Files
com2care_website/.env.example
T
mohamad 4bcb5f196d fix(security): trust deployed CSRF origin
The live hostname is comp2care.com while the previous configuration only trusted com2care.com. Always include both production domain variants so stale environment overrides cannot block admin login.
2026-09-24 09:21:33 +03:30

19 lines
692 B
Bash

DJANGO_SETTINGS_MODULE=config.settings.production
DJANGO_SECRET_KEY=replace-with-a-long-random-production-secret
DEBUG=False
ALLOWED_HOSTS=localhost,127.0.0.1,0.0.0.0,com2care.com,www.com2care.com,comp2care.com,www.comp2care.com
CSRF_TRUSTED_ORIGINS=http://localhost:8000,https://com2care.com,https://www.com2care.com,https://comp2care.com,https://www.comp2care.com
POSTGRES_DB=com2care
POSTGRES_USER=com2care_user
POSTGRES_PASSWORD=replace-with-a-strong-database-password
POSTGRES_HOST=db
POSTGRES_PORT=5432
SECURE_SSL_REDIRECT=False
DJANGO_SUPERUSER_USERNAME=admin
DJANGO_SUPERUSER_EMAIL=admin@com2care.com
DJANGO_SUPERUSER_PASSWORD=cmosV6Tw46Odv7UN
DJANGO_SUPERUSER_SYNC_PASSWORD=False