF = True
|
|
X_FRAME_OPTIONS = "DENY"
|
|
|
|
CSRF_TRUSTED_ORIGINS = [
|
|
origin.strip()
|
|
for origin in os.environ.get("CSRF_TRUSTED_ORIGINS", "").split(",")
|
|
if origin.strip()
|
|
]
|