fix: add CSRF_TRUSTED_ORIGINS to env example, remove Azure vars
This commit is contained in:
+2
-9
@@ -8,6 +8,8 @@ SECRET_KEY=change-me-to-a-long-random-string
|
|||||||
DEBUG=False
|
DEBUG=False
|
||||||
# Space-separated list of allowed hosts/domains
|
# Space-separated list of allowed hosts/domains
|
||||||
ALLOWED_HOSTS=localhost busmanager.yourdomain.com
|
ALLOWED_HOSTS=localhost busmanager.yourdomain.com
|
||||||
|
# Comma-separated list of trusted origins for CSRF (required when behind HTTPS reverse proxy)
|
||||||
|
CSRF_TRUSTED_ORIGINS=https://busmanager.yourdomain.com
|
||||||
|
|
||||||
# Database (Postgres - managed by Docker)
|
# Database (Postgres - managed by Docker)
|
||||||
SQL_DATABASE=busmanager
|
SQL_DATABASE=busmanager
|
||||||
@@ -25,15 +27,6 @@ GUNICORN_TIMEOUT=120
|
|||||||
EMAIL_HOST=
|
EMAIL_HOST=
|
||||||
EMAIL_PORT=25
|
EMAIL_PORT=25
|
||||||
|
|
||||||
# =============================================================
|
|
||||||
# Optional: Azure AD SSO
|
|
||||||
# Leave blank to use Django local auth instead
|
|
||||||
# =============================================================
|
|
||||||
AZURE_CLIENT_ID=
|
|
||||||
AZURE_CLIENT_SECRET=
|
|
||||||
AZURE_REDIRECT_URI=
|
|
||||||
AZURE_AUTHORITY=
|
|
||||||
|
|
||||||
# =============================================================
|
# =============================================================
|
||||||
# Optional: Telstra SMS API
|
# Optional: Telstra SMS API
|
||||||
# Leave blank to disable SMS features
|
# Leave blank to disable SMS features
|
||||||
|
|||||||
Reference in New Issue
Block a user