From 5407d35779768c3de5e86875646e4ca6a62e6fdc Mon Sep 17 00:00:00 2001 From: Aron Brown Date: Sat, 30 Jul 2022 10:03:58 -0400 Subject: [PATCH] Update settings.py (#284) Add CSRF_TRUSTED_ORIGINS Django config settings and set it to environment variable TA_HOST. This should fix login issues behind reverse proxies. --- tubearchivist/config/settings.py | 1 + 1 file changed, 1 insertion(+) diff --git a/tubearchivist/config/settings.py b/tubearchivist/config/settings.py index 569eed62..50c3b164 100644 --- a/tubearchivist/config/settings.py +++ b/tubearchivist/config/settings.py @@ -31,6 +31,7 @@ SECRET_KEY = PW_HASH.hexdigest() DEBUG = bool(environ.get("DJANGO_DEBUG")) ALLOWED_HOSTS = [i.strip() for i in environ.get("TA_HOST").split()] +CSRF_TRUSTED_ORIGINS = [i.strip() for i in environ.get("TA_HOST").split()] # Application definition