PinLin/url_shortener
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Pass CSRF_TRUSTED_ORIGINS via environment variable

Browse Source
This commit is contained in:
Pin Lin
2025-10-20 23:12:37 +08:00
parent f48aa5b794
commit d52b3d1476
3 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
docker-compose.yml
View File

@@ -22,6 +22,7 @@ services:
- postgres_password - postgres_password
environment: environment:
SECRET_KEY_FILE: /run/secrets/web_secret_key SECRET_KEY_FILE: /run/secrets/web_secret_key
CSRF_TRUSTED_ORIGINS:
POSTGRES_HOST: postgres POSTGRES_HOST: postgres
POSTGRES_PORT: 5432 POSTGRES_PORT: 5432
POSTGRES_DATABASE: url_shortener POSTGRES_DATABASE: url_shortener

1
example.env
View File

@@ -1,4 +1,5 @@
SECRET_KEY= SECRET_KEY=
CSRF_TRUSTED_ORIGINS=
POSTGRES_HOST=localhost POSTGRES_HOST=localhost
POSTGRES_PORT=5432 POSTGRES_PORT=5432

1
url_shortener/settings.py
View File

@@ -31,6 +31,7 @@ SECRET_KEY = os.getenv("SECRET_KEY", "")
DEBUG = os.getenv("DEBUG", "0") != "0" DEBUG = os.getenv("DEBUG", "0") != "0"
ALLOWED_HOSTS = ["*"] ALLOWED_HOSTS = ["*"]
CSRF_TRUSTED_ORIGINS = os.getenv("CSRF_TRUSTED_ORIGINS", "").split(",")
SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https") SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")