21 lines
785 B
Python
21 lines
785 B
Python
from .base import * # noqa: F403
|
|
|
|
|
|
DEBUG = False
|
|
|
|
SECRET_KEY = env("SECRET_KEY") # noqa: F405
|
|
ALLOWED_HOSTS = env.list("ALLOWED_HOSTS") # noqa: F405
|
|
CSRF_TRUSTED_ORIGINS = env.list("CSRF_TRUSTED_ORIGINS", default=[]) # noqa: F405
|
|
|
|
SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
|
|
SECURE_SSL_REDIRECT = env.bool("SECURE_SSL_REDIRECT", default=True) # noqa: F405
|
|
SESSION_COOKIE_SECURE = True
|
|
CSRF_COOKIE_SECURE = True
|
|
SECURE_HSTS_SECONDS = env.int("SECURE_HSTS_SECONDS", default=60 * 60 * 24 * 30) # noqa: F405
|
|
SECURE_HSTS_INCLUDE_SUBDOMAINS = env.bool( # noqa: F405
|
|
"SECURE_HSTS_INCLUDE_SUBDOMAINS",
|
|
default=True,
|
|
)
|
|
SECURE_HSTS_PRELOAD = env.bool("SECURE_HSTS_PRELOAD", default=True) # noqa: F405
|
|
SECURE_CONTENT_TYPE_NOSNIFF = True
|
|
X_FRAME_OPTIONS = "DENY"
|