Update production.py

ImperialCollegeLondon · Feb 22, 2024 · 6fde982 · 6fde982
1 parent 2369b7a
commit 6fde982
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/djangomain/settings/production.py b/djangomain/settings/production.py
@@ -3,6 +3,9 @@
 from .settings import *  # noqa: F401, F403
 
 DEBUG = False
-ALLOWED_HOSTS = ["172.31.14.31"]
+ALLOWED_HOSTS = os.environ["ALLOWED_HOSTS"].split(",")
+SECURE_BROWSER_XSS_FILTER = True
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
+SECURE_HSTS_SECONDS = 15552000
 SECRET_KEY = os.environ["SECRET_KEY"]
 DATABASES["default"]["PASSWORD"] = os.environ["POSTGRES_PASSWORD"]  # noqa: F405