fix: add CSRF_TRUSTED_ORIGINS to env example, remove Azure vars

This commit is contained in:
2026-06-04 15:05:34 +10:00
parent 3cf9c853a6
commit 01b254e8ca
+2 -9
View File
@@ -8,6 +8,8 @@ SECRET_KEY=change-me-to-a-long-random-string
DEBUG=False
# Space-separated list of allowed hosts/domains
ALLOWED_HOSTS=localhost busmanager.yourdomain.com
# Comma-separated list of trusted origins for CSRF (required when behind HTTPS reverse proxy)
CSRF_TRUSTED_ORIGINS=https://busmanager.yourdomain.com
# Database (Postgres - managed by Docker)
SQL_DATABASE=busmanager
@@ -25,15 +27,6 @@ GUNICORN_TIMEOUT=120
EMAIL_HOST=
EMAIL_PORT=25
# =============================================================
# Optional: Azure AD SSO
# Leave blank to use Django local auth instead
# =============================================================
AZURE_CLIENT_ID=
AZURE_CLIENT_SECRET=
AZURE_REDIRECT_URI=
AZURE_AUTHORITY=
# =============================================================
# Optional: Telstra SMS API
# Leave blank to disable SMS features